Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/19ff0d43-8a48-4ff8-8524-a47b6f841027.roa
File:                     19ff0d43-8a48-4ff8-8524-a47b6f841027.roa (raw, json)
Hash identifier:          S/Hj4HGPBm8ZwfPD95QcZDxMqHAdblI9tatwcPiJlJE=
Subject key identifier:   6C:0E:77:31:80:E2:EB:8D:6E:85:57:86:C6:7F:50:F1:6F:CF:5E:21
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2AB33DF5EE7A866E895CDD061A27150704331CF9
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/19ff0d43-8a48-4ff8-8524-a47b6f841027.roa
Signing time:             Tue 21 Feb 2023 00:00:00 +0000
ROA not before:           Tue 21 Feb 2023 00:00:00 +0000
ROA not after:            Fri 24 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b3:3d:f5:ee:7a:86:6e:89:5c:dd:06:1a:27:15:07:04:33:1c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 21 00:00:00 2023 GMT
            Not After : Feb 24 23:59:59 2023 GMT
        Subject: serialNumber=9f1522b0aae7913624ec8789fa085dbf9c8cbb533ae3527acb41ca3df9486ebf, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:10:33:dd:66:44:ca:1a:f7:08:61:3f:50:ca:
                    7f:a2:16:bf:54:b1:c7:7c:f8:42:39:b6:f5:be:0e:
                    e1:ff:a7:c8:20:3c:5a:a6:9c:36:b9:9e:b5:ad:bc:
                    b6:94:f5:4e:dc:86:13:46:64:27:3d:28:cc:89:19:
                    1f:b7:85:06:88:0b:55:4e:d5:c5:74:3b:58:f0:b1:
                    ed:b7:c6:28:f9:94:7f:e7:b4:5a:35:3b:35:ef:39:
                    63:d1:07:57:e7:27:85:5a:ee:a8:cc:24:b0:51:27:
