Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/aced17c5-ba31-4638-b7d7-7d50d0815f48.roa
File:                     aced17c5-ba31-4638-b7d7-7d50d0815f48.roa (raw, json)
Hash identifier:          1jTtNs3bPzz40uMDf6yf3u4gwk7yzxkXhZtSqIHgt7U=
Subject key identifier:   7B:CD:38:99:1B:D0:2B:27:AF:5E:A5:E9:2D:6B:DE:4A:BF:95:8B:BF
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7AF836B7D711C296B996FCD7F18D2B6848AE2615
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/aced17c5-ba31-4638-b7d7-7d50d0815f48.roa
Signing time:             Sat 17 Dec 2022 00:00:00 +0000
ROA not before:           Sat 17 Dec 2022 00:00:00 +0000
ROA not after:            Tue 20 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f8:36:b7:d7:11:c2:96:b9:96:fc:d7:f1:8d:2b:68:48:ae:26:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 17 00:00:00 2022 GMT
            Not After : Dec 20 23:59:59 2022 GMT
        Subject: serialNumber=5fc8a074a3d1418e398cf50c37f6b977660db319d3b6938f41a957683f6edb99, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0a:31:fb:a3:8b:ad:44:c2:f5:ec:94:9b:9b:
                    ba:7a:ce:f0:81:ce:9a:8d:40:bd:a6:31:14:04:ac:
                    9c:4f:c7:ff:5b:7b:b6:29:a2:60:e3:76:c5:19:3e:
                    13:32:83:f6:1a:ac:d9:ae:16:2e:d6:39:18:de:ac:
                    58:00:b4:88:6e:cb:ed:42:0f:8d:8c:48:01:82:88:
                    d1:7c:44:d7:aa:c4:42:c2:77:13:1c:f0:7a:7d:2b:
                    7b:b5:f2:b3:bd:ff:2f:4a:01:78:57:b7:ff:f4:a3:
                    63:28:8b:84:b7:51:ae:75:ac:59:5d:cf:24:11:0c:
                    70:10:8d:b3:ef:eb:88:a5:8e:c8:a3:2a:42:ab:ee:
                    5f:16:1d:7c:ba:ef:89:6c:8d:d6:7e:fe:7b:71:dc:
                    96:e7:aa:7c:5e:9e:01:99:e8:a2:b5:f4:9f:00:8d:
                    11:c6:22:9d:14:0a:c5:62:27:c2:3b:5e:35:3e:8d:
                    ec:47:d9:28:34:7b:89:84:e6:0e:03:fd:4e:f4:97:
                    b1:93:df:06:75:4c:ff:6e:52:27:cd:dd:7c:03:63:
                    e8:aa:02:b2:39:75:c5:92:34:fb:c0:ba:7b:18:6d:
                    2e:e0:92:e8:4c:e3:b1:85:cf:01:06:da:22:f4:52:
                    e6:28:62:9c:02:c7:9e:0a:a4:b3:1a:66:61:bd:cd:
                    91:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CD:38:99:1B:D0:2B:27:AF:5E:A5:E9:2D:6B:DE:4A:BF:95:8B:BF
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/aced17c5-ba31-4638-b7d7-7d50d0815f48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:08:de:aa:4d:ab:ec:75:0f:08:54:29:b1:28:aa:e5:10:2c:
         98:91:fd:ed:89:0a:45:5f:54:81:46:0f:54:25:f8:b2:ba:81:
         b3:89:75:ad:1c:2c:1e:60:aa:3e:29:28:3b:48:0c:5c:9d:9a:
         5c:ea:cd:6a:02:f5:67:cf:e3:fc:17:12:5f:6f:bb:37:f9:44:
         e9:15:e5:2c:09:f6:84:d8:bc:77:d3:4e:31:92:d4:82:78:c6:
         c2:3d:e8:a2:6f:73:d7:8e:b4:cb:97:a0:33:c2:3d:74:d6:90:
         7b:8e:48:f6:24:ec:85:c0:e9:43:f5:b9:98:81:55:7f:2d:0d:
         cb:90:46:28:ba:57:71:2d:45:13:45:64:0c:12:f3:42:0f:3f:
         24:55:d2:e6:fd:29:c8:cd:7d:71:c0:1f:44:c7:26:76:66:f3:
         0f:c8:07:30:61:10:19:25:11:a7:bf:67:b7:03:27:09:76:a9:
         d2:39:27:68:b3:62:12:18:84:46:ea:44:14:69:97:1c:64:cc:
         08:32:a0:b1:9e:b5:f4:9f:2a:56:7a:ff:ee:0b:37:c8:ef:7e:
         25:17:28:ac:ef:76:c0:33:27:61:c5:8a:79:ba:55:a7:e4:5d:
         a4:fa:c7:e1:34:21:26:0a:78:91:a8:43:ec:34:4f:08:d5:a0:
         44:7f:64:e1
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUevg2t9cRwpa5lvzX8Y0raEiuJhUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMjE3MDAwMDAwWhcNMjIxMjIwMjM1OTU5
WjCBpTFJMEcGA1UEBRNANWZjOGEwNzRhM2QxNDE4ZTM5OGNmNTBjMzdmNmI5Nzc2
NjBkYjMxOWQzYjY5MzhmNDFhOTU3NjgzZjZlZGI5OTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM0KMfuji61EwvXslJubunrO8IHOmo1AvaYxFASsnE/H/1t7timi
YON2xRk+EzKD9hqs2a4WLtY5GN6sWAC0iG7L7UIPjYxIAYKI0XxE16rEQsJ3Exzw
en0re7Xys73/L0oBeFe3//SjYyiLhLdRrnWsWV3PJBEMcBCNs+/riKWOyKMqQqvu
XxYdfLrviWyN1n7+e3HclueqfF6eAZnoorX0nwCNEcYinRQKxWInwjteNT6N7EfZ
KDR7iYTmDgP9TvSXsZPfBnVM/25SJ83dfANj6KoCsjl1xZI0+8C6exhtLuCS6Ezj
sYXPAQbaIvRS5ihinALHngqksxpmYb3NkWcCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBR7zTiZG9ArJ69epekta95Kv5WLvzAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvYWNlZDE3YzUtYmEzMS00NjM4LWI3ZDctN2Q1MGQwODE1ZjQ4LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEcI3qpNq+x1DwhU
KbEoquUQLJiR/e2JCkVfVIFGD1Ql+LK6gbOJda0cLB5gqj4pKDtIDFydmlzqzWoC
9WfP4/wXEl9vuzf5ROkV5SwJ9oTYvHfTTjGS1IJ4xsI96KJvc9eOtMuXoDPCPXTW
kHuOSPYk7IXA6UP1uZiBVX8tDcuQRii6V3EtRRNFZAwS80IPPyRV0ub9KcjNfXHA
H0THJnZm8w/IBzBhEBklEae/Z7cDJwl2qdI5J2izYhIYhEbqRBRplxxkzAgyoLGe
tfSfKlZ6/+4LN8jvfiUXKKzvdsAzJ2HFinm6VafkXaT6x+E0ISYKeJGoQ+w0TwjV
oER/ZOE=
-----END CERTIFICATE-----