Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ffd20261-0ac4-486c-bf71-4b28f8e88147.roa
File:                     ffd20261-0ac4-486c-bf71-4b28f8e88147.roa (raw, json)
Hash identifier:          38oKJJ3eb51J2y8Afuk3z6kG0EkVFRDx6IPUtEXb3rg=
Subject key identifier:   DE:D9:5E:7A:33:18:C1:C0:EB:24:AF:70:BD:1D:63:85:E7:ED:21:8E
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       598693ED6F627ED606B88F65F23CB12265F54A31
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ffd20261-0ac4-486c-bf71-4b28f8e88147.roa
Signing time:             Tue 25 Apr 2023 00:00:00 +0000
ROA not before:           Tue 25 Apr 2023 00:00:00 +0000
ROA not after:            Fri 28 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:86:93:ed:6f:62:7e:d6:06:b8:8f:65:f2:3c:b1:22:65:f5:4a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 25 00:00:00 2023 GMT
            Not After : Apr 28 23:59:59 2023 GMT
        Subject: serialNumber=2b48b1010b0878df3fe01728529cfb092084f481d1b76d67808b999445d40756, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:89:a4:1f:6a:a3:3a:1c:31:5a:11:9b:5d:3a:
                    9a:c0:8c:fb:4f:0e:c1:54:5d:62:42:bd:64:4b:a3:
                    08:8e:ea:c8:a2:f0:cc:79:12:7d:d5:6c:f6:03:5f:
                    78:91:47:06:31:2a:a4:d9:1f:d2:0c:d9:ec:d3:db:
                    1d:bf:1f:df:1a:37:55:98:3a:a9:06:c6:8a:38:7d:
                    f5:14:6a:40:7d:02:1d:a9:dc:d5:e2:83:4d:9a:68:
                    4b:ee:a5:b0:9f:dd:16:f9:bf:95:bc:f0:a5:83:bd:
                    5f:f1:0c:0b:9c:6f:c4:07:67:75:9d:6c:37:89:4a:
                    28:fa:6a:b5:70:a7:aa:8e:a0:1a:83:0a:87:8f:71:
                    9c:9d:a8:dc:e6:8f:8a:6e:88:67:e1:73:67:ee:2b:
                    85:9f:ed:fe:8e:5e:1b:00:ee:7d:fd:04:3e:92:fd:
                    f2:f4:58:3b:83:54:a8:58:2a:e9:0d:25:48:43:d4:
                    73:6f:2b:69:c5:25:ae:3e:3d:a4:1c:f9:82:7e:2a:
                    28:84:7a:73:06:4f:5a:bc:31:53:fb:dc:a0:13:b6:
                    7a:c3:4c:18:f4:f7:7a:50:f8:56:fd:d7:86:d1:5b:
                    0d:bf:b8:11:5a:3e:1d:34:bb:72:cd:b2:9b:d8:90:
                    fd:47:2c:e6:e2:e6:62:a7:70:02:4f:d3:da:fd:c2:
                    59:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D9:5E:7A:33:18:C1:C0:EB:24:AF:70:BD:1D:63:85:E7:ED:21:8E
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ffd20261-0ac4-486c-bf71-4b28f8e88147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:1e:08:68:2c:a4:cc:9a:e4:58:23:cd:35:a1:6d:4e:81:46:
         2d:80:4e:f0:bf:45:d4:ed:cc:7a:bd:3d:01:60:4a:a8:0e:b5:
         b7:77:aa:d3:b4:1e:3d:31:2d:8f:06:fa:aa:61:f4:48:e8:2e:
         a1:70:1c:ff:90:60:b5:55:74:a1:05:5d:28:23:ad:c7:5e:d8:
         2f:33:58:3d:4f:c9:ea:e7:b3:03:29:80:35:27:ca:e2:76:32:
         2e:a7:c9:38:5e:64:a7:a7:23:af:df:e4:44:5e:dd:ed:90:43:
         eb:8e:08:26:3f:b3:4b:72:11:e0:02:68:c7:df:c9:0f:78:ac:
         01:ca:e5:78:2a:8b:cf:84:a8:0a:ff:86:7b:ec:e2:ba:36:f6:
         91:5b:03:48:54:26:2b:d4:72:44:95:07:62:3d:e5:af:b1:e5:
         ab:50:00:8f:c0:9a:45:39:50:d3:26:24:87:0b:74:81:b2:ed:
         87:58:cd:88:0b:6a:b6:2f:45:e7:49:70:e7:1f:5e:50:e5:4a:
         01:35:67:84:19:9d:e1:cb:95:a4:e0:f5:3b:87:20:ef:e2:a7:
         11:79:25:ca:28:d1:20:10:25:4f:bd:03:d6:a2:05:f1:3d:68:
         db:9a:ff:4d:e3:ee:91:77:73:d0:6a:1c:55:ca:84:75:18:29:
         00:d6:0e:6a
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUWYaT7W9iftYGuI9l8jyxImX1SjEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNDI1MDAwMDAwWhcNMjMwNDI4MjM1OTU5
WjCBpTFJMEcGA1UEBRNAMmI0OGIxMDEwYjA4NzhkZjNmZTAxNzI4NTI5Y2ZiMDky
MDg0ZjQ4MWQxYjc2ZDY3ODA4Yjk5OTQ0NWQ0MDc1NjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMGJpB9qozocMVoRm106msCM+08OwVRdYkK9ZEujCI7qyKLwzHkS
fdVs9gNfeJFHBjEqpNkf0gzZ7NPbHb8f3xo3VZg6qQbGijh99RRqQH0CHanc1eKD
TZpoS+6lsJ/dFvm/lbzwpYO9X/EMC5xvxAdndZ1sN4lKKPpqtXCnqo6gGoMKh49x
nJ2o3OaPim6IZ+FzZ+4rhZ/t/o5eGwDuff0EPpL98vRYO4NUqFgq6Q0lSEPUc28r
acUlrj49pBz5gn4qKIR6cwZPWrwxU/vcoBO2esNMGPT3elD4Vv3XhtFbDb+4EVo+
HTS7cs2ym9iQ/Ucs5uLmYqdwAk/T2v3CWa0CAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTe2V56MxjBwOskr3C9HWOF5+0hjjAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZmZkMjAyNjEtMGFjNC00ODZjLWJmNzEtNGIyOGY4ZTg4MTQ3LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADoeCGgspMya5Fgj
zTWhbU6BRi2ATvC/RdTtzHq9PQFgSqgOtbd3qtO0Hj0xLY8G+qph9EjoLqFwHP+Q
YLVVdKEFXSgjrcde2C8zWD1PyernswMpgDUnyuJ2Mi6nyTheZKenI6/f5ERe3e2Q
Q+uOCCY/s0tyEeACaMffyQ94rAHK5Xgqi8+EqAr/hnvs4ro29pFbA0hUJivUckSV
B2I95a+x5atQAI/AmkU5UNMmJIcLdIGy7YdYzYgLarYvRedJcOcfXlDlSgE1Z4QZ
neHLlaTg9TuHIO/ipxF5Jcoo0SAQJU+9A9aiBfE9aNua/03j7pF3c9BqHFXKhHUY
KQDWDmo=
-----END CERTIFICATE-----