Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d50ac53f-fdb8-4f92-a74f-5c20aa06fb4d.roa
File:                     d50ac53f-fdb8-4f92-a74f-5c20aa06fb4d.roa (raw, json)
Hash identifier:          onmQQpsQSF7viQa8VhiYSDf7E7vjVcA1QawtYPPykiE=
Subject key identifier:   45:99:3A:AD:56:FA:33:C2:75:43:E8:D5:1E:5A:61:08:5B:CF:28:63
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       537CC84C66BD86FFB8753F146385D4AF3CE032B7
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d50ac53f-fdb8-4f92-a74f-5c20aa06fb4d.roa
Signing time:             Sat 11 Mar 2023 00:00:00 +0000
ROA not before:           Sat 11 Mar 2023 00:00:00 +0000
ROA not after:            Tue 14 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:7c:c8:4c:66:bd:86:ff:b8:75:3f:14:63:85:d4:af:3c:e0:32:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 11 00:00:00 2023 GMT
            Not After : Mar 14 23:59:59 2023 GMT
        Subject: serialNumber=e96630943ecb91fe5c3c3226cd704e1ae4822a343848bd4f85b8247a09b2f26c, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:13:0e:7f:6d:82:81:ab:f4:82:e4:5d:cd:e3:
                    cd:8c:ed:d4:a5:9a:1e:40:3b:ff:6b:0e:7a:fd:1b:
                    36:8d:40:59:ef:2b:17:9a:b0:26:88:5b:b7:cb:42:
                    28:f4:71:fa:42:87:d3:d6:b8:13:b2:d6:de:3a:38:
                    cd:3e:8e:e2:ca:87:b1:36:d3:3b:6a:67:3f:85:fd:
                    de:9d:a3:18:2b:ae:33:12:6a:73:be:19:37:59:e1:
                    1f:68:39:f3:3d:d6:2a:a0:70:21:01:71:38:48:60:
                    0c:f2:a1:c5:c4:d6:f8:a2:e9:06:a8:a1:88:0c:85:
                    12:94:43:5f:67:0f:ca:48:f9:38:18:7e:9f:58:11:
                    f4:64:b3:a8:fb:70:48:55:33:d3:10:94:a2:dc:ab:
                    8e:88:86:ee:f7:59:4c:f0:b8:9f:dc:25:6e:16:6b:
                    ee:f7:2a:7c:c4:dd:1c:99:94:09:8a:ee:59:6e:29:
                    26:69:e4:96:0d:a0:7e:3b:4f:37:de:75:15:b6:53:
                    d2:99:07:9b:b8:a1:03:80:0a:5d:a3:4d:a7:c5:3e:
                    ef:79:ad:85:fb:f1:73:be:8f:e5:6c:81:40:20:71:
                    3d:cb:ee:16:e9:b0:99:e7:17:e5:7f:0a:83:94:6c:
                    63:33:bf:ec:a5:89:8a:55:1f:cf:d2:e5:11:f0:a3:
                    01:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:99:3A:AD:56:FA:33:C2:75:43:E8:D5:1E:5A:61:08:5B:CF:28:63
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d50ac53f-fdb8-4f92-a74f-5c20aa06fb4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:da:57:b0:39:71:84:2a:bb:48:b6:c2:f5:2f:8f:ef:f1:54:
         57:77:df:97:28:dd:07:8f:83:c1:a5:44:79:16:d4:9e:fb:6d:
         e3:02:c4:ec:42:ae:1b:fc:46:12:00:34:89:7b:4a:a1:9e:3d:
         86:5b:75:fd:5e:c1:df:d2:bc:a2:84:f6:4c:85:a8:82:e4:70:
         63:63:f6:69:a9:6d:8d:ab:7c:24:49:6d:b0:2d:a6:a4:b0:49:
         f5:27:c9:cc:ae:be:45:ff:2f:ce:5a:62:9f:c7:69:ec:fc:0a:
         08:9e:07:02:2e:2b:c0:2f:71:33:9b:38:d9:27:b5:70:4f:c8:
         af:59:15:41:4d:f7:84:17:58:90:d6:20:e6:ec:6a:5e:17:96:
         cb:29:2c:fc:12:07:e1:f9:2c:e5:51:73:d5:d5:5d:d2:96:8b:
         6f:cc:7c:23:83:f5:dd:93:dc:13:04:67:06:b4:2f:e7:79:6f:
         1a:3b:2f:69:81:bc:11:6d:48:ef:e8:31:d2:ee:36:2c:27:aa:
         e6:7f:94:f3:60:19:eb:20:24:29:f0:e6:03:3a:e2:87:b5:ed:
         55:34:7c:3b:c6:7d:e8:4e:70:64:2e:7f:f5:84:44:11:12:f1:
         74:bb:86:ca:3e:f1:dc:ea:2e:93:02:07:e9:71:39:0c:9b:70:
         a0:a9:0a:a1
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUU3zITGa9hv+4dT8UY4XUrzzgMrcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMzExMDAwMDAwWhcNMjMwMzE0MjM1OTU5
WjCBpTFJMEcGA1UEBRNAZTk2NjMwOTQzZWNiOTFmZTVjM2MzMjI2Y2Q3MDRlMWFl
NDgyMmEzNDM4NDhiZDRmODViODI0N2EwOWIyZjI2YzEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANkTDn9tgoGr9ILkXc3jzYzt1KWaHkA7/2sOev0bNo1AWe8rF5qw
Johbt8tCKPRx+kKH09a4E7LW3jo4zT6O4sqHsTbTO2pnP4X93p2jGCuuMxJqc74Z
N1nhH2g58z3WKqBwIQFxOEhgDPKhxcTW+KLpBqihiAyFEpRDX2cPykj5OBh+n1gR
9GSzqPtwSFUz0xCUotyrjoiG7vdZTPC4n9wlbhZr7vcqfMTdHJmUCYruWW4pJmnk
lg2gfjtPN951FbZT0pkHm7ihA4AKXaNNp8U+73mthfvxc76P5WyBQCBxPcvuFumw
mecX5X8Kg5RsYzO/7KWJilUfz9LlEfCjAaUCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRFmTqtVvozwnVD6NUeWmEIW88oYzAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZDUwYWM1M2YtZmRiOC00ZjkyLWE3NGYtNWMyMGFhMDZmYjRkLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHXaV7A5cYQqu0i2
wvUvj+/xVFd335co3QePg8GlRHkW1J77beMCxOxCrhv8RhIANIl7SqGePYZbdf1e
wd/SvKKE9kyFqILkcGNj9mmpbY2rfCRJbbAtpqSwSfUnycyuvkX/L85aYp/Haez8
CgieBwIuK8AvcTObONkntXBPyK9ZFUFN94QXWJDWIObsal4XlsspLPwSB+H5LOVR
c9XVXdKWi2/MfCOD9d2T3BMEZwa0L+d5bxo7L2mBvBFtSO/oMdLuNiwnquZ/lPNg
GesgJCnw5gM64oe17VU0fDvGfehOcGQuf/WERBES8XS7hso+8dzqLpMCB+lxOQyb
cKCpCqE=
-----END CERTIFICATE-----