Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0bd03e32-8918-47ac-89c5-afc7621fce8a.roa
File:                     0bd03e32-8918-47ac-89c5-afc7621fce8a.roa (raw, json)
Hash identifier:          881NraRlAReCjvSXZUGgtV3GQ8xn1jvNq91F+Mi/sgg=
Subject key identifier:   6A:0B:2E:70:47:46:F8:AF:79:6A:A1:FD:86:B9:44:0C:8F:AD:16:54
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       03C93858CBB9D3E46B5497E0EC53FD6D11C83A11
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0bd03e32-8918-47ac-89c5-afc7621fce8a.roa
Signing time:             Wed 05 Apr 2023 00:00:00 +0000
ROA not before:           Wed 05 Apr 2023 00:00:00 +0000
ROA not after:            Sat 08 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c9:38:58:cb:b9:d3:e4:6b:54:97:e0:ec:53:fd:6d:11:c8:3a:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  5 00:00:00 2023 GMT
            Not After : Apr  8 23:59:59 2023 GMT
        Subject: serialNumber=146664b37aa047b7de9cb3210764073daea928fda68a8023a6418758f6ffef8a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c5:3e:51:dd:3a:98:dd:13:e9:82:e5:75:f3:
                    53:a3:b0:14:28:9f:ea:b5:4a:3d:7e:fd:ba:23:17:
                    9f:84:47:cf:9b:3d:70:41:f1:6f:3c:e8:93:cf:17:
                    b9:48:9d:4a:3c:ce:27:2b:2e:a3:ed:1c:77:a6:ff:
                    80:8c:3c:8f:15:6d:77:07:da:79:11:ba:0f:c6:ba:
                    bc:80:57:2d:a1:09:69:49:c1:8b:df:f5:05:01:34:
                    88:48:bb:39:4a:d2:63:18:3f:29:bf:ac:10:b6:21:
                    c5:55:0f:6a:4b:d7:ef:8e:9a:74:e6:15:fb:b7:d8:
                    e5:ad:b8:de:6e:47:74:be:2d:32:37:03:cf:27:39:
                    86:16:74:62:aa:72:d4:8c:3d:21:6d:3a:5d:ac:b5:
                    7f:66:67:a8:b6:14:de:7b:8f:4b:6b:be:a7:e8:a1:
                    55:ee:b8:3b:f0:eb:e6:a0:52:f4:de:97:cf:49:4a:
                    ea:38:27:ae:6b:b8:14:66:ff:9e:41:e8:1b:05:4f:
                    aa:7c:2e:b7:2a:73:2d:02:8d:52:30:07:69:b7:84:
                    b4:ff:7b:a4:d4:10:81:a4:a0:3f:de:1f:37:78:d7:
                    6d:6e:7e:ca:63:2b:13:a6:e5:63:9f:fb:a1:34:38:
                    c0:fa:58:7e:c6:86:0b:cb:c8:89:b1:47:d5:8d:17:
                    7a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0B:2E:70:47:46:F8:AF:79:6A:A1:FD:86:B9:44:0C:8F:AD:16:54
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0bd03e32-8918-47ac-89c5-afc7621fce8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:13:23:92:ba:2a:18:f3:63:66:5d:8f:f1:1e:60:bd:7b:02:
         3c:84:70:e5:cd:e3:c6:9c:90:c4:47:f9:f3:b8:1c:c2:0b:5f:
         e9:ad:e5:f2:f6:83:1f:5d:d0:c5:5c:d8:f2:17:97:3f:ea:98:
         37:90:aa:e9:3f:80:58:64:5e:5a:8e:e6:2f:28:4f:36:aa:c3:
         22:a9:cc:5f:71:7e:1d:80:eb:74:04:a8:7c:bf:93:68:9f:74:
         be:45:af:34:fe:4a:7d:9a:b8:ca:a8:c0:31:cb:d6:28:5f:26:
         04:77:ec:66:c2:1a:43:5f:49:11:b0:0b:7e:11:a9:d4:f9:73:
         98:0c:5d:45:72:ad:56:26:1d:a1:ad:75:fd:1d:dc:32:e9:6c:
         6f:72:68:a0:c7:4a:67:58:a4:3e:d4:bd:e2:3d:b2:29:59:85:
         b4:95:16:41:fc:1c:d5:7c:fb:a9:a2:aa:3f:5b:df:31:ae:2f:
         f4:0f:bf:9f:63:ac:da:ca:1d:ca:91:14:19:13:1d:86:bf:c4:
         5f:f3:36:a1:09:03:54:8c:8a:db:ac:87:83:41:76:d4:8b:49:
         69:c3:66:d9:a4:a4:4e:e2:90:8c:90:e2:74:e8:75:75:91:2c:
         bf:8f:35:c1:73:e0:c9:c2:de:fd:fa:b3:3a:5a:07:8f:77:bd:
         17:2d:10:50
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUA8k4WMu50+RrVJfg7FP9bRHIOhEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNDA1MDAwMDAwWhcNMjMwNDA4MjM1OTU5
WjCBpTFJMEcGA1UEBRNAMTQ2NjY0YjM3YWEwNDdiN2RlOWNiMzIxMDc2NDA3M2Rh
ZWE5MjhmZGE2OGE4MDIzYTY0MTg3NThmNmZmZWY4YTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALLFPlHdOpjdE+mC5XXzU6OwFCif6rVKPX79uiMXn4RHz5s9cEHx
bzzok88XuUidSjzOJysuo+0cd6b/gIw8jxVtdwfaeRG6D8a6vIBXLaEJaUnBi9/1
BQE0iEi7OUrSYxg/Kb+sELYhxVUPakvX746adOYV+7fY5a243m5HdL4tMjcDzyc5
hhZ0Yqpy1Iw9IW06Xay1f2ZnqLYU3nuPS2u+p+ihVe64O/Dr5qBS9N6Xz0lK6jgn
rmu4FGb/nkHoGwVPqnwutypzLQKNUjAHabeEtP97pNQQgaSgP94fN3jXbW5+ymMr
E6blY5/7oTQ4wPpYfsaGC8vIibFH1Y0XevkCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRqCy5wR0b4r3lqof2GuUQMj60WVDAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMGJkMDNlMzItODkxOC00N2FjLTg5YzUtYWZjNzYyMWZjZThhLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIkTI5K6KhjzY2Zd
j/EeYL17AjyEcOXN48ackMRH+fO4HMILX+mt5fL2gx9d0MVc2PIXlz/qmDeQquk/
gFhkXlqO5i8oTzaqwyKpzF9xfh2A63QEqHy/k2ifdL5FrzT+Sn2auMqowDHL1ihf
JgR37GbCGkNfSRGwC34RqdT5c5gMXUVyrVYmHaGtdf0d3DLpbG9yaKDHSmdYpD7U
veI9silZhbSVFkH8HNV8+6miqj9b3zGuL/QPv59jrNrKHcqRFBkTHYa/xF/zNqEJ
A1SMitush4NBdtSLSWnDZtmkpE7ikIyQ4nTodXWRLL+PNcFz4MnC3v36szpaB493
vRctEFA=
-----END CERTIFICATE-----