Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c13bc393-2191-41bc-9e6c-b09a261af6ed.roa
File:                     c13bc393-2191-41bc-9e6c-b09a261af6ed.roa (raw, json)
Hash identifier:          NaKYD6BUURcd0UDPDhgEpyx3O73TqDHJlqkkqGZ7c1A=
Subject key identifier:   E4:D8:E2:07:E8:3F:8F:AC:F7:80:F4:7B:6C:07:6B:00:3F:95:9E:9B
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6C04CEF68B8B730554DB1DFC83FFD4A3896726
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c13bc393-2191-41bc-9e6c-b09a261af6ed.roa
Signing time:             Fri 15 Jul 2022 00:00:00 +0000
ROA not before:           Fri 15 Jul 2022 00:00:00 +0000
ROA not after:            Mon 18 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:04:ce:f6:8b:8b:73:05:54:db:1d:fc:83:ff:d4:a3:89:67:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul 15 00:00:00 2022 GMT
            Not After : Jul 18 23:59:59 2022 GMT
        Subject: serialNumber=263dca1b4ec823029bd7c547e8aec43f6e973515c0df025723d2cd989054d07a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f0:3d:d0:6d:e6:0a:c0:84:c0:a0:c5:13:ac:
                    08:d1:d5:db:13:f5:47:9b:2c:f7:8a:e2:a1:cb:36:
                    f7:1f:92:71:c6:d5:78:56:65:2a:17:38:33:71:bb:
                    47:e6:d5:3d:1a:e5:20:c0:ec:5d:b9:1f:3f:c4:7f:
                    e1:27:be:05:90:ac:73:f5:67:b0:76:0f:0f:6e:6f:
                    6b:86:d4:68:09:ba:bc:5f:a3:1e:ea:40:16:29:4d:
                    78:c3:cf:20:51:ba:6d:e1:de:12:05:67:21:5b:85:
                    cb:99:e0:b0:23:96:51:5e:bb:4a:53:b5:b9:67:be:
                    65:2a:f8:98:6d:ce:6a:4e:10:37:45:e8:7d:8c:85:
                    17:50:0d:72:bc:24:9e:ca:2e:e5:21:8c:de:bc:ee:
                    af:fc:cf:79:93:da:e3:03:30:05:c1:b4:f6:ed:60:
                    71:50:5e:0a:0d:9f:7e:3f:ca:58:79:f7:a4:ea:67:
                    ff:ba:34:7c:c4:6f:a6:57:4a:b5:54:92:ca:c0:8d:
                    9d:e9:d3:1a:35:f8:5b:49:63:7c:55:9d:75:97:ae:
                    53:68:21:e0:0e:db:2b:45:74:4a:e0:a1:78:cd:d0:
                    b8:00:46:c9:c8:3b:6e:f1:5d:2c:f6:74:b1:a3:8f:
                    3d:b0:2b:88:4f:42:6e:e6:49:84:22:46:35:8b:06:
                    04:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D8:E2:07:E8:3F:8F:AC:F7:80:F4:7B:6C:07:6B:00:3F:95:9E:9B
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c13bc393-2191-41bc-9e6c-b09a261af6ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:38:18:de:ee:b2:ce:a6:7f:c5:0d:cc:7e:ee:37:ff:dd:ed:
         d9:d3:37:4a:5c:1c:0a:5d:c6:50:e9:80:98:a9:84:be:db:53:
         2d:bf:82:12:62:4d:85:02:a5:07:43:c2:cb:d6:e2:c9:b3:f6:
         ef:04:42:7a:ce:37:b4:32:c1:db:73:00:c6:72:f6:bf:78:37:
         8d:75:e0:ea:ce:ab:3c:a3:02:1f:b3:3a:bd:17:0e:61:6e:f0:
         f3:73:bd:40:53:eb:27:c0:80:09:21:96:57:c0:ab:44:6f:2b:
