Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d3b7daea-53b7-4951-b188-0e70ce1c95ed.roa
File:                     d3b7daea-53b7-4951-b188-0e70ce1c95ed.roa (raw, json)
Hash identifier:          6RyFoXLoNgDdFzlgrnqBvVIrHt1/uWXrg4dlbFpTEl8=
Subject key identifier:   3E:2A:18:9D:FD:A6:F8:7F:1F:B0:8A:0A:57:BE:9C:4D:DD:3D:BA:BC
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3EC6E4FDB8059D329D2133773AC2FD3AFB001B8B
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d3b7daea-53b7-4951-b188-0e70ce1c95ed.roa
Signing time:             Thu 02 Mar 2023 00:00:00 +0000
ROA not before:           Thu 02 Mar 2023 00:00:00 +0000
ROA not after:            Sun 05 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c6:e4:fd:b8:05:9d:32:9d:21:33:77:3a:c2:fd:3a:fb:00:1b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  2 00:00:00 2023 GMT
            Not After : Mar  5 23:59:59 2023 GMT
        Subject: serialNumber=cfd97573a6234112e4ab4504aecf882cdd75f133d555e4c0678c0af5dc6d9f63, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:18:4e:b4:cd:24:fb:49:2d:cf:f4:33:24:2c:
                    29:c4:9b:e0:6f:a3:34:85:fa:17:19:5d:5c:7b:57:
                    47:6d:82:69:b2:4f:46:99:66:47:db:a4:17:34:77:
                    4a:93:02:e1:ca:f4:8c:20:7d:a6:fb:38:24:e6:14:
                    73:80:4e:5b:44:bb:13:d2:12:6d:34:79:54:ef:72:
                    58:6c:42:c5:ce:e9:73:6a:b2:f9:5d:15:02:3f:23:
                    f2:6d:88:c6:a9:49:05:5a:b1:ce:6d:f9:47:2c:b5:
                    5f:fa:ca:4f:68:fc:24:83:20:22:e9:35:7a:21:21:
                    eb:a7:2f:aa:4a:e6:3f:ef:e3:f1:59:e2:37:a3:04:
                    da:89:cb:84:cc:e1:43:73:92:e9:4f:7f:34:a8:71:
                    d5:33:60:ee:35:a5:25:4a:62:09:79:4a:fa:ad:dd:
                    61:82:dd:3b:54:d5:d9:6c:72:7a:8a:a8:6a:ca:b7:
                    f4:6b:95:63:8f:49:24:bc:5d:12:b1:4f:1b:86:a4:
                    ad:7d:37:ad:94:83:f4:4d:35:df:ec:68:0e:8b:78:
                    b6:db:c4:17:ca:c7:95:39:70:09:c9:b9:29:e1:f9:
                    e9:4e:c8:b3:8d:67:4f:7c:ef:98:64:2e:19:a9:6f:
                    af:d0:af:98:55:5b:a3:1a:3a:c6:ae:cc:12:ba:4a:
                    ce:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2A:18:9D:FD:A6:F8:7F:1F:B0:8A:0A:57:BE:9C:4D:DD:3D:BA:BC
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d3b7daea-53b7-4951-b188-0e70ce1c95ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:7d:97:08:0b:26:6f:ac:92:4d:bc:d0:c8:7c:65:16:96:6e:
         55:12:f5:10:01:85:4a:69:f1:bb:5f:6d:ea:b7:1f:fd:9f:6c:
         e4:f9:c0:b7:b1:ca:b0:a5:26:44:9c:ed:70:48:45:44:42:d7:
         a4:a4:7c:70:4e:9b:b2:02:07:62:b1:35:75:73:9c:1a:8d:b0:
         b6:a8:e4:a6:b9:a0:06:84:6f:63:49:e7:7f:59:55:c1:0c:b0:
         fc:70:23:7a:1a:08:d6:a8:c6:e1:74:3d:04:3f:cb:6a:13:86:
         ce:b1:a7:7b:02:ed:be:20:c2:bd:97:86:60:ea:8d:c5:f2:b7:
         0e:b6:2e:04:8f:45:33:74:06:b6:40:d0:56:f4:12:3b:2c:de:
         56:92:97:c1:15:bf:9e:2b:9d:84:d0:84:4b:5c:2c:5b:64:20:
         86:46:68:f3:e1:8e:50:03:1e:f3:39:6f:5a:dd:fb:32:f8:4c:
         37:21:a2:b9:61:cf:cc:7e:95:af:55:b1:54:bd:96:76:81:3a:
         d9:58:80:5d:14:cc:f3:4c:2e:16:76:3b:ba:4a:74:9c:26:52:
         b4:28:9a:ef:78:6e:d3:ea:bd:0f:db:a3:10:77:7e:aa:35:66:
         7b:ea:6b:df:fc:90:5c:7b:d4:8c:c4:74:5b:3d:97:1a:c6:a7:
         09:de:6f:23
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUPsbk/bgFnTKdITN3OsL9OvsAG4swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMzAyMDAwMDAwWhcNMjMwMzA1MjM1OTU5
WjCBpTFJMEcGA1UEBRNAY2ZkOTc1NzNhNjIzNDExMmU0YWI0NTA0YWVjZjg4MmNk
ZDc1ZjEzM2Q1NTVlNGMwNjc4YzBhZjVkYzZkOWY2MzEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMwYTrTNJPtJLc/0MyQsKcSb4G+jNIX6FxldXHtXR22CabJPRplm
R9ukFzR3SpMC4cr0jCB9pvs4JOYUc4BOW0S7E9ISbTR5VO9yWGxCxc7pc2qy+V0V
Aj8j8m2IxqlJBVqxzm35Ryy1X/rKT2j8JIMgIuk1eiEh66cvqkrmP+/j8VniN6ME
2onLhMzhQ3OS6U9/NKhx1TNg7jWlJUpiCXlK+q3dYYLdO1TV2Wxyeoqoasq39GuV
Y49JJLxdErFPG4akrX03rZSD9E013+xoDot4ttvEF8rHlTlwCcm5KeH56U7Is41n
T3zvmGQuGalvr9CvmFVboxo6xq7MErpKzoECAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQ+Khid/ab4fx+wigpXvpxN3T26vDAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZDNiN2RhZWEtNTNiNy00OTUxLWIxODgtMGU3MGNlMWM5NWVkLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJd9lwgLJm+skk28
0Mh8ZRaWblUS9RABhUpp8btfbeq3H/2fbOT5wLexyrClJkSc7XBIRURC16SkfHBO
m7ICB2KxNXVznBqNsLao5Ka5oAaEb2NJ539ZVcEMsPxwI3oaCNaoxuF0PQQ/y2oT
hs6xp3sC7b4gwr2XhmDqjcXytw62LgSPRTN0BrZA0Fb0Ejss3laSl8EVv54rnYTQ
hEtcLFtkIIZGaPPhjlADHvM5b1rd+zL4TDchorlhz8x+la9VsVS9lnaBOtlYgF0U
zPNMLhZ2O7pKdJwmUrQomu94btPqvQ/boxB3fqo1Znvqa9/8kFx71IzEdFs9lxrG
pwnebyM=
-----END CERTIFICATE-----