Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/06ad67ef-95f3-4098-8a6b-26ce425fa51d.roa
File:                     06ad67ef-95f3-4098-8a6b-26ce425fa51d.roa (raw, json)
Hash identifier:          fKVVPwTGfq5WgDFIIvr0Umtl8edHBLwhwfCofUiN0e4=
Subject key identifier:   61:79:E0:D6:1A:12:2D:BC:E7:2F:AF:B6:24:AB:CA:2A:7F:E1:B0:47
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3DA051117F0B15D741E073BD840639FFBA2F843C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/06ad67ef-95f3-4098-8a6b-26ce425fa51d.roa
Signing time:             Mon 03 Apr 2023 00:00:00 +0000
ROA not before:           Mon 03 Apr 2023 00:00:00 +0000
ROA not after:            Thu 06 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a0:51:11:7f:0b:15:d7:41:e0:73:bd:84:06:39:ff:ba:2f:84:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  3 00:00:00 2023 GMT
            Not After : Apr  6 23:59:59 2023 GMT
        Subject: serialNumber=88e34d01df3b02b80a2cb2daf97ab9fb1b3def6ac45ef507929efaef7fe0f5d9, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:42:ed:7e:e1:41:d8:f9:0e:bc:20:87:19:01:
                    f8:5a:a1:5a:71:0c:d6:63:7b:cc:47:bc:99:0a:b2:
                    cd:af:c9:78:f7:7c:c3:bd:bf:63:e1:cf:a9:3d:9f:
                    07:d9:28:02:14:6f:f5:15:91:4c:96:2f:6f:91:46:
                    11:98:21:b8:d0:45:e7:84:55:3f:2c:99:14:3a:b2:
                    db:42:c2:47:3c:8d:40:e6:7d:ff:65:49:db:f2:bf:
                    77:b5:ef:70:69:e0:e1:8b:35:ab:55:57:cf:41:27:
                    40:bb:fd:1c:4b:27:16:88:7d:89:d8:ad:a3:40:fc:
                    4f:4a:5d:7a:a6:07:86:02:20:af:77:8e:04:5d:7f:
                    bb:76:76:ce:5b:02:be:2b:ff:24:51:0e:86:18:7c:
                    b3:0f:b3:ed:a1:10:4a:72:9d:49:53:eb:94:a8:a2:
                    9f:ca:60:3b:66:bd:76:8d:cc:6c:ac:58:73:39:25:
                    ca:2a:a7:6e:bf:04:72:de:ab:71:91:c0:dd:8e:3c:
                    8c:bd:68:f5:87:95:16:18:5d:58:6a:8d:b0:21:cc:
                    c4:fd:33:f3:98:9b:4c:27:d8:1f:2b:9e:ac:ff:e1:
                    20:b0:30:29:f5:bd:ef:32:63:37:a5:a2:19:09:f8:
                    45:6d:e1:5d:da:49:b5:71:5b:8d:65:dd:a3:f6:71:
                    b6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:79:E0:D6:1A:12:2D:BC:E7:2F:AF:B6:24:AB:CA:2A:7F:E1:B0:47
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/06ad67ef-95f3-4098-8a6b-26ce425fa51d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:0b:23:cb:8b:8a:45:c9:de:d8:23:f5:9b:7a:6d:7c:e8:1b:
         43:13:99:b1:47:84:2a:95:f0:01:67:d7:00:b7:a5:80:14:7f:
         dc:29:10:cd:44:83:fd:28:3b:35:0f:e5:ae:0c:65:d1:5e:c5:
         b7:65:d3:9a:f6:60:f5:3c:6d:b5:92:6f:b5:d8:f5:4c:69:c6:
         8d:b0:01:92:95:f6:5c:46:37:58:00:ae:ba:fb:5d:a9:36:dd:
         c7:1e:0c:ab:1d:33:28:08:1f:83:9a:35:55:d6:e3:73:e0:9f:
         22:c7:90:24:e5:8b:d4:87:1f:3f:fe:62:8a:27:5c:12:6e:19:
         39:6f:22:b6:e2:0e:0e:8a:f3:50:a7:95:46:47:c6:23:98:4b:
         63:90:98:eb:6e:59:bd:bf:fb:c6:4a:d3:27:9a:c5:8c:df:4c:
         cb:15:4e:69:e0:f2:87:0c:4b:72:5e:79:c8:37:52:82:4e:53:
         88:00:b5:e2:95:b4:a3:cb:23:fa:ca:88:c5:8c:d7:0e:11:fe:
         d3:8e:13:f3:ba:07:15:d9:cd:bb:a6:3d:00:ea:49:92:40:a3:
         d5:6c:1c:db:57:4e:45:10:66:be:4a:12:d6:25:8d:97:d2:7d:
         70:6c:22:79:62:d3:55:0a:76:29:eb:9f:21:2b:5a:08:91:69:
         0e:31:03:fd
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUPaBREX8LFddB4HO9hAY5/7ovhDwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNDAzMDAwMDAwWhcNMjMwNDA2MjM1OTU5
WjCBpTFJMEcGA1UEBRNAODhlMzRkMDFkZjNiMDJiODBhMmNiMmRhZjk3YWI5ZmIx
YjNkZWY2YWM0NWVmNTA3OTI5ZWZhZWY3ZmUwZjVkOTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK1C7X7hQdj5DrwghxkB+FqhWnEM1mN7zEe8mQqyza/JePd8w72/
Y+HPqT2fB9koAhRv9RWRTJYvb5FGEZghuNBF54RVPyyZFDqy20LCRzyNQOZ9/2VJ
2/K/d7XvcGng4Ys1q1VXz0EnQLv9HEsnFoh9idito0D8T0pdeqYHhgIgr3eOBF1/
u3Z2zlsCviv/JFEOhhh8sw+z7aEQSnKdSVPrlKiin8pgO2a9do3MbKxYczklyiqn
br8Ect6rcZHA3Y48jL1o9YeVFhhdWGqNsCHMxP0z85ibTCfYHyuerP/hILAwKfW9
7zJjN6WiGQn4RW3hXdpJtXFbjWXdo/Zxtv0CAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRheeDWGhItvOcvr7Ykq8oqf+GwRzAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMDZhZDY3ZWYtOTVmMy00MDk4LThhNmItMjZjZTQyNWZhNTFkLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAI0LI8uLikXJ3tgj
9Zt6bXzoG0MTmbFHhCqV8AFn1wC3pYAUf9wpEM1Eg/0oOzUP5a4MZdFexbdl05r2
YPU8bbWSb7XY9Uxpxo2wAZKV9lxGN1gArrr7Xak23cceDKsdMygIH4OaNVXW43Pg
nyLHkCTli9SHHz/+YoonXBJuGTlvIrbiDg6K81CnlUZHxiOYS2OQmOtuWb2/+8ZK
0yeaxYzfTMsVTmng8ocMS3Jeecg3UoJOU4gAteKVtKPLI/rKiMWM1w4R/tOOE/O6
BxXZzbumPQDqSZJAo9VsHNtXTkUQZr5KEtYljZfSfXBsInli01UKdinrnyErWgiR
aQ4xA/0=
-----END CERTIFICATE-----