Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/99b3954b-5298-40a6-b960-480b2cf34578.roa
File:                     99b3954b-5298-40a6-b960-480b2cf34578.roa (raw, json)
Hash identifier:          DnWtK0FD46/Lc+7AcKm5Alfx/tUzEHNoUosHT244YFA=
Subject key identifier:   DE:A7:DB:EA:08:FA:FD:F3:C1:64:3D:FA:C2:C3:15:38:2F:32:14:CB
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       49BEF3A196FC0CD343B474231FAFD0833C8E8404
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/99b3954b-5298-40a6-b960-480b2cf34578.roa
Signing time:             Sat 11 Mar 2023 00:00:00 +0000
ROA not before:           Sat 11 Mar 2023 00:00:00 +0000
ROA not after:            Tue 14 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:be:f3:a1:96:fc:0c:d3:43:b4:74:23:1f:af:d0:83:3c:8e:84:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 11 00:00:00 2023 GMT
            Not After : Mar 14 23:59:59 2023 GMT
        Subject: serialNumber=d9c5b029fd8e31b236a87fedcccdc3ff97b5f22ecd37a46b3d157b4f8e29fc5a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a4:d3:ff:83:96:43:6a:4c:a2:45:22:df:fb:
                    6d:3f:f3:16:dd:a7:44:f5:73:35:38:1c:25:ed:a2:
                    dc:1c:b8:16:6c:5d:20:7f:0b:83:01:09:13:ba:5d:
                    fb:b2:b6:29:cf:f9:51:d8:67:39:d2:42:c3:fc:ba:
                    3f:c0:d2:01:5c:eb:05:e0:5f:4e:db:99:3e:0b:fd:
                    84:93:1f:00:9c:9a:55:74:2f:c4:1f:75:43:a7:45:
                    6b:6a:b4:12:a5:ee:c2:a7:a8:f5:b4:1c:c8:9f:1a:
                    a9:4e:ef:67:63:5b:5b:ec:cf:eb:66:e4:78:ae:35:
                    4c:24:0c:7e:0b:a6:9b:16:f8:44:35:e5:0e:2a:b7:
                    97:dd:61:7e:33:a4:47:52:a5:64:5c:b2:06:78:b7:
                    83:88:c6:d5:c2:15:31:d8:df:20:e5:ce:72:02:27:
                    a1:b1:73:ba:f0:03:25:b6:88:d6:bf:9f:bb:6d:4d:
                    88:23:d0:e0:79:10:7c:5f:c5:b0:6b:35:d5:89:c4:
                    3d:13:1c:76:e0:58:65:ec:f3:d3:82:f7:02:47:be:
                    95:23:df:54:ac:f5:16:d5:23:f1:d0:81:9f:ff:5b:
                    4f:fa:5c:d9:40:06:2e:62:c1:07:70:3a:4f:0a:bd:
                    30:ce:5a:12:f1:20:b9:1d:cc:ff:92:ed:d4:44:ff:
                    26:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A7:DB:EA:08:FA:FD:F3:C1:64:3D:FA:C2:C3:15:38:2F:32:14:CB
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/99b3954b-5298-40a6-b960-480b2cf34578.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:74:53:33:ad:83:47:69:29:6e:a2:c9:ee:08:2e:09:76:f5:
         a5:09:c0:81:d7:15:b0:e6:80:c6:2d:00:57:c5:0c:64:47:21:
         a3:99:cb:43:4f:9a:4b:4f:9f:80:9d:6f:00:ec:ce:ed:42:1e:
         9a:d4:31:ee:9f:7f:01:f4:51:e3:0d:17:2d:0e:47:eb:18:7e:
         9c:ed:ce:14:b2:03:79:11:bd:a2:35:ff:03:ff:01:d3:71:60:
         69:03:63:5a:50:38:9d:da:0d:b2:57:fd:c8:30:52:dc:27:ae:
         22:92:60:a5:d3:3d:80:6f:0d:5e:0a:27:87:75:a8:90:4e:a0:
         b3:49:a6:40:4e:39:fb:1d:2b:d9:df:04:61:92:72:86:33:40:
         53:e4:d0:b9:f9:f0:f1:e6:e9:32:1b:ad:4f:26:55:a1:7a:46:
         98:41:d5:41:d6:a4:3f:01:4d:17:28:f1:32:db:8a:08:a5:7b:
         cd:f8:6a:2b:d8:de:76:65:fd:69:d3:2d:f4:d3:84:87:29:0b:
         d3:d8:5f:79:34:da:d5:ab:33:d6:b1:4f:1a:e6:eb:7a:65:0b:
         c0:9c:a5:91:80:07:3f:28:36:70:38:10:81:4e:04:3e:f5:c0:
         21:8e:c6:ad:c4:01:b2:f5:d1:46:d7:30:00:e7:d1:7f:e9:05:
         d3:b3:85:f1
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUSb7zoZb8DNNDtHQjH6/QgzyOhAQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMzExMDAwMDAwWhcNMjMwMzE0MjM1OTU5
WjCBpTFJMEcGA1UEBRNAZDljNWIwMjlmZDhlMzFiMjM2YTg3ZmVkY2NjZGMzZmY5
N2I1ZjIyZWNkMzdhNDZiM2QxNTdiNGY4ZTI5ZmM1YTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ6k0/+DlkNqTKJFIt/7bT/zFt2nRPVzNTgcJe2i3By4FmxdIH8L
gwEJE7pd+7K2Kc/5UdhnOdJCw/y6P8DSAVzrBeBfTtuZPgv9hJMfAJyaVXQvxB91
Q6dFa2q0EqXuwqeo9bQcyJ8aqU7vZ2NbW+zP62bkeK41TCQMfgummxb4RDXlDiq3
l91hfjOkR1KlZFyyBni3g4jG1cIVMdjfIOXOcgInobFzuvADJbaI1r+fu21NiCPQ
4HkQfF/FsGs11YnEPRMcduBYZezz04L3Ake+lSPfVKz1FtUj8dCBn/9bT/pc2UAG
LmLBB3A6Twq9MM5aEvEguR3M/5Lt1ET/Jm0CAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTep9vqCPr988FkPfrCwxU4LzIUyzAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvOTliMzk1NGItNTI5OC00MGE2LWI5NjAtNDgwYjJjZjM0NTc4LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAC10UzOtg0dpKW6i
ye4ILgl29aUJwIHXFbDmgMYtAFfFDGRHIaOZy0NPmktPn4CdbwDszu1CHprUMe6f
fwH0UeMNFy0OR+sYfpztzhSyA3kRvaI1/wP/AdNxYGkDY1pQOJ3aDbJX/cgwUtwn
riKSYKXTPYBvDV4KJ4d1qJBOoLNJpkBOOfsdK9nfBGGScoYzQFPk0Ln58PHm6TIb
rU8mVaF6RphB1UHWpD8BTRco8TLbigile834aivY3nZl/WnTLfTThIcpC9PYX3k0
2tWrM9axTxrm63plC8CcpZGABz8oNnA4EIFOBD71wCGOxq3EAbL10UbXMADn0X/p
BdOzhfE=
-----END CERTIFICATE-----