Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f9913387-40fb-4f59-899e-949fcd157230.roa
File:                     f9913387-40fb-4f59-899e-949fcd157230.roa (raw, json)
Hash identifier:          Qeus0IZtMzUqTOGayTUWG1J1LkHc+w+k8ee8dUvQ3O4=
Subject key identifier:   91:6A:73:E4:E5:C4:C3:B7:23:81:85:84:88:FE:E2:52:25:8D:22:0E
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       50A889158C9A4B36F58A2CFE1FFF9069FFF2487C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f9913387-40fb-4f59-899e-949fcd157230.roa
Signing time:             Sun 12 Feb 2023 00:00:00 +0000
ROA not before:           Sun 12 Feb 2023 00:00:00 +0000
ROA not after:            Wed 15 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a8:89:15:8c:9a:4b:36:f5:8a:2c:fe:1f:ff:90:69:ff:f2:48:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 12 00:00:00 2023 GMT
            Not After : Feb 15 23:59:59 2023 GMT
        Subject: serialNumber=8b3f8472900479d0ff511b23f930f87d57703c3da3316c9c36b5977f29fdb975, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:84:0a:db:1d:9a:f1:34:2a:90:6b:11:76:18:
                    80:cc:43:90:44:68:83:d3:86:74:24:77:ce:89:7e:
                    1a:e9:97:fd:ee:de:48:cc:1b:4e:34:39:fd:fc:4f:
                    fe:e7:02:eb:50:64:ce:9c:9d:f4:7b:b4:69:4b:15:
                    04:2d:d8:2c:c8:33:34:bd:3a:8f:ef:93:63:98:3f:
                    a8:fa:fa:1c:d7:fa:34:19:9b:51:69:86:cb:50:11:
                    b4:70:fb:7d:7d:25:a2:2d:44:9a:08:3b:77:cd:c9:
                    08:fd:98:0b:e2:e0:ef:d9:70:b9:a0:de:0a:3c:72:
                    13:48:61:87:35:9a:ac:cd:6f:ee:8f:51:24:96:b0:
                    a3:aa:29:9f:8e:94:88:43:95:40:1b:63:9c:c7:20:
                    2b:aa:07:be:49:d4:67:48:1f:bd:09:97:57:da:03:
                    4f:ee:e8:b1:4f:70:97:d2:38:ea:93:81:30:8b:b4:
                    b9:45:a9:7a:c5:11:2c:af:32:ab:59:8a:09:ce:f6:
                    23:0e:06:1f:a6:e3:55:e6:a4:7a:64:90:d1:64:d3:
                    07:ce:72:e9:09:ba:4f:6f:d8:54:c5:35:73:5a:22:
                    ee:80:95:ed:42:dc:7d:a3:ec:b1:7f:ed:f9:d3:b8:
                    be:98:d2:d2:fe:2c:b0:9d:cf:e4:53:58:b8:2a:6d:
                    5a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6A:73:E4:E5:C4:C3:B7:23:81:85:84:88:FE:E2:52:25:8D:22:0E
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f9913387-40fb-4f59-899e-949fcd157230.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:fe:26:d1:6f:d8:40:32:09:07:8c:2d:09:c6:e4:a0:40:a4:
         36:2f:e2:bd:b5:fa:5f:f7:2e:87:2b:5a:ce:5d:e9:2c:a6:d0:
         f1:ba:6b:26:40:31:58:98:c7:fb:a8:c9:61:bd:a6:a0:02:ad:
         2d:5d:4f:2a:f1:68:a6:be:65:59:83:d2:73:5c:d3:46:c2:fd:
         82:1e:7b:3b:72:e0:a9:46:d4:d9:79:a7:46:eb:82:bf:a6:fa:
         43:eb:83:cf:d3:5d:32:db:1a:2f:f8:59:a6:16:1e:6a:37:42:
         41:99:15:6e:cd:63:66:c2:81:db:19:21:ea:6d:c3:07:12:66:
         59:bf:e9:ad:1e:e5:78:91:aa:f4:e3:d8:35:3c:1f:f1:9b:0d:
         75:60:dd:19:22:4d:4c:92:c8:12:37:db:03:92:4e:44:2c:52:
         09:30:d1:e3:d6:c2:ce:d6:65:e6:22:2e:09:35:6a:38:72:81:
         a0:52:0d:19:65:89:28:8c:0f:aa:26:e6:58:ab:a9:06:22:89:
         77:50:b5:16:29:bb:6a:a0:5e:03:3d:ae:4f:72:30:81:f0:81:
         62:c5:6c:82:1f:92:76:79:01:ea:51:b9:dc:cc:04:23:f0:03:
         4f:4f:39:70:fd:f3:3a:54:bd:55:1e:ee:3a:3a:52:4a:5b:3e:
         6c:55:60:d3
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUUKiJFYyaSzb1iiz+H/+Qaf/ySHwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMjEyMDAwMDAwWhcNMjMwMjE1MjM1OTU5
WjCBpTFJMEcGA1UEBRNAOGIzZjg0NzI5MDA0NzlkMGZmNTExYjIzZjkzMGY4N2Q1
NzcwM2MzZGEzMzE2YzljMzZiNTk3N2YyOWZkYjk3NTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALqECtsdmvE0KpBrEXYYgMxDkERog9OGdCR3zol+GumX/e7eSMwb
TjQ5/fxP/ucC61Bkzpyd9Hu0aUsVBC3YLMgzNL06j++TY5g/qPr6HNf6NBmbUWmG
y1ARtHD7fX0loi1Emgg7d83JCP2YC+Lg79lwuaDeCjxyE0hhhzWarM1v7o9RJJaw
o6opn46UiEOVQBtjnMcgK6oHvknUZ0gfvQmXV9oDT+7osU9wl9I46pOBMIu0uUWp
esURLK8yq1mKCc72Iw4GH6bjVeakemSQ0WTTB85y6Qm6T2/YVMU1c1oi7oCV7ULc
faPssX/t+dO4vpjS0v4ssJ3P5FNYuCptWlkCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBSRanPk5cTDtyOBhYSI/uJSJY0iDjAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZjk5MTMzODctNDBmYi00ZjU5LTg5OWUtOTQ5ZmNkMTU3MjMwLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAE3+JtFv2EAyCQeM
LQnG5KBApDYv4r21+l/3LocrWs5d6Sym0PG6ayZAMViYx/uoyWG9pqACrS1dTyrx
aKa+ZVmD0nNc00bC/YIeezty4KlG1Nl5p0brgr+m+kPrg8/TXTLbGi/4WaYWHmo3
QkGZFW7NY2bCgdsZIeptwwcSZlm/6a0e5XiRqvTj2DU8H/GbDXVg3RkiTUySyBI3
2wOSTkQsUgkw0ePWws7WZeYiLgk1ajhygaBSDRlliSiMD6om5lirqQYiiXdQtRYp
u2qgXgM9rk9yMIHwgWLFbIIfknZ5AepRudzMBCPwA09POXD98zpUvVUe7jo6Ukpb
PmxVYNM=
-----END CERTIFICATE-----