Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bb561199-817c-4399-8206-fc6e9901e471.roa
File:                     bb561199-817c-4399-8206-fc6e9901e471.roa (raw, json)
Hash identifier:          BKyp0nhsMbPX/Stx7vUDKSoX2lYt2yp2l4DGcnL5GB0=
Subject key identifier:   AF:D7:FC:0B:8B:12:F0:9A:BD:DB:2D:45:CE:BD:F6:38:CF:65:8D:01
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1DA7AE7DEEACC9214C8F3E3F03FEA00E10F90260
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bb561199-817c-4399-8206-fc6e9901e471.roa
Signing time:             Sun 21 Aug 2022 00:00:00 +0000
ROA not before:           Sun 21 Aug 2022 00:00:00 +0000
ROA not after:            Wed 24 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a7:ae:7d:ee:ac:c9:21:4c:8f:3e:3f:03:fe:a0:0e:10:f9:02:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug 21 00:00:00 2022 GMT
            Not After : Aug 24 23:59:59 2022 GMT
        Subject: serialNumber=cf14b3305c267190c18a49632ee87fa2d50c27a4a7bea680bda8ffc094bfd026, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2a:60:7f:8f:89:9f:a8:59:e1:08:c4:b0:f2:
                    41:82:37:11:a5:3f:a3:1f:33:d3:3e:72:b6:70:9b:
                    37:cb:b6:a5:d0:01:ec:41:a6:5e:16:2d:f4:1c:15:
                    d1:f9:93:93:73:2d:16:f3:4f:6f:0c:73:d4:f4:54:
                    d8:40:00:c2:2b:94:0d:80:57:36:9e:f9:02:fa:c7:
                    be:fc:e2:fd:a2:1e:30:40:b7:74:bb:8f:69:84:23:
                    f6:7a:d3:d4:0b:40:c7:21:ae:42:93:12:03:0a:70:
                    67:0f:27:bb:e5:46:60:ea:ed:0c:7e:e8:f0:e0:0d:
                    38:3f:d9:d3:2a:3d:ea:cb:32:95:8a:d4:7a:95:16:
                    26:ea:b0:bb:da:97:71:67:a5:c5:37:6e:39:73:7f:
                    14:63:ce:99:24:c0:48:c0:15:f8:44:32:2c:20:85:
                    79:b2:9b:77:c1:4f:f5:71:52:28:f4:81:f9:17:0e:
                    6b:a7:a8:bf:f7:38:26:0d:b9:45:5c:b5:cd:a3:99:
                    04:46:c5:3e:09:c0:a7:41:80:5d:e3:8e:f1:e9:28:
                    2a:fb:83:ac:b6:75:3f:e6:ff:86:37:8a:15:36:e2:
                    bb:78:ac:79:4a:e2:6e:aa:f3:bd:bc:b4:ea:2f:c5:
                    47:37:21:7d:ff:7e:15:01:bf:ba:c3:2e:89:37:30:
                    11:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D7:FC:0B:8B:12:F0:9A:BD:DB:2D:45:CE:BD:F6:38:CF:65:8D:01
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bb561199-817c-4399-8206-fc6e9901e471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:29:ed:bd:e5:93:d4:dd:b5:84:29:e9:9b:84:02:13:81:99:
         c5:cf:06:e5:49:4f:8e:a7:57:14:16:9c:1e:e9:5c:aa:04:ee:
         4c:17:44:c2:f5:2d:0e:d6:34:13:d4:ed:7c:8c:a7:cf:94:cb:
         7c:dd:c6:14:88:2e:bb:39:58:fe:b9:29:de:3d:b1:02:7d:8c:
         ad:68:18:1b:82:ff:12:15:ae:c0:81:1a:36:c5:09:91:81:37:
         ff:e3:59:3f:e1:62:fa:6a:65:68:54:ca:78:e1:4c:13:c7:94:
         43:a3:bd:06:73:ea:d6:1d:a4:36:b5:ab:e0:5f:7a:5f:45:41:
         12:46:cd:aa:0e:e2:5d:2c:a0:fa:f0:56:a2:27:cb:72:0d:03:
         c4:1b:8f:96:ff:a4:17:e3:f2:ca:a3:cf:aa:f3:3b:a2:39:3f:
         bd:95:f0:84:bc:e8:08:28:a6:0e:ab:80:1e:4c:36:fe:80:fe:
         a6:0f:ed:b3:1e:9b:92:94:73:db:36:33:24:d5:92:21:94:cb:
         f5:02:18:01:82:a2:9e:a2:9a:77:83:e0:e2:50:d7:93:fe:55:
         f4:a2:ce:f2:b0:4a:e1:3a:61:3b:61:27:6f:f4:85:1a:6c:41:
         a4:47:06:84:2a:b9:c2:24:b4:d7:37:74:12:cb:98:f6:04:71:
         e6:4d:67:08
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUHaeufe6sySFMjz4/A/6gDhD5AmAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIwODIxMDAwMDAwWhcNMjIwODI0MjM1OTU5
WjCBpTFJMEcGA1UEBRNAY2YxNGIzMzA1YzI2NzE5MGMxOGE0OTYzMmVlODdmYTJk
NTBjMjdhNGE3YmVhNjgwYmRhOGZmYzA5NGJmZDAyNjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMkqYH+PiZ+oWeEIxLDyQYI3EaU/ox8z0z5ytnCbN8u2pdAB7EGm
XhYt9BwV0fmTk3MtFvNPbwxz1PRU2EAAwiuUDYBXNp75AvrHvvzi/aIeMEC3dLuP
aYQj9nrT1AtAxyGuQpMSAwpwZw8nu+VGYOrtDH7o8OANOD/Z0yo96ssylYrUepUW
Juqwu9qXcWelxTduOXN/FGPOmSTASMAV+EQyLCCFebKbd8FP9XFSKPSB+RcOa6eo
v/c4Jg25RVy1zaOZBEbFPgnAp0GAXeOO8ekoKvuDrLZ1P+b/hjeKFTbiu3iseUri
bqrzvby06i/FRzchff9+FQG/usMuiTcwEZMCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBSv1/wLixLwmr3bLUXOvfY4z2WNATAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvYmI1NjExOTktODE3Yy00Mzk5LTgyMDYtZmM2ZTk5MDFlNDcxLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABop7b3lk9TdtYQp
6ZuEAhOBmcXPBuVJT46nVxQWnB7pXKoE7kwXRML1LQ7WNBPU7XyMp8+Uy3zdxhSI
Lrs5WP65Kd49sQJ9jK1oGBuC/xIVrsCBGjbFCZGBN//jWT/hYvpqZWhUynjhTBPH
lEOjvQZz6tYdpDa1q+Bfel9FQRJGzaoO4l0soPrwVqIny3INA8Qbj5b/pBfj8sqj
z6rzO6I5P72V8IS86Agopg6rgB5MNv6A/qYP7bMem5KUc9s2MyTVkiGUy/UCGAGC
op6imneD4OJQ15P+VfSizvKwSuE6YTthJ2/0hRpsQaRHBoQqucIktNc3dBLLmPYE
ceZNZwg=
-----END CERTIFICATE-----