Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c85f25de-b6fa-4226-a156-55b23febb1a1.roa
File:                     c85f25de-b6fa-4226-a156-55b23febb1a1.roa (raw, json)
Hash identifier:          4+WJRRTR9h6h1Yb05Oi+XWJDmZwqZSAzofg0zIciwqs=
Subject key identifier:   0F:65:AE:2D:92:F1:4C:D9:3A:3F:24:4E:6F:C9:A2:C2:D4:7D:A1:65
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1B1C18B3D1B1B9DABDFED72783E06B75686B3745
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c85f25de-b6fa-4226-a156-55b23febb1a1.roa
Signing time:             Sat 01 Apr 2023 00:00:00 +0000
ROA not before:           Sat 01 Apr 2023 00:00:00 +0000
ROA not after:            Tue 04 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:1c:18:b3:d1:b1:b9:da:bd:fe:d7:27:83:e0:6b:75:68:6b:37:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  1 00:00:00 2023 GMT
            Not After : Apr  4 23:59:59 2023 GMT
        Subject: serialNumber=168806959f8bc650e5a71e8071b0cf993e05ccfce552b268552e862cd8d2d647, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:aa:ab:d9:22:15:b9:5c:4f:64:db:e2:25:69:
                    a1:cc:b8:99:da:52:2c:81:68:b4:f6:59:ff:a8:c2:
                    38:89:f0:6c:69:9a:03:d0:b2:3a:51:4e:76:76:40:
                    27:df:99:81:b9:66:46:8e:31:d8:70:57:2a:9a:a1:
                    66:50:15:e0:ef:d5:35:b3:81:96:30:6d:0d:90:c1:
                    c1:9f:83:d8:18:f2:f6:da:d7:42:f9:14:c1:2a:ac:
                    8f:91:17:64:93:5c:fb:09:b9:e7:64:fb:e3:cd:08:
                    80:ad:00:bf:48:77:9c:ad:93:99:fe:c3:4a:33:31:
                    37:80:23:32:5c:5b:3e:e9:ac:48:75:ed:67:27:52:
                    79:92:5a:0c:ee:37:ec:16:fc:bb:95:81:69:75:2e:
                    cc:9e:16:b8:b3:7b:03:ea:94:45:87:1a:7d:a3:9c:
                    d3:00:21:a7:4c:37:17:2b:57:c2:2d:c4:30:18:ae:
                    0e:0b:5a:2d:20:1c:ea:58:61:57:41:db:05:32:9f:
                    22:11:38:10:d4:76:69:96:e9:1b:a6:7c:7d:db:06:
                    8d:7e:bf:2a:f6:e7:70:4d:3c:94:e1:f5:d7:42:f0:
                    7f:2f:6c:c1:fd:cd:d6:ee:4f:82:25:66:4f:96:c1:
                    a9:bf:39:fd:2e:fc:04:0a:35:80:2e:3c:23:fc:5a:
                    98:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:65:AE:2D:92:F1:4C:D9:3A:3F:24:4E:6F:C9:A2:C2:D4:7D:A1:65
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c85f25de-b6fa-4226-a156-55b23febb1a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:cf:48:25:1f:49:a0:a3:59:82:dc:8a:a2:d5:96:29:55:8a:
         3c:21:02:91:39:c5:53:cd:23:6a:86:b8:80:8e:2b:7d:85:78:
         88:e1:50:ed:6c:6a:4c:51:ad:ad:16:24:ee:b2:97:11:fa:f3:
         9d:eb:a6:69:7e:04:0e:c6:d1:53:b6:5a:98:3a:26:48:ca:fe:
         38:cd:50:f2:58:31:3a:73:04:18:44:90:da:86:51:57:38:d1:
         ba:58:0f:59:11:ca:70:5d:76:de:21:03:18:ea:19:27:d3:a5:
         be:99:ca:9b:89:6d:69:7d:b1:9b:76:31:14:4f:95:ec:d6:4a:
         19:0d:dc:55:5f:61:fa:15:3d:0b:95:46:f6:e4:92:8a:3e:d6:
         96:3f:38:25:f0:a5:0e:cf:82:4c:3b:b8:44:78:bb:0c:1f:69:
         ce:fa:65:3a:df:fd:8b:85:ed:86:01:b4:1b:f9:15:72:a8:e9:
         a6:48:25:4a:25:10:2e:42:a7:9d:d5:81:8a:f3:7d:10:3e:17:
         05:91:0f:c1:d7:a4:d6:30:74:2d:bc:26:2e:4a:ac:81:f3:c5:
         ca:fc:63:0f:fc:3f:91:11:ee:fd:99:36:2a:f5:d7:32:7f:d7:
         7c:d3:64:b5:5b:68:ab:66:5b:8a:5b:db:48:95:f2:6d:4a:6a:
         2f:45:74:f3
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUGxwYs9Gxudq9/tcng+BrdWhrN0UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNDAxMDAwMDAwWhcNMjMwNDA0MjM1OTU5
WjCBpTFJMEcGA1UEBRNAMTY4ODA2OTU5ZjhiYzY1MGU1YTcxZTgwNzFiMGNmOTkz
ZTA1Y2NmY2U1NTJiMjY4NTUyZTg2MmNkOGQyZDY0NzEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJeqq9kiFblcT2Tb4iVpocy4mdpSLIFotPZZ/6jCOInwbGmaA9Cy
OlFOdnZAJ9+ZgblmRo4x2HBXKpqhZlAV4O/VNbOBljBtDZDBwZ+D2Bjy9trXQvkU
wSqsj5EXZJNc+wm552T7480IgK0Av0h3nK2Tmf7DSjMxN4AjMlxbPumsSHXtZydS
eZJaDO437Bb8u5WBaXUuzJ4WuLN7A+qURYcafaOc0wAhp0w3FytXwi3EMBiuDgta
LSAc6lhhV0HbBTKfIhE4ENR2aZbpG6Z8fdsGjX6/KvbncE08lOH110Lwfy9swf3N
1u5PgiVmT5bBqb85/S78BAo1gC48I/xamLcCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQPZa4tkvFM2To/JE5vyaLC1H2hZTAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvYzg1ZjI1ZGUtYjZmYS00MjI2LWExNTYtNTViMjNmZWJiMWExLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKLPSCUfSaCjWYLc
iqLVlilVijwhApE5xVPNI2qGuICOK32FeIjhUO1sakxRra0WJO6ylxH6853rpml+
BA7G0VO2Wpg6JkjK/jjNUPJYMTpzBBhEkNqGUVc40bpYD1kRynBddt4hAxjqGSfT
pb6ZypuJbWl9sZt2MRRPlezWShkN3FVfYfoVPQuVRvbkkoo+1pY/OCXwpQ7Pgkw7
uER4uwwfac76ZTrf/YuF7YYBtBv5FXKo6aZIJUolEC5Cp53VgYrzfRA+FwWRD8HX
pNYwdC28Ji5KrIHzxcr8Yw/8P5ER7v2ZNir11zJ/13zTZLVbaKtmW4pb20iV8m1K
ai9FdPM=
-----END CERTIFICATE-----