Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0e345b10-96a4-43a7-b166-b31581a2a902.roa
File:                     0e345b10-96a4-43a7-b166-b31581a2a902.roa (raw, json)
Hash identifier:          vfZxREkvQ7sWY9cmLw5xTOJBw457JeSZGoTjCr4ih8g=
Subject key identifier:   53:43:07:F3:06:66:B7:D5:AD:0E:8A:6B:93:E6:FE:E9:49:E4:11:76
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       731A8B5F562B692EAD97A14308890FD9F8553097
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0e345b10-96a4-43a7-b166-b31581a2a902.roa
Signing time:             Sun 23 Apr 2023 00:00:00 +0000
ROA not before:           Sun 23 Apr 2023 00:00:00 +0000
ROA not after:            Wed 26 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:1a:8b:5f:56:2b:69:2e:ad:97:a1:43:08:89:0f:d9:f8:55:30:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 23 00:00:00 2023 GMT
            Not After : Apr 26 23:59:59 2023 GMT
        Subject: serialNumber=fb6bd756ace5f9f47e278ab0da01d4026bdf79d972c24a582e80edb62a32ed1d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:3b:11:ba:54:7c:29:73:d9:91:11:9b:5d:
                    d5:42:ab:a2:f4:23:d7:c7:51:23:5a:a6:e9:37:65:
                    49:57:86:c4:93:fd:90:ac:a4:87:9e:94:c6:eb:38:
                    c3:db:03:32:72:69:a6:cf:41:43:40:68:ad:e6:8d:
                    da:24:f7:b2:0c:f0:0a:f1:30:df:80:5d:51:62:5d:
                    70:61:77:ca:5d:a5:40:1b:b2:4e:08:9e:d7:23:e4:
                    cf:6e:64:57:52:23:f9:4e:7b:13:46:3f:48:c7:3f:
                    3a:85:15:40:9b:2f:fc:d7:31:02:b4:26:69:f5:ba:
                    cf:74:54:69:4e:85:3a:12:16:52:47:17:bb:4a:8b:
                    a0:2c:c4:d8:20:3d:d3:37:cf:e3:6b:86:37:c7:1a:
                    53:1c:e1:7b:d4:42:69:21:c0:ee:01:67:f7:a8:f0:
                    22:64:30:08:13:73:6a:ac:3e:90:40:60:91:34:22:
                    db:ef:a6:80:b2:b5:61:3e:4d:78:fc:81:87:0a:d0:
                    6d:02:94:fd:05:a2:bb:d1:c7:ba:b2:d3:f3:b2:e7:
                    46:be:47:b9:51:0b:a8:8d:c0:79:69:ff:51:0d:a8:
                    35:78:22:01:61:ad:40:a9:65:22:61:d2:eb:7b:4d:
                    81:95:0a:a2:e1:e3:fd:87:ee:4e:3c:b8:c8:e0:ea:
                    19:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:43:07:F3:06:66:B7:D5:AD:0E:8A:6B:93:E6:FE:E9:49:E4:11:76
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0e345b10-96a4-43a7-b166-b31581a2a902.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:f7:dd:89:54:14:1e:9b:67:c1:12:c3:77:2e:b5:b8:f7:55:
         bd:a7:1b:86:48:47:f1:98:a6:55:b7:46:cc:31:78:e7:b4:8c:
         8c:e3:63:4f:06:3c:25:00:13:fe:42:8a:0d:c6:0a:6e:b0:4b:
         72:4e:e5:f6:31:8a:5b:da:6a:65:4a:81:42:f8:57:0b:22:f0:
         d4:6d:40:cb:34:3d:35:38:dd:11:5b:b7:be:38:1d:a3:4f:ec:
         1e:3a:f3:bc:7b:5c:10:4a:d3:d5:98:40:f3:ee:40:40:f5:19:
         dd:4a:c0:a1:db:5f:c8:cd:99:50:c5:6d:8b:6a:9d:02:4f:99:
         48:f2:c4:bf:5d:f2:3f:5f:d3:ec:dc:10:ae:16:83:d4:67:94:
         d3:cb:b7:e1:d7:4f:ea:e7:f6:4a:fa:2e:96:c6:d3:f0:a7:b3:
         d8:00:66:ce:85:c9:4a:88:3a:50:94:cc:0e:83:47:ce:3b:b7:
         13:7c:c5:f0:01:90:cb:0f:e4:60:a3:13:ac:2b:fc:a4:26:80:
         52:db:3c:1d:0a:d9:c4:db:6b:b0:1e:6e:3b:dd:51:09:dd:1a:
         fe:c5:32:a0:ca:c7:9b:75:e7:e3:fd:d1:7a:3f:c0:38:2d:8b:
         8f:16:f9:86:8c:75:2e:08:d8:77:ab:ff:b9:0a:94:ae:2d:01:
         9a:40:85:cd
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUcxqLX1YraS6tl6FDCIkP2fhVMJcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNDIzMDAwMDAwWhcNMjMwNDI2MjM1OTU5
WjCBpTFJMEcGA1UEBRNAZmI2YmQ3NTZhY2U1ZjlmNDdlMjc4YWIwZGEwMWQ0MDI2
YmRmNzlkOTcyYzI0YTU4MmU4MGVkYjYyYTMyZWQxZDEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALK9OxG6VHwpc9mREZtd1UKrovQj18dRI1qm6TdlSVeGxJP9kKyk
h56Uxus4w9sDMnJpps9BQ0BoreaN2iT3sgzwCvEw34BdUWJdcGF3yl2lQBuyTgie
1yPkz25kV1Ij+U57E0Y/SMc/OoUVQJsv/NcxArQmafW6z3RUaU6FOhIWUkcXu0qL
oCzE2CA90zfP42uGN8caUxzhe9RCaSHA7gFn96jwImQwCBNzaqw+kEBgkTQi2++m
gLK1YT5NePyBhwrQbQKU/QWiu9HHurLT87LnRr5HuVELqI3AeWn/UQ2oNXgiAWGt
QKllImHS63tNgZUKouHj/YfuTjy4yODqGasCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRTQwfzBma31a0OimuT5v7pSeQRdjAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMGUzNDViMTAtOTZhNC00M2E3LWIxNjYtYjMxNTgxYTJhOTAyLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAD/33YlUFB6bZ8ES
w3cutbj3Vb2nG4ZIR/GYplW3RswxeOe0jIzjY08GPCUAE/5Cig3GCm6wS3JO5fYx
ilvaamVKgUL4Vwsi8NRtQMs0PTU43RFbt744HaNP7B4687x7XBBK09WYQPPuQED1
Gd1KwKHbX8jNmVDFbYtqnQJPmUjyxL9d8j9f0+zcEK4Wg9RnlNPLt+HXT+rn9kr6
LpbG0/Cns9gAZs6FyUqIOlCUzA6DR847txN8xfABkMsP5GCjE6wr/KQmgFLbPB0K
2cTba7AebjvdUQndGv7FMqDKx5t15+P90Xo/wDgti48W+YaMdS4I2Her/7kKlK4t
AZpAhc0=
-----END CERTIFICATE-----