Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0bd0ce69-35d4-42ba-bff7-a028b4f43342.roa
File:                     0bd0ce69-35d4-42ba-bff7-a028b4f43342.roa (raw, json)
Hash identifier:          B6NmpmbMHl8I/Z6YrphnWtlEHwrlcqDI2jUw7eJwe1E=
Subject key identifier:   17:37:8F:D8:09:DB:1A:98:C4:4E:C5:5D:D3:87:4E:25:FB:44:D9:C3
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       270D985621C6D0E7E5CB2C31DC72043A7FF28429
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0bd0ce69-35d4-42ba-bff7-a028b4f43342.roa
Signing time:             Fri 24 Mar 2023 00:00:00 +0000
ROA not before:           Fri 24 Mar 2023 00:00:00 +0000
ROA not after:            Mon 27 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:0d:98:56:21:c6:d0:e7:e5:cb:2c:31:dc:72:04:3a:7f:f2:84:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 24 00:00:00 2023 GMT
            Not After : Mar 27 23:59:59 2023 GMT
        Subject: serialNumber=9401950f9c4f3bef1df40500ccbd3a0192a8616f7ac6cfb74e60a1c688fa5254, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e7:4d:f5:93:81:be:35:0e:c2:b5:c7:17:14:
                    93:68:83:91:f8:e9:e7:74:e5:4a:bd:cc:25:62:22:
                    dc:26:f8:d1:b4:e3:06:b4:5c:80:3a:03:c5:45:48:
                    35:03:83:30:b0:60:17:5a:09:23:7e:b7:51:66:d2:
                    15:87:a9:13:f9:4c:65:31:b9:3d:17:e4:fa:22:83:
                    f2:2f:53:9b:cc:7d:86:78:0e:4e:8d:77:41:9e:45:
                    36:b7:61:37:c2:04:55:4d:65:8b:fb:46:8f:f1:00:
                    e1:9b:c7:71:db:52:b8:c9:b9:c0:ec:82:f5:86:2c:
                    e0:98:d4:0b:01:8c:b0:5d:08:8f:0c:98:a2:38:61:
                    af:ff:18:2f:da:01:36:b9:5f:28:a5:b8:f3:67:5f:
                    25:1a:d0:c2:3e:cc:52:3e:76:7a:cb:7e:0a:50:c6:
                    2f:46:d2:f5:8c:be:47:4a:31:f0:1b:9c:c8:81:17:
                    83:d3:39:74:2b:94:d2:71:c0:62:e6:e5:7d:e9:a4:
                    64:4b:db:6b:a6:89:07:00:72:c3:8d:bc:4f:07:33:
                    8c:26:00:ae:b5:9d:f7:10:ef:ae:bb:ae:6e:61:30:
                    b8:c1:e4:9c:69:85:a8:45:61:e5:49:e2:f2:6a:d4:
                    9a:19:97:14:8e:41:31:38:27:c3:1d:34:f3:44:53:
                    b3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:37:8F:D8:09:DB:1A:98:C4:4E:C5:5D:D3:87:4E:25:FB:44:D9:C3
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0bd0ce69-35d4-42ba-bff7-a028b4f43342.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:2e:75:e3:74:cd:11:17:ba:59:09:fa:b6:ba:f9:27:d5:f4:
         6b:74:d9:ac:f3:ba:7a:6a:dc:86:6c:e8:7a:f3:a7:3d:38:9b:
         4a:86:6f:a5:e0:61:b6:f5:8f:bf:de:18:62:be:96:e9:64:1d:
         0a:d8:ca:1a:3d:96:8a:88:54:41:51:bb:91:d8:a3:fb:5b:25:
         42:46:14:19:52:56:df:c1:c4:23:86:9d:37:56:d7:a3:dc:79:
         fc:80:e5:44:4e:96:fd:e1:39:28:96:da:25:10:db:89:e6:df:
         f8:f7:f1:3e:af:da:9e:9e:bb:fb:0e:b8:35:76:5d:3f:22:a9:
         99:db:fa:da:77:3d:d7:d8:d8:e3:ee:3a:a7:1e:e9:de:62:c0:
         06:1b:8a:45:45:75:a9:f7:8d:cf:4b:e3:99:b4:a5:56:41:87:
         ee:eb:0e:2d:29:0a:7e:cb:59:82:bb:d3:d3:e1:02:05:e1:c5:
         b3:36:55:19:05:fb:6f:a9:61:a9:07:38:19:b1:3c:bd:de:21:
         0e:7c:12:a8:d6:05:3d:f6:a7:c5:93:a3:0a:03:b8:11:91:a9:
         4f:d7:de:74:72:5b:10:44:ac:14:38:13:bf:46:ae:1e:5c:08:
         24:7e:79:dd:33:4d:3c:ad:71:db:a0:fd:19:85:13:98:4c:7b:
         2f:15:61:b2
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUJw2YViHG0Oflyywx3HIEOn/yhCkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMzI0MDAwMDAwWhcNMjMwMzI3MjM1OTU5
WjCBpTFJMEcGA1UEBRNAOTQwMTk1MGY5YzRmM2JlZjFkZjQwNTAwY2NiZDNhMDE5
MmE4NjE2ZjdhYzZjZmI3NGU2MGExYzY4OGZhNTI1NDEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJXnTfWTgb41DsK1xxcUk2iDkfjp53TlSr3MJWIi3Cb40bTjBrRc
gDoDxUVINQODMLBgF1oJI363UWbSFYepE/lMZTG5PRfk+iKD8i9Tm8x9hngOTo13
QZ5FNrdhN8IEVU1li/tGj/EA4ZvHcdtSuMm5wOyC9YYs4JjUCwGMsF0IjwyYojhh
r/8YL9oBNrlfKKW482dfJRrQwj7MUj52est+ClDGL0bS9Yy+R0ox8BucyIEXg9M5
dCuU0nHAYublfemkZEvba6aJBwByw428TwczjCYArrWd9xDvrruubmEwuMHknGmF
qEVh5Uni8mrUmhmXFI5BMTgnwx0080RTsxMCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQXN4/YCdsamMROxV3Th04l+0TZwzAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMGJkMGNlNjktMzVkNC00MmJhLWJmZjctYTAyOGI0ZjQzMzQyLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAFAudeN0zREXulkJ
+ra6+SfV9Gt02azzunpq3IZs6Hrzpz04m0qGb6XgYbb1j7/eGGK+lulkHQrYyho9
loqIVEFRu5HYo/tbJUJGFBlSVt/BxCOGnTdW16PcefyA5UROlv3hOSiW2iUQ24nm
3/j38T6v2p6eu/sOuDV2XT8iqZnb+tp3PdfY2OPuOqce6d5iwAYbikVFdan3jc9L
45m0pVZBh+7rDi0pCn7LWYK709PhAgXhxbM2VRkF+2+pYakHOBmxPL3eIQ58EqjW
BT32p8WTowoDuBGRqU/X3nRyWxBErBQ4E79Grh5cCCR+ed0zTTytcdug/RmFE5hM
ey8VYbI=
-----END CERTIFICATE-----