Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0d7bc2aa-ca19-4c4f-9a59-2ad24786bbfc.roa
File:                     0d7bc2aa-ca19-4c4f-9a59-2ad24786bbfc.roa (raw, json)
Hash identifier:          PbFxsjGg/K+wTWhb1YD/gEfed4L0w/WO8mExxAkGhcc=
Subject key identifier:   8F:B7:0A:ED:49:41:16:47:A8:70:2E:87:26:D8:C6:A5:07:AE:AB:52
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       72C5B66A58D8E30659FF157052F1100B02A70DA9
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0d7bc2aa-ca19-4c4f-9a59-2ad24786bbfc.roa
Signing time:             Tue 14 Mar 2023 00:00:00 +0000
ROA not before:           Tue 14 Mar 2023 00:00:00 +0000
ROA not after:            Fri 17 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c5:b6:6a:58:d8:e3:06:59:ff:15:70:52:f1:10:0b:02:a7:0d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 14 00:00:00 2023 GMT
            Not After : Mar 17 23:59:59 2023 GMT
        Subject: serialNumber=7dcc1dade5b6c46d930e0771b304ece1be2c59d319a3ae3670b3272841eef945, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:66:49:61:2b:08:d0:1b:b7:79:d8:a9:47:38:
                    3a:03:7e:a5:e3:04:8f:d6:68:8c:d4:f7:f3:52:54:
                    c4:36:41:85:64:b3:9c:61:99:cf:b5:db:24:c3:51:
                    a9:83:fc:9d:6f:6a:7f:9b:80:7b:b2:81:1a:8a:76:
                    ee:56:33:69:d2:74:e8:08:91:f6:06:bb:8e:91:26:
                    34:3a:4b:2d:73:00:86:b5:21:5d:39:e7:2b:c5:64:
                    15:99:5f:8f:0e:d5:6d:ad:d1:68:8c:0c:e2:67:54:
                    c0:44:f0:16:d8:9c:02:aa:87:1d:f9:0a:44:99:d9:
                    b5:ef:fa:ce:ca:9e:d3:42:60:81:99:16:5a:30:85:
                    73:a9:59:39:6c:b2:21:27:ac:ac:0d:ac:ed:b1:1c:
                    8c:5a:cd:59:c8:54:a0:ca:c8:04:a5:d1:03:bb:fb:
                    e5:9c:8a:54:68:e4:92:09:c4:97:85:d0:05:b6:2f:
                    6d:d4:92:78:9d:9f:b1:83:ee:b0:52:79:94:95:6b:
                    2a:41:66:36:78:b2:95:2a:63:d7:52:c8:e2:04:39:
                    b9:c2:79:12:0b:ec:a2:10:5e:de:ae:c1:2e:70:ed:
                    9e:b8:a4:97:b9:57:1c:5e:36:01:55:48:c0:fd:c0:
                    dd:ee:f2:fa:d3:f1:f9:41:90:a2:73:bf:26:01:1d:
                    f3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B7:0A:ED:49:41:16:47:A8:70:2E:87:26:D8:C6:A5:07:AE:AB:52
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0d7bc2aa-ca19-4c4f-9a59-2ad24786bbfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:66:ad:3d:9c:64:23:27:e5:04:6b:3f:c0:a3:66:a2:b0:31:
         b3:2e:78:64:e0:96:6d:61:0d:a5:41:57:ae:70:d3:01:f3:41:
         f0:19:be:91:8f:3a:79:70:1a:6b:ed:3e:09:df:4b:10:93:52:
         02:4f:f8:ff:d8:ae:7c:3b:a3:ff:8d:e6:dc:2b:36:37:f8:3d:
         17:35:9f:1d:fa:13:b5:03:6f:5f:c6:6e:88:2c:84:0f:a8:4a:
         6e:e2:57:82:94:6c:4d:13:8e:3c:97:7e:35:96:e4:e4:b5:5d:
         55:4f:77:95:4d:0c:3b:97:67:2b:08:d3:62:ad:01:d2:89:7c:
         69:c3:84:57:8e:ac:e2:59:c5:40:bc:ff:12:94:dd:89:9c:45:
         71:ae:ab:68:a5:8c:e2:0a:98:62:fb:1d:a5:38:e4:2f:ed:09:
         1f:86:c8:51:85:dd:8e:77:fb:7a:57:02:8c:32:07:ff:90:6d:
         29:75:37:1d:ab:c7:4a:d6:2b:47:36:71:3a:aa:25:96:4c:a4:
         94:2d:5b:42:e8:7b:9b:f2:bd:82:9c:a2:87:6f:7d:47:98:1d:
         fa:40:28:2e:cf:a2:7c:ad:86:2a:56:a6:b6:55:c7:ca:2d:44:
         e8:10:7f:f7:f0:e4:d1:5b:de:8a:bd:ac:18:c9:1c:13:1c:ea:
         2a:de:76:85
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUcsW2aljY4wZZ/xVwUvEQCwKnDakwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMzE0MDAwMDAwWhcNMjMwMzE3MjM1OTU5
WjCBpTFJMEcGA1UEBRNAN2RjYzFkYWRlNWI2YzQ2ZDkzMGUwNzcxYjMwNGVjZTFi
ZTJjNTlkMzE5YTNhZTM2NzBiMzI3Mjg0MWVlZjk0NTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJNmSWErCNAbt3nYqUc4OgN+peMEj9ZojNT381JUxDZBhWSznGGZ
z7XbJMNRqYP8nW9qf5uAe7KBGop27lYzadJ06AiR9ga7jpEmNDpLLXMAhrUhXTnn
K8VkFZlfjw7Vba3RaIwM4mdUwETwFticAqqHHfkKRJnZte/6zsqe00JggZkWWjCF
c6lZOWyyISesrA2s7bEcjFrNWchUoMrIBKXRA7v75ZyKVGjkkgnEl4XQBbYvbdSS
eJ2fsYPusFJ5lJVrKkFmNniylSpj11LI4gQ5ucJ5EgvsohBe3q7BLnDtnrikl7lX
HF42AVVIwP3A3e7y+tPx+UGQonO/JgEd8yECAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBSPtwrtSUEWR6hwLocm2MalB66rUjAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMGQ3YmMyYWEtY2ExOS00YzRmLTlhNTktMmFkMjQ3ODZiYmZjLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKpmrT2cZCMn5QRr
P8CjZqKwMbMueGTglm1hDaVBV65w0wHzQfAZvpGPOnlwGmvtPgnfSxCTUgJP+P/Y
rnw7o/+N5twrNjf4PRc1nx36E7UDb1/GbogshA+oSm7iV4KUbE0TjjyXfjWW5OS1
XVVPd5VNDDuXZysI02KtAdKJfGnDhFeOrOJZxUC8/xKU3YmcRXGuq2iljOIKmGL7
HaU45C/tCR+GyFGF3Y53+3pXAowyB/+QbSl1Nx2rx0rWK0c2cTqqJZZMpJQtW0Lo
e5vyvYKcoodvfUeYHfpAKC7PonythipWprZVx8otROgQf/fw5NFb3oq9rBjJHBMc
6iredoU=
-----END CERTIFICATE-----