Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e8b1d881-6919-4682-a1ee-e4192db9ed20.roa
File:                     e8b1d881-6919-4682-a1ee-e4192db9ed20.roa (raw, json)
Hash identifier:          kzj6WkxbcoLCGVnmUn2MWfhqhp2a4Eez1LbDeF/l1HQ=
Subject key identifier:   EC:B3:93:12:9D:C1:A1:39:42:F5:AC:23:7F:BE:05:99:F3:40:2E:C5
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2B790ABB74E87FED8A458A5F8C210349F7E7389A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e8b1d881-6919-4682-a1ee-e4192db9ed20.roa
Signing time:             Fri 17 Mar 2023 00:00:00 +0000
ROA not before:           Fri 17 Mar 2023 00:00:00 +0000
ROA not after:            Mon 20 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:79:0a:bb:74:e8:7f:ed:8a:45:8a:5f:8c:21:03:49:f7:e7:38:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 17 00:00:00 2023 GMT
            Not After : Mar 20 23:59:59 2023 GMT
        Subject: serialNumber=2c29191e0336f8e3297a9fe73f7454d6f1041f2ac51c951432aa28b6026d0fc6, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c4:07:48:f7:59:21:10:8b:f6:29:dc:57:00:
                    db:54:5b:ef:60:95:ec:c7:3b:da:49:e4:e9:ca:7c:
                    65:5f:52:19:c8:b1:5d:08:7b:fb:c7:12:ac:64:5b:
                    32:a0:cf:4d:51:44:1e:b9:c1:fc:cd:bd:6b:9c:73:
                    77:99:5a:2b:11:db:26:86:18:22:08:45:7e:ba:96:
                    98:73:5e:68:1d:2f:cd:67:cd:55:5f:1c:28:94:37:
                    ad:67:65:d3:8d:15:14:4f:d1:34:b1:9b:ac:58:13:
                    13:6b:fa:e0:82:0b:35:a7:71:b6:6c:7f:5a:18:bb:
                    80:98:36:43:70:3c:27:fc:3e:11:03:2d:18:d9:14:
                    a5:ee:53:80:88:b8:ef:90:a5:b6:66:b1:0a:e5:dc:
                    77:b2:7f:1f:b7:f9:f2:10:a5:f8:28:69:e4:9c:72:
                    8d:0e:68:a6:f1:95:8b:3b:fa:a9:9f:7b:46:f2:08:
                    df:4c:1d:13:8e:a1:f1:91:d1:f3:cc:5d:7f:a1:79:
                    c1:79:54:02:a7:b5:fd:a5:61:1a:0d:48:3c:c0:8a:
                    d3:a8:d2:13:e8:bf:98:7f:d7:b1:63:d0:ba:60:88:
                    a5:a7:b8:02:65:c8:09:77:41:26:cd:88:ca:aa:27:
                    ec:90:c1:5c:78:3d:22:a1:f6:47:01:44:7c:03:1b:
                    9a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B3:93:12:9D:C1:A1:39:42:F5:AC:23:7F:BE:05:99:F3:40:2E:C5
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e8b1d881-6919-4682-a1ee-e4192db9ed20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:26:61:27:1e:be:e6:62:c8:8c:c3:33:dd:9f:ba:bf:0a:e3:
         12:fa:d3:cd:06:9d:6f:d4:12:81:33:b2:6a:9d:32:fc:af:d7:
         bd:ed:9c:41:53:81:a2:00:06:ee:d4:f4:88:ae:24:2a:61:c0:
         7e:e5:c0:37:b5:00:ce:cd:20:1a:82:35:20:07:a8:7f:ad:3c:
         e7:41:eb:32:f8:c6:14:d9:31:6e:7a:8d:c4:4b:48:b9:67:a4:
         bc:cd:34:01:34:54:77:c0:1e:29:70:e9:d9:5c:02:b2:31:33:
         74:b6:fe:81:58:a6:11:ac:e2:16:70:8d:97:90:9a:db:0d:b1:
         e2:90:d0:e6:c3:4c:9e:9f:07:d3:99:b3:e9:a2:12:70:f3:71:
         c5:a0:d6:51:45:6f:dd:b5:28:a5:8d:22:fc:7b:7e:fa:80:fc:
         1e:40:4c:b9:50:d7:ae:06:86:53:a0:6f:fc:e9:03:91:d9:3c:
         be:7e:cc:25:6b:94:06:a0:bc:74:86:c9:2b:72:e4:64:2f:90:
         24:14:5e:39:28:42:70:31:42:eb:41:1a:0b:fd:0e:86:52:73:
         71:34:9e:ae:fe:d9:0b:c7:4a:71:fd:6b:0f:00:60:81:df:bb:
         de:51:dd:ad:0d:48:3e:76:33:f1:79:dc:f8:f0:c9:7e:a1:b2:
         8e:af:26:a1
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUK3kKu3Tof+2KRYpfjCEDSffnOJowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMzE3MDAwMDAwWhcNMjMwMzIwMjM1OTU5
WjCBpTFJMEcGA1UEBRNAMmMyOTE5MWUwMzM2ZjhlMzI5N2E5ZmU3M2Y3NDU0ZDZm
MTA0MWYyYWM1MWM5NTE0MzJhYTI4YjYwMjZkMGZjNjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL3EB0j3WSEQi/Yp3FcA21Rb72CV7Mc72knk6cp8ZV9SGcixXQh7
+8cSrGRbMqDPTVFEHrnB/M29a5xzd5laKxHbJoYYIghFfrqWmHNeaB0vzWfNVV8c
KJQ3rWdl040VFE/RNLGbrFgTE2v64IILNadxtmx/Whi7gJg2Q3A8J/w+EQMtGNkU
pe5TgIi475CltmaxCuXcd7J/H7f58hCl+Chp5JxyjQ5opvGVizv6qZ97RvII30wd
E46h8ZHR88xdf6F5wXlUAqe1/aVhGg1IPMCK06jSE+i/mH/XsWPQumCIpae4AmXI
CXdBJs2Iyqon7JDBXHg9IqH2RwFEfAMbmo0CAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTss5MSncGhOUL1rCN/vgWZ80AuxTAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZThiMWQ4ODEtNjkxOS00NjgyLWExZWUtZTQxOTJkYjllZDIwLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBALImYScevuZiyIzD
M92fur8K4xL6080GnW/UEoEzsmqdMvyv173tnEFTgaIABu7U9IiuJCphwH7lwDe1
AM7NIBqCNSAHqH+tPOdB6zL4xhTZMW56jcRLSLlnpLzNNAE0VHfAHilw6dlcArIx
M3S2/oFYphGs4hZwjZeQmtsNseKQ0ObDTJ6fB9OZs+miEnDzccWg1lFFb921KKWN
Ivx7fvqA/B5ATLlQ164GhlOgb/zpA5HZPL5+zCVrlAagvHSGySty5GQvkCQUXjko
QnAxQutBGgv9DoZSc3E0nq7+2QvHSnH9aw8AYIHfu95R3a0NSD52M/F53PjwyX6h
so6vJqE=
-----END CERTIFICATE-----