Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/de0304fe-dbae-4cbf-aa3d-5e53be7a836e.roa
File:                     de0304fe-dbae-4cbf-aa3d-5e53be7a836e.roa (raw, json)
Hash identifier:          NWEo0PxUfQzie8dMKWn9o3Y3x4gGYNE+Qte8edvIkNU=
Subject key identifier:   4A:60:E0:00:7A:97:0E:F3:F7:0E:F6:9F:84:26:B2:25:E6:CC:5E:69
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3AA3EDFF8A9B5DA62241E2C1E10222DDAC2C4A26
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/de0304fe-dbae-4cbf-aa3d-5e53be7a836e.roa
Signing time:             Sun 18 Dec 2022 00:00:00 +0000
ROA not before:           Sun 18 Dec 2022 00:00:00 +0000
ROA not after:            Wed 21 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a3:ed:ff:8a:9b:5d:a6:22:41:e2:c1:e1:02:22:dd:ac:2c:4a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 18 00:00:00 2022 GMT
            Not After : Dec 21 23:59:59 2022 GMT
        Subject: serialNumber=896c49b9cb7119331446eee64105e4f03d920283dc87d92e0a808cdfa650b310, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:93:6e:f3:b4:22:b2:c0:f9:84:10:3b:a9:ba:
                    a3:be:8b:ae:40:b1:39:9d:25:7a:6d:73:0e:a6:61:
                    6e:97:17:7e:bb:cf:84:cb:bc:3a:08:f8:6b:98:05:
                    35:60:5b:c9:03:d3:38:90:b8:66:87:b5:ca:0c:07:
                    7a:fd:d4:10:55:25:48:62:30:80:d5:93:9a:ce:29:
                    24:70:c5:4b:fb:7b:2b:f3:d1:6c:49:40:4f:57:5c:
                    ac:e0:82:57:73:47:f1:91:0e:63:21:f7:fb:68:18:
                    2f:25:17:33:56:45:f0:43:58:df:64:61:37:2f:90:
                    62:a9:9b:22:c2:7b:f6:31:59:90:9c:5e:c7:70:02:
                    05:f3:96:8d:1f:19:49:f4:a0:6d:e8:52:63:4e:29:
                    99:ff:32:d0:60:75:fb:08:7e:7c:30:57:db:e0:bc:
                    08:df:6e:26:68:e1:6c:ed:ad:e9:f2:ee:5d:c3:eb:
                    f1:5e:4e:af:56:56:be:e3:2a:d1:ff:4d:43:e1:80:
                    3f:ab:c8:da:6b:c3:48:0f:3f:2f:09:75:d4:89:9e:
                    24:28:32:2d:cc:0f:65:78:73:2a:3d:14:0b:c2:e4:
                    54:4f:99:07:c1:2c:77:ce:19:72:50:0a:93:9a:b9:
                    77:62:33:d0:af:ab:3b:3d:1c:79:b1:4b:db:5b:2a:
                    8f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:60:E0:00:7A:97:0E:F3:F7:0E:F6:9F:84:26:B2:25:E6:CC:5E:69
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/de0304fe-dbae-4cbf-aa3d-5e53be7a836e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:79:c1:68:9c:de:dd:01:32:74:66:50:73:cc:49:2e:0d:46:
         32:16:a5:e9:d3:20:17:7b:c3:c9:81:63:ba:72:5f:c5:88:c7:
         3a:1f:37:45:e5:37:11:2b:62:ac:06:c3:86:8d:62:6d:8d:7c:
         fb:0a:2e:df:6d:31:99:d4:18:2a:d5:d2:d0:95:b8:e5:bd:a9:
         59:df:07:22:87:ac:5f:1e:db:de:4b:f7:ea:d0:e0:81:5c:af:
         c3:70:ad:cf:d1:10:5e:03:f3:3a:dc:0f:6e:4e:73:53:dc:a5:
         d0:65:7a:63:90:ab:79:77:e2:40:51:d1:5f:d9:70:f7:7e:b3:
         21:b1:5d:3e:14:c0:4e:97:09:18:06:dd:8d:96:3d:e3:cb:56:
         c1:b6:14:42:f4:79:2f:1f:aa:10:44:7d:8c:4a:17:03:c4:25:
         b9:b3:af:84:de:7f:5a:8d:b6:bc:a4:4e:0c:d3:c8:eb:15:35:
         fb:8d:6b:05:a2:2e:50:10:87:34:7a:d9:af:ee:05:19:7c:bf:
         2d:22:a1:17:bd:30:ff:74:77:dc:50:ff:c4:0a:9f:63:03:d5:
         8a:26:b7:bb:db:14:0f:fa:52:73:4e:52:60:04:75:9c:af:2f:
         95:3c:fd:7b:ec:5a:44:30:a0:b0:9b:64:20:c2:c5:83:08:4a:
         54:20:4c:2c
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUOqPt/4qbXaYiQeLB4QIi3awsSiYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMjE4MDAwMDAwWhcNMjIxMjIxMjM1OTU5
WjCBpTFJMEcGA1UEBRNAODk2YzQ5YjljYjcxMTkzMzE0NDZlZWU2NDEwNWU0ZjAz
ZDkyMDI4M2RjODdkOTJlMGE4MDhjZGZhNjUwYjMxMDEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANCTbvO0IrLA+YQQO6m6o76LrkCxOZ0lem1zDqZhbpcXfrvPhMu8
Ogj4a5gFNWBbyQPTOJC4Zoe1ygwHev3UEFUlSGIwgNWTms4pJHDFS/t7K/PRbElA
T1dcrOCCV3NH8ZEOYyH3+2gYLyUXM1ZF8ENY32RhNy+QYqmbIsJ79jFZkJxex3AC
BfOWjR8ZSfSgbehSY04pmf8y0GB1+wh+fDBX2+C8CN9uJmjhbO2t6fLuXcPr8V5O
r1ZWvuMq0f9NQ+GAP6vI2mvDSA8/Lwl11ImeJCgyLcwPZXhzKj0UC8LkVE+ZB8Es
d84ZclAKk5q5d2Iz0K+rOz0cebFL21sqj7MCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRKYOAAepcO8/cO9p+EJrIl5sxeaTAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZGUwMzA0ZmUtZGJhZS00Y2JmLWFhM2QtNWU1M2JlN2E4MzZlLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAB55wWic3t0BMnRm
UHPMSS4NRjIWpenTIBd7w8mBY7pyX8WIxzofN0XlNxErYqwGw4aNYm2NfPsKLt9t
MZnUGCrV0tCVuOW9qVnfByKHrF8e295L9+rQ4IFcr8Nwrc/REF4D8zrcD25Oc1Pc
pdBlemOQq3l34kBR0V/ZcPd+syGxXT4UwE6XCRgG3Y2WPePLVsG2FEL0eS8fqhBE
fYxKFwPEJbmzr4Tef1qNtrykTgzTyOsVNfuNawWiLlAQhzR62a/uBRl8vy0ioRe9
MP90d9xQ/8QKn2MD1Yomt7vbFA/6UnNOUmAEdZyvL5U8/XvsWkQwoLCbZCDCxYMI
SlQgTCw=
-----END CERTIFICATE-----