Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/dec2853a-7b36-4ae8-b2f7-6bf7b211fb7d.roa
File:                     dec2853a-7b36-4ae8-b2f7-6bf7b211fb7d.roa (raw, json)
Hash identifier:          Oqf+ymfe0HDplkpLSnD0A7Gq9fUuTZP5BfMJTFW8za8=
Subject key identifier:   4F:CF:A1:45:68:E0:52:0E:44:E6:FD:B3:3D:D1:86:DA:AD:34:FC:4C
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       47CEDFABCFDF5AEAA9BAFA02FB4CE79D37AD35B3
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/dec2853a-7b36-4ae8-b2f7-6bf7b211fb7d.roa
Signing time:             Mon 05 Jun 2023 00:00:00 +0000
ROA not before:           Mon 05 Jun 2023 00:00:00 +0000
ROA not after:            Thu 08 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ce:df:ab:cf:df:5a:ea:a9:ba:fa:02:fb:4c:e7:9d:37:ad:35:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun  5 00:00:00 2023 GMT
            Not After : Jun  8 23:59:59 2023 GMT
        Subject: serialNumber=cda2814ff1435b687f4951c8f833c2fa740a707e3831f321dc679574055c345d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2a:83:2a:2f:fa:b1:0c:24:63:6e:91:d9:5c:
                    c9:96:63:9b:25:68:46:20:85:8c:18:5f:a3:00:9d:
                    32:5d:c6:b9:2c:3b:94:a2:40:d7:dd:21:72:6b:2b:
                    ec:be:52:66:bb:1a:ee:4a:fc:2e:19:50:35:d2:f5:
                    1f:3d:a9:0e:aa:5d:4f:25:91:98:3c:5a:cb:e9:3b:
                    08:a2:42:d0:9f:0c:90:7e:fb:34:3b:2d:8d:46:17:
                    60:ed:19:99:33:ad:6a:d5:ee:09:a0:67:78:73:4f:
                    f3:9a:47:51:f3:ea:d1:20:ba:64:13:ee:89:1d:ea:
                    9d:4c:50:fa:df:25:a0:e1:fd:2d:e6:d8:5e:57:1c:
                    d2:05:ab:22:ad:7e:a8:ed:22:dd:bf:51:83:bd:a7:
                    5d:da:91:39:a8:2a:64:48:82:0c:2b:ef:a4:02:bd:
                    9e:f0:8b:d6:e3:63:1a:5d:04:66:90:e3:13:e2:42:
                    12:bc:51:db:14:fc:4c:f8:c2:5b:0a:17:c4:ce:5a:
                    ac:a7:f0:43:af:7e:8b:4b:3d:1d:59:76:46:6e:b3:
                    c6:e2:48:c0:d3:d2:73:4f:70:1f:8b:00:a2:fa:9d:
                    e7:ce:93:3f:bf:4b:a0:f3:e6:c5:a1:3b:0d:08:c9:
                    a6:85:fe:5a:a8:a4:2f:d3:9c:3c:be:20:3c:03:71:
                    6f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CF:A1:45:68:E0:52:0E:44:E6:FD:B3:3D:D1:86:DA:AD:34:FC:4C
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/dec2853a-7b36-4ae8-b2f7-6bf7b211fb7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:1a:3b:56:69:39:47:c8:ac:0d:fc:aa:09:1b:86:62:9d:8b:
         2c:31:a3:d3:a9:5b:8d:fa:72:74:8c:89:da:ec:fe:26:bf:b1:
         a1:83:d2:59:32:8c:94:37:67:27:e0:4c:14:75:9d:11:ed:b5:
         6e:e1:af:b2:56:a4:13:88:de:6e:12:0a:cd:7e:e1:86:61:c3:
         7e:6b:f7:16:12:b1:1f:71:68:6a:4f:fb:85:a6:42:c8:53:67:
         71:38:a5:67:0f:95:20:ba:2b:e8:dd:fa:3c:d6:64:4a:a5:7c:
         32:93:59:e4:36:69:1e:d3:4b:08:59:9b:a2:1a:4f:38:de:64:
         01:4e:83:f7:b5:7a:69:ad:1b:8d:fb:33:da:0d:82:d8:8d:ad:
         2a:df:d9:c9:5d:02:69:9e:6d:fb:7a:2e:2e:b0:da:5d:8a:45:
         3a:d3:8d:00:27:20:ce:b7:e8:a0:69:85:e6:e1:30:3e:c7:40:
         67:ef:49:6c:e1:82:8e:96:1f:3e:71:69:aa:f8:39:49:92:aa:
         21:78:18:55:c4:ca:d1:5d:2a:99:39:7d:20:68:b9:e3:7c:4a:
         6c:e0:f8:de:9d:d7:e7:42:41:a0:ad:e8:7f:b5:b3:a7:49:8c:
         20:c6:77:42:81:34:c0:e5:03:dc:26:6e:b7:9b:de:9a:13:2d:
         66:15:7e:e7
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUR87fq8/fWuqpuvoC+0znnTetNbMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNjA1MDAwMDAwWhcNMjMwNjA4MjM1OTU5
WjCBpTFJMEcGA1UEBRNAY2RhMjgxNGZmMTQzNWI2ODdmNDk1MWM4ZjgzM2MyZmE3
NDBhNzA3ZTM4MzFmMzIxZGM2Nzk1NzQwNTVjMzQ1ZDEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK8qgyov+rEMJGNukdlcyZZjmyVoRiCFjBhfowCdMl3GuSw7lKJA
190hcmsr7L5SZrsa7kr8LhlQNdL1Hz2pDqpdTyWRmDxay+k7CKJC0J8MkH77NDst
jUYXYO0ZmTOtatXuCaBneHNP85pHUfPq0SC6ZBPuiR3qnUxQ+t8loOH9LebYXlcc
0gWrIq1+qO0i3b9Rg72nXdqROagqZEiCDCvvpAK9nvCL1uNjGl0EZpDjE+JCErxR
2xT8TPjCWwoXxM5arKfwQ69+i0s9HVl2Rm6zxuJIwNPSc09wH4sAovqd586TP79L
oPPmxaE7DQjJpoX+WqikL9OcPL4gPANxb3kCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRPz6FFaOBSDkTm/bM90YbarTT8TDAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZGVjMjg1M2EtN2IzNi00YWU4LWIyZjctNmJmN2IyMTFmYjdkLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACgaO1ZpOUfIrA38
qgkbhmKdiywxo9OpW436cnSMidrs/ia/saGD0lkyjJQ3ZyfgTBR1nRHttW7hr7JW
pBOI3m4SCs1+4YZhw35r9xYSsR9xaGpP+4WmQshTZ3E4pWcPlSC6K+jd+jzWZEql
fDKTWeQ2aR7TSwhZm6IaTzjeZAFOg/e1emmtG437M9oNgtiNrSrf2cldAmmebft6
Li6w2l2KRTrTjQAnIM636KBphebhMD7HQGfvSWzhgo6WHz5xaar4OUmSqiF4GFXE
ytFdKpk5fSBoueN8Smzg+N6d1+dCQaCt6H+1s6dJjCDGd0KBNMDlA9wmbreb3poT
LWYVfuc=
-----END CERTIFICATE-----