Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/06d9469f-bba8-4bd5-aa53-1e6600f92094.roa
File:                     06d9469f-bba8-4bd5-aa53-1e6600f92094.roa (raw, json)
Hash identifier:          YvkJMmGhJgceioiFqyRlo0tE1ZXe4midFklVbLO15FE=
Subject key identifier:   0A:61:30:3A:BA:DA:F4:D0:7B:42:8B:1C:0E:D5:04:9B:3B:F0:7C:69
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       25054041808FEF7DC52E779D837BB2EB8CE338E5
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/06d9469f-bba8-4bd5-aa53-1e6600f92094.roa
Signing time:             Fri 12 May 2023 00:00:00 +0000
ROA not before:           Fri 12 May 2023 00:00:00 +0000
ROA not after:            Mon 15 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:05:40:41:80:8f:ef:7d:c5:2e:77:9d:83:7b:b2:eb:8c:e3:38:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 12 00:00:00 2023 GMT
            Not After : May 15 23:59:59 2023 GMT
        Subject: serialNumber=1257a158abe1246c1ac0b74fbae29731f20c96be92ffeb355cfdb7742d1b80b6, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dd:89:1f:91:1b:6d:c3:ca:31:87:13:ad:1f:
                    95:8a:be:e5:f4:aa:95:11:9c:3a:34:0c:7e:9c:eb:
                    62:1d:ae:56:b2:ed:f9:8d:28:fc:d4:cb:0c:fc:d8:
                    2c:13:31:22:42:e0:57:e2:f7:d9:9b:bf:ef:64:92:
                    73:d6:f4:fd:b4:d3:bd:1e:60:ac:f8:97:66:1d:cc:
                    db:0e:0f:96:45:d4:5d:39:4a:79:53:0b:11:2f:3d:
                    64:09:dd:fa:db:22:fd:05:a7:3b:c2:e9:94:37:47:
                    45:aa:48:7e:0b:4a:18:e8:bc:63:76:ea:df:a4:02:
                    fe:b1:22:8e:42:ff:1f:de:39:5b:c3:46:a7:0b:8e:
                    21:e5:82:a4:f3:d8:94:92:97:7b:dd:df:d3:df:d0:
                    11:72:16:f5:f9:c2:85:78:0a:20:41:de:87:a0:21:
                    d2:bd:d1:80:ca:d6:90:37:38:4f:d0:df:a3:0a:f8:
                    c2:79:06:bc:d5:30:a7:16:91:08:a8:61:5c:a1:8e:
                    cd:ac:12:88:b7:5f:a8:e3:06:4a:af:75:92:28:d2:
                    95:5e:95:67:35:71:53:bd:6f:a5:90:79:83:08:4e:
                    a2:23:f0:4c:75:33:1d:bd:07:1a:4b:76:86:4b:e4:
                    44:40:00:51:f4:75:74:6a:22:95:29:b4:3d:2b:6b:
                    99:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:61:30:3A:BA:DA:F4:D0:7B:42:8B:1C:0E:D5:04:9B:3B:F0:7C:69
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/06d9469f-bba8-4bd5-aa53-1e6600f92094.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:47:df:99:d6:0f:a4:78:57:df:f2:92:31:7b:85:5d:df:34:
         db:22:0a:15:f9:91:57:28:5c:ea:6d:11:ee:aa:77:a0:67:d6:
         91:31:35:f5:ff:a3:61:c5:75:bb:4b:92:bc:94:0a:2b:fe:89:
         02:fe:53:83:1c:bb:02:85:66:ca:2a:cc:c9:ba:5b:7c:d1:d1:
         ea:0d:bd:09:0b:4c:f3:3c:b6:ec:ad:c6:35:b0:82:87:f8:b3:
         99:d4:a0:b0:aa:5b:d3:e8:11:f3:5a:98:1a:39:f5:50:9c:53:
         44:58:e0:55:7f:32:c2:e3:52:0a:76:6b:6a:16:8b:d4:1e:bf:
         be:65:cd:10:8f:34:65:16:84:2c:a3:2e:1c:e9:3c:17:76:ff:
         fa:b8:5f:8d:fe:0d:57:68:15:e7:96:1e:09:e0:16:8d:3b:ca:
         6a:8a:4f:30:50:d1:e5:26:05:e4:05:51:32:e4:75:90:dc:6f:
         ce:55:e8:5c:2c:c4:17:8b:bb:72:b1:a5:3d:46:4b:98:43:c9:
         be:cd:61:73:c2:f7:3c:37:9c:2d:50:d6:8b:4c:4b:b9:cd:d6:
         ff:ff:4d:f4:ea:17:8c:b9:7f:c7:c5:dc:04:3e:c1:d6:bc:d7:
         70:a9:0b:2e:55:67:09:34:f0:96:32:ca:ff:93:c2:f8:34:d6:
         0a:93:44:82
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUJQVAQYCP733FLnedg3uy64zjOOUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNTEyMDAwMDAwWhcNMjMwNTE1MjM1OTU5
WjCBpTFJMEcGA1UEBRNAMTI1N2ExNThhYmUxMjQ2YzFhYzBiNzRmYmFlMjk3MzFm
MjBjOTZiZTkyZmZlYjM1NWNmZGI3NzQyZDFiODBiNjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALDdiR+RG23DyjGHE60flYq+5fSqlRGcOjQMfpzrYh2uVrLt+Y0o
/NTLDPzYLBMxIkLgV+L32Zu/72SSc9b0/bTTvR5grPiXZh3M2w4PlkXUXTlKeVML
ES89ZAnd+tsi/QWnO8LplDdHRapIfgtKGOi8Y3bq36QC/rEijkL/H945W8NGpwuO
IeWCpPPYlJKXe93f09/QEXIW9fnChXgKIEHeh6Ah0r3RgMrWkDc4T9Dfowr4wnkG
vNUwpxaRCKhhXKGOzawSiLdfqOMGSq91kijSlV6VZzVxU71vpZB5gwhOoiPwTHUz
Hb0HGkt2hkvkREAAUfR1dGoilSm0PStrmakCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQKYTA6utr00HtCixwO1QSbO/B8aTAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMDZkOTQ2OWYtYmJhOC00YmQ1LWFhNTMtMWU2NjAwZjkyMDk0LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACtH35nWD6R4V9/y
kjF7hV3fNNsiChX5kVcoXOptEe6qd6Bn1pExNfX/o2HFdbtLkryUCiv+iQL+U4Mc
uwKFZsoqzMm6W3zR0eoNvQkLTPM8tuytxjWwgof4s5nUoLCqW9PoEfNamBo59VCc
U0RY4FV/MsLjUgp2a2oWi9Qev75lzRCPNGUWhCyjLhzpPBd2//q4X43+DVdoFeeW
HgngFo07ymqKTzBQ0eUmBeQFUTLkdZDcb85V6FwsxBeLu3KxpT1GS5hDyb7NYXPC
9zw3nC1Q1otMS7nN1v//TfTqF4y5f8fF3AQ+wda813CpCy5VZwk08JYyyv+Twvg0
1gqTRII=
-----END CERTIFICATE-----