Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/03297179-cc16-470a-845c-c4ab3762e081.roa
File:                     03297179-cc16-470a-845c-c4ab3762e081.roa (raw, json)
Hash identifier:          9FKEX3OSm6Ne6lANearkulAdg5bAB1Y5KcCySvXr/QI=
Subject key identifier:   30:56:15:9E:08:CA:E6:5D:26:F6:F7:FD:4C:30:5B:34:78:DF:78:AC
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3B2FC9784D771E366195D9058C8AC14C7874E191
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/03297179-cc16-470a-845c-c4ab3762e081.roa
Signing time:             Sun 02 Apr 2023 00:00:00 +0000
ROA not before:           Sun 02 Apr 2023 00:00:00 +0000
ROA not after:            Wed 05 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:2f:c9:78:4d:77:1e:36:61:95:d9:05:8c:8a:c1:4c:78:74:e1:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  2 00:00:00 2023 GMT
            Not After : Apr  5 23:59:59 2023 GMT
        Subject: serialNumber=ed7173a8a4c0c1d6f94e63b51006f7ad3671c0148844c49b080e388e59bc083f, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:91:d4:2b:b1:71:1c:a0:5e:0f:1f:7d:b9:93:
                    43:07:46:25:72:92:fd:4d:80:ee:14:fa:07:1e:05:
                    f6:56:99:71:c2:11:1f:29:53:39:09:ef:2c:e4:4e:
                    32:ba:f1:c2:eb:e7:dc:54:34:0f:c3:ee:96:de:87:
                    e1:b0:bd:7d:59:c1:de:aa:4b:a1:af:f6:c8:90:5b:
                    7c:8e:0b:ed:b4:66:07:40:d2:b5:b5:b6:b0:25:24:
                    7e:67:62:6f:46:d2:9d:de:ad:f5:fa:12:41:09:b7:
                    51:12:91:68:e1:92:ec:a8:8b:e1:70:6c:15:3c:a4:
                    e2:d9:bd:32:20:fd:c6:f8:8b:e4:ee:6e:f4:b8:1a:
                    51:c7:f4:86:9a:94:8e:cc:b0:c9:6d:2b:7a:28:90:
                    8a:73:25:33:c2:89:79:4f:1e:0b:8d:43:7c:2d:2f:
                    06:64:6c:0b:56:b2:6a:ee:64:b6:bd:5d:b2:14:86:
                    72:72:a5:f9:3e:c4:50:9b:96:62:9e:a5:4d:00:0e:
                    3d:88:19:77:4e:6e:4d:c0:3c:17:90:8f:95:9a:6c:
                    27:3e:a4:53:72:2f:47:d2:42:53:95:73:59:1b:44:
                    f4:e2:a6:a9:39:3f:e0:ac:11:f6:42:c9:2c:cb:01:
                    fb:fb:88:1a:ca:fd:57:d5:10:f1:de:4c:7e:54:2a:
                    5b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:56:15:9E:08:CA:E6:5D:26:F6:F7:FD:4C:30:5B:34:78:DF:78:AC
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/03297179-cc16-470a-845c-c4ab3762e081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:3f:ab:48:ab:4d:d8:60:b3:69:2a:d4:31:04:bc:8d:50:62:
         e8:a7:07:22:de:00:a2:ad:8d:60:b4:c5:ad:a8:e5:16:2d:3b:
         09:be:45:63:75:28:8e:6c:86:9a:ba:78:45:fd:97:a8:72:db:
         43:f5:fa:e3:e8:63:d6:3c:60:2b:cb:cf:b5:40:60:b2:32:29:
         68:da:8e:aa:08:d6:5a:4f:49:4d:f4:e0:cf:95:23:9e:61:3f:
         26:40:74:58:47:af:59:88:6f:26:6f:77:ec:29:e3:0c:92:ec:
         8d:ad:5d:ad:ac:39:53:3f:a3:69:0c:45:61:9b:20:23:85:47:
         d0:db:06:db:f3:c3:b0:77:f4:c2:8c:2e:10:4f:f0:91:dd:3f:
         86:6f:86:99:0c:25:81:4f:f1:0b:1b:e8:90:4c:4b:84:8b:6b:
         24:e3:31:25:8d:b0:5e:3f:48:35:39:b2:57:44:0c:68:a9:b3:
         2c:56:4a:ec:f0:4c:83:7a:f2:85:cb:49:32:dd:9f:10:13:f3:
         ec:d2:a3:3d:5f:a2:52:ae:dd:1f:ca:5d:59:ce:80:49:9a:b1:
         5f:0f:b8:21:df:1a:d2:7e:a8:c8:34:70:19:a9:99:30:d6:14:
         f5:92:29:b9:7a:b8:c6:fa:c4:df:1f:40:86:9c:76:10:a7:79:
         d9:18:5e:b2
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUOy/JeE13HjZhldkFjIrBTHh04ZEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNDAyMDAwMDAwWhcNMjMwNDA1MjM1OTU5
WjCBpTFJMEcGA1UEBRNAZWQ3MTczYThhNGMwYzFkNmY5NGU2M2I1MTAwNmY3YWQz
NjcxYzAxNDg4NDRjNDliMDgwZTM4OGU1OWJjMDgzZjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPGR1CuxcRygXg8ffbmTQwdGJXKS/U2A7hT6Bx4F9laZccIRHylT
OQnvLOROMrrxwuvn3FQ0D8Pult6H4bC9fVnB3qpLoa/2yJBbfI4L7bRmB0DStbW2
sCUkfmdib0bSnd6t9foSQQm3URKRaOGS7KiL4XBsFTyk4tm9MiD9xviL5O5u9Lga
Ucf0hpqUjsywyW0reiiQinMlM8KJeU8eC41DfC0vBmRsC1ayau5ktr1dshSGcnKl
+T7EUJuWYp6lTQAOPYgZd05uTcA8F5CPlZpsJz6kU3IvR9JCU5VzWRtE9OKmqTk/
4KwR9kLJLMsB+/uIGsr9V9UQ8d5MflQqW/MCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQwVhWeCMrmXSb29/1MMFs0eN94rDAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMDMyOTcxNzktY2MxNi00NzBhLTg0NWMtYzRhYjM3NjJlMDgxLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJw/q0irTdhgs2kq
1DEEvI1QYuinByLeAKKtjWC0xa2o5RYtOwm+RWN1KI5shpq6eEX9l6hy20P1+uPo
Y9Y8YCvLz7VAYLIyKWjajqoI1lpPSU304M+VI55hPyZAdFhHr1mIbyZvd+wp4wyS
7I2tXa2sOVM/o2kMRWGbICOFR9DbBtvzw7B39MKMLhBP8JHdP4ZvhpkMJYFP8Qsb
6JBMS4SLayTjMSWNsF4/SDU5sldEDGipsyxWSuzwTIN68oXLSTLdnxAT8+zSoz1f
olKu3R/KXVnOgEmasV8PuCHfGtJ+qMg0cBmpmTDWFPWSKbl6uMb6xN8fQIacdhCn
edkYXrI=
-----END CERTIFICATE-----