Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0e5cd7d3-5cb6-4599-8858-1b337d6d1b55.roa
File:                     0e5cd7d3-5cb6-4599-8858-1b337d6d1b55.roa (raw, json)
Hash identifier:          jdmfi1zSl1P/0ZgjtJWRPtuVZuAkgHmTAja0QKJ3geY=
Subject key identifier:   EC:70:79:04:3E:CC:0A:64:0E:A2:27:4A:7B:1E:AD:92:B8:61:B1:D7
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7308707E68CF66831D65E4020BE4B17FD9A16F5A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0e5cd7d3-5cb6-4599-8858-1b337d6d1b55.roa
Signing time:             Sun 26 Mar 2023 00:00:00 +0000
ROA not before:           Sun 26 Mar 2023 00:00:00 +0000
ROA not after:            Wed 29 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:08:70:7e:68:cf:66:83:1d:65:e4:02:0b:e4:b1:7f:d9:a1:6f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 26 00:00:00 2023 GMT
            Not After : Mar 29 23:59:59 2023 GMT
        Subject: serialNumber=29571243c31a3b9bc41781049f3d60d358b541c07b3cdb2dfffb4609be0d333b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3a:f7:26:86:26:50:17:a8:00:45:48:62:7c:
                    fa:15:fb:8d:eb:d0:29:a9:c2:f8:6e:33:52:5e:1c:
                    5c:8a:d8:43:94:39:a3:66:a1:dc:48:3c:4a:4f:d5:
                    ea:53:da:af:d6:b4:c0:d4:98:9d:82:f6:f6:74:a0:
                    79:41:a0:3c:70:d3:ac:b9:a1:1c:6e:95:71:20:30:
                    81:21:28:a2:20:48:b1:76:73:64:c0:ec:97:ac:57:
                    fa:e1:f4:72:3b:80:6f:20:0c:38:05:56:51:c9:3c:
                    9d:8a:0c:6c:a7:d8:4f:24:a9:37:fe:65:f5:7c:57:
                    3d:51:51:19:e0:3c:6e:4e:03:5c:9b:0a:57:42:97:
                    f5:84:7a:28:38:9a:b0:7c:60:fd:36:22:b0:f5:a1:
                    4e:02:07:0c:f6:af:db:a1:5c:32:ca:7c:c7:6b:30:
                    d0:eb:8e:4f:6c:e5:92:bb:46:96:90:c4:9e:7d:48:
                    bc:9f:30:12:0b:8d:2f:38:07:0f:b1:56:09:b3:0b:
                    f4:47:f2:0d:9b:59:b6:2a:57:8a:09:17:3a:e7:83:
                    9a:c2:51:e5:bb:04:28:85:49:7d:53:dc:e8:84:f2:
                    9f:75:83:96:3d:6d:bb:57:b4:9c:e3:bf:6d:46:27:
                    2c:e3:c9:63:49:86:0c:19:c6:ea:52:50:3f:cf:e7:
                    67:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:70:79:04:3E:CC:0A:64:0E:A2:27:4A:7B:1E:AD:92:B8:61:B1:D7
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0e5cd7d3-5cb6-4599-8858-1b337d6d1b55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:4f:b1:36:ee:aa:67:d8:71:be:77:96:b4:44:1c:20:4d:3f:
         22:79:29:af:49:78:b0:59:02:44:46:68:f4:8b:1c:bd:aa:70:
         23:2f:c3:4f:50:a8:0b:4a:05:ec:67:e5:a3:31:4f:3f:f9:80:
         e0:16:3e:2e:e5:03:06:16:19:f0:68:50:50:4b:09:65:6e:1d:
         48:03:bb:e4:28:b0:29:62:c7:42:eb:6f:84:3d:39:3a:92:33:
         30:f0:5f:2a:d2:df:a9:0b:c1:b4:22:4a:c4:20:b6:98:73:2a:
         69:0b:fa:19:46:5f:2b:ff:cd:07:7f:3c:95:3c:ba:e4:c1:cf:
         a7:70:44:3b:c3:f4:5e:64:97:70:81:46:8f:90:36:11:03:ae:
         74:ea:89:cf:d7:9c:5e:95:5f:89:0d:18:49:7e:cc:c2:c2:72:
         48:51:da:5a:48:ce:aa:5f:a5:4c:80:f5:25:6d:3b:bb:85:69:
         43:80:61:dc:ca:36:fc:9f:61:67:d8:3b:02:94:08:e0:d7:04:
         b4:fd:d5:2a:8e:33:bf:45:c2:cd:bd:1b:a0:59:16:65:15:ff:
         b6:87:1f:94:f4:78:bc:b9:c9:9b:84:30:7c:13:46:1c:98:e2:
         4a:64:30:08:74:0d:d6:08:ca:4a:18:72:47:10:20:1b:41:11:
         21:7c:d5:1c
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUcwhwfmjPZoMdZeQCC+Sxf9mhb1owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMzI2MDAwMDAwWhcNMjMwMzI5MjM1OTU5
WjCBpTFJMEcGA1UEBRNAMjk1NzEyNDNjMzFhM2I5YmM0MTc4MTA0OWYzZDYwZDM1
OGI1NDFjMDdiM2NkYjJkZmZmYjQ2MDliZTBkMzMzYjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJs69yaGJlAXqABFSGJ8+hX7jevQKanC+G4zUl4cXIrYQ5Q5o2ah
3Eg8Sk/V6lPar9a0wNSYnYL29nSgeUGgPHDTrLmhHG6VcSAwgSEooiBIsXZzZMDs
l6xX+uH0cjuAbyAMOAVWUck8nYoMbKfYTySpN/5l9XxXPVFRGeA8bk4DXJsKV0KX
9YR6KDiasHxg/TYisPWhTgIHDPav26FcMsp8x2sw0OuOT2zlkrtGlpDEnn1IvJ8w
EguNLzgHD7FWCbML9EfyDZtZtipXigkXOueDmsJR5bsEKIVJfVPc6ITyn3WDlj1t
u1e0nOO/bUYnLOPJY0mGDBnG6lJQP8/nZ1kCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTscHkEPswKZA6iJ0p7Hq2SuGGx1zAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMGU1Y2Q3ZDMtNWNiNi00NTk5LTg4NTgtMWIzMzdkNmQxYjU1LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHtPsTbuqmfYcb53
lrREHCBNPyJ5Ka9JeLBZAkRGaPSLHL2qcCMvw09QqAtKBexn5aMxTz/5gOAWPi7l
AwYWGfBoUFBLCWVuHUgDu+QosClix0Lrb4Q9OTqSMzDwXyrS36kLwbQiSsQgtphz
KmkL+hlGXyv/zQd/PJU8uuTBz6dwRDvD9F5kl3CBRo+QNhEDrnTqic/XnF6VX4kN
GEl+zMLCckhR2lpIzqpfpUyA9SVtO7uFaUOAYdzKNvyfYWfYOwKUCODXBLT91SqO
M79Fws29G6BZFmUV/7aHH5T0eLy5yZuEMHwTRhyY4kpkMAh0DdYIykoYckcQIBtB
ESF81Rw=
-----END CERTIFICATE-----