         75:08:47:02:7c:53:96:f7:b8:8f:bf:9f:af:f1:f1:e6:aa:36:
         65:7c:cb:33:20:79:8a:c6:ee:73:11:bc:1b:53:31:9a:0f:13:
         c3:84:cb:17:6c:3d:a5:3b:aa:b8:36:a2:9a:f4:0d:ee:8d:1b:
         05:71:54:df:76:a0:dc:f8:99:6c:f2:f7:2f:de:41:aa:0a:5f:
         5d:f6:d2:b3:37:a4:01:af:20:4f:7b:92:78:51:cf:41:32:06:
         8d:55:25:b8:67:79:f7:c0:c2:05:d1:72:d9:bf:3e:f4:60:60:
         fc:b4:17:40:2a:f0:fa:dd:05:ec:e1:45:49:1d:78:a6:65:5c:
         da:e1:26:f8:11:0d:72:04:db:05:a3:bc:12:54:05:c8:6d:0d:
         c1:16:e7:b6
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgITbATO9ouLcwVU2x38g//Uo4lnJjANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzIyNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5NGIwOTJkODZm
YjFkN2EwZjc0ZTI4MTYxMTAeFw0yMjA3MTUwMDAwMDBaFw0yMjA3MTgyMzU5NTla
MIGlMUkwRwYDVQQFE0AyNjNkY2ExYjRlYzgyMzAyOWJkN2M1NDdlOGFlYzQzZjZl
OTczNTE1YzBkZjAyNTcyM2QyY2Q5ODkwNTRkMDdhMS0wKwYDVQQDEyQ2YWU0ZTU2
Ny02MzQ4LTRjNGYtOThhOC0wNDIyYzRjNTJmZjMxFDASBgNVBAsTC0FtYXpvbiBS
UEtJMRMwEQYDVQQKEwpBbWF6b24uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAp/A90G3mCsCEwKDFE6wI0dXbE/VHmyz3iuKhyzb3H5JxxtV4VmUq
FzgzcbtH5tU9GuUgwOxduR8/xH/hJ74FkKxz9Wewdg8Pbm9rhtRoCbq8X6Me6kAW
KU14w88gUbpt4d4SBWchW4XLmeCwI5ZRXrtKU7W5Z75lKviYbc5qThA3Reh9jIUX
UA1yvCSeyi7lIYzevO6v/M95k9rjAzAFwbT27WBxUF4KDZ9+P8pYefek6mf/ujR8
xG+mV0q1VJLKwI2d6dMaNfhbSWN8VZ11l65TaCHgDtsrRXRK4KF4zdC4AEbJyDtu
8V0s9nSxo489sCuIT0Ju5kmEIkY1iwYEIwIDAQABo4ICvjCCArowHQYDVR0OBBYE
FOTY4gfoP4+s94D0e2wHawA/lZ6bMB8GA1UdIwQYMBaAFJFE7cekDumQt/o2b/bh
fXmtxIOXMA4GA1UdDwEB/wQEAwIHgDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsG
AQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1y
cGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3
MjcyYy1hNzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzNmMjFjMmItODgyMy00
YzI0LWIyNWItNDNjODBjYjZkMWJiLzI3OGFhYjg3OGYyODMxYmIxODIzYjU4Nzk0
YjA5MmQ4NmZiMWQ3YTBmNzRlMjgxNjExLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4w
gYsGCCsGAQUFBzALhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv
bmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNkLTFhNWJlNzQ4
YmZlYS9jMTNiYzM5My0yMTkxLTQxYmMtOWU2Yy1iMDlhMjYxYWY2ZWQucm9hMIGV
BgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvYjY4YTMyZWUtNDU1ZC00ODNhLTk0M2Qt
MWE1YmU3NDhiZmVhLzRiYjhhZTVjLTEyNGMtNDJmMy04N2ZiLTRmMzRlNzRlM2Rh
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMckeDANBgkqhkiG9w0BAQsFAAOCAQEAFDgY3u6yzqZ/xQ3M
fu43/93t2dM3SlwcCl3GUOmAmKmEvttTLb+CEmJNhQKlB0PCy9biybP27wRCes43
tDLB23MAxnL2v3g3jXXg6s6rPKMCH7M6vRcOYW7w83O9QFPrJ8CACSGWV8CrRG8r
dQhHAnxTlve4j7+fr/Hx5qo2ZXzLMyB5isbucxG8G1Mxmg8Tw4TLF2w9pTuquDai
mvQN7o0bBXFU33ag3PiZbPL3L95BqgpfXfbSszekAa8gT3uSeFHPQTIGjVUluGd5
98DCBdFy2b8+9GBg/LQXQCrw+t0F7OFFSR14pmVc2uEm+BENcgTbBaO8ElQFyG0N
wRbntg==
-----END CERTIFICATE-----