Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f90cc609-4ccf-48c0-afc9-1da3f87fa56b.roa
File:                     f90cc609-4ccf-48c0-afc9-1da3f87fa56b.roa (raw, json)
Hash identifier:          QdgELEPmjiy3+K/hxAgNsjKyXuvISg2SkbXNP84toF0=
Subject key identifier:   75:79:D3:6E:06:6E:D1:97:4B:7A:C4:97:7C:33:50:0E:0C:59:6F:13
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6A6B49AF372987C7857329E9D40F58C979E8A3CF
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f90cc609-4ccf-48c0-afc9-1da3f87fa56b.roa
Signing time:             Wed 06 Jul 2022 00:00:00 +0000
ROA not before:           Wed 06 Jul 2022 00:00:00 +0000
ROA not after:            Sat 09 Jul 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6b:49:af:37:29:87:c7:85:73:29:e9:d4:0f:58:c9:79:e8:a3:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul  6 00:00:00 2022 GMT
            Not After : Jul  9 23:59:59 2022 GMT
        Subject: serialNumber=837128fbfada474397a228d9e0440478fa8460ee70a2f9e226b4db8ea98b60c0, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:14:6c:b0:ea:0e:61:1c:d4:94:d1:f6:5c:35:
                    43:7e:87:a1:42:4a:db:52:59:5b:23:70:f0:82:b2:
                    20:3c:df:5f:b5:50:03:b4:6f:77:47:5a:f4:36:3b:
                    97:4c:0c:24:68:33:55:57:55:47:d7:c7:a8:55:7d:
                    96:7a:36:81:3a:18:c3:b8:f8:f5:76:db:55:e7:1f:
                    fb:72:dc:ba:46:83:43:73:ba:09:19:32:17:f5:ab:
                    59:4d:30:d8:14:0f:8f:b5:52:62:95:0f:7d:01:81:
                    7e:e3:e3:9f:e7:c5:48:ff:53:49:53:6a:06:2a:3d:
                    54:b1:8f:12:c8:73:fb:3d:e4:4c:d0:21:14:b6:be:
                    63:07:6e:e1:b2:2a:7c:9f:8b:d0:f8:c2:36:26:b7:
                    4c:f7:cf:6e:2a:13:b6:d4:b3:42:97:da:55:7f:7e:
                    6e:bd:45:e0:5b:8e:82:06:4e:4f:30:cd:1e:c5:e6:
                    12:6a:de:7c:7a:c5:ef:86:ac:b4:de:e6:ca:0c:c6:
                    78:0a:76:0f:eb:92:df:94:4f:b8:1e:c3:52:71:6d:
                    2a:ca:ad:51:33:7a:26:bb:d0:bc:10:24:a1:84:c8:
                    e2:8c:ef:f2:76:0e:76:05:41:e4:8e:27:a8:4d:c7:
                    21:c4:8f:b5:32:1b:a2:41:c6:9d:37:8b:8b:82:e6:
                    dc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:79:D3:6E:06:6E:D1:97:4B:7A:C4:97:7C:33:50:0E:0C:59:6F:13
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f90cc609-4ccf-48c0-afc9-1da3f87fa56b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:2d:df:53:6d:ca:73:87:29:a5:02:3d:39:bb:75:46:cf:d2:
         ba:2b:8e:6f:27:b1:fd:c0:47:62:4b:7b:9d:34:6e:33:76:75:
         72:6b:70:53:82:93:f6:c8:84:4e:1e:aa:c2:ca:4f:cd:4f:d3:
         5b:16:af:bd:48:8f:cf:10:ee:aa:e8:30:40:9e:73:17:77:37:
         e0:6d:14:8a:4b:6b:0f:d9:15:05:db:9c:a8:d9:45:e7:80:96:
         25:79:3e:de:56:d5:9d:44:98:71:8c:a0:ab:23:98:dd:4e:e7:
         4c:a1:d7:2e:18:05:8c:06:69:bd:ca:39:1a:31:30:1b:b3:fc:
         9c:b4:8f:67:38:9a:a3:8d:77:cc:22:a0:9b:b5:dc:45:7a:21:
         a6:6f:3f:41:b2:4a:ba:a4:af:eb:f6:66:d1:a2:6f:bf:a8:cc:
         07:eb:a2:74:ef:53:30:d5:fa:6c:2d:c4:2b:42:25:c6:9a:d1:
         74:fe:b0:9a:a1:8f:11:5c:22:a9:61:dc:34:2f:55:f1:cc:a2:
         9c:e0:8b:86:3b:29:2d:61:57:69:ac:f5:a2:6f:14:c7:a2:21:
         92:60:ce:b1:f8:bb:3d:58:22:6f:88:ac:48:0d:18:c1:b8:d8:
         67:f7:61:c7:54:7d:28:a7:9b:61:12:a0:c0:38:12:8f:ea:88:
         fe:13:09:92
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUamtJrzcph8eFcynp1A9YyXnoo88wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIwNzA2MDAwMDAwWhcNMjIwNzA5MjM1OTU5
WjCBpTFJMEcGA1UEBRNAODM3MTI4ZmJmYWRhNDc0Mzk3YTIyOGQ5ZTA0NDA0Nzhm
YTg0NjBlZTcwYTJmOWUyMjZiNGRiOGVhOThiNjBjMDEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOUUbLDqDmEc1JTR9lw1Q36HoUJK21JZWyNw8IKyIDzfX7VQA7Rv
d0da9DY7l0wMJGgzVVdVR9fHqFV9lno2gToYw7j49XbbVecf+3LcukaDQ3O6CRky
F/WrWU0w2BQPj7VSYpUPfQGBfuPjn+fFSP9TSVNqBio9VLGPEshz+z3kTNAhFLa+
Ywdu4bIqfJ+L0PjCNia3TPfPbioTttSzQpfaVX9+br1F4FuOggZOTzDNHsXmEmre
fHrF74astN7mygzGeAp2D+uS35RPuB7DUnFtKsqtUTN6JrvQvBAkoYTI4ozv8nYO
dgVB5I4nqE3HIcSPtTIbokHGnTeLi4Lm3GcCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBR1edNuBm7Rl0t6xJd8M1AODFlvEzAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZjkwY2M2MDktNGNjZi00OGMwLWFmYzktMWRhM2Y4N2ZhNTZiLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGUt31NtynOHKaUC
PTm7dUbP0rorjm8nsf3AR2JLe500bjN2dXJrcFOCk/bIhE4eqsLKT81P01sWr71I
j88Q7qroMECecxd3N+BtFIpLaw/ZFQXbnKjZReeAliV5Pt5W1Z1EmHGMoKsjmN1O
50yh1y4YBYwGab3KORoxMBuz/Jy0j2c4mqONd8wioJu13EV6IaZvP0GySrqkr+v2
ZtGib7+ozAfronTvUzDV+mwtxCtCJcaa0XT+sJqhjxFcIqlh3DQvVfHMopzgi4Y7
KS1hV2ms9aJvFMeiIZJgzrH4uz1YIm+IrEgNGMG42Gf3YcdUfSinm2ESoMA4Eo/q
iP4TCZI=
-----END CERTIFICATE-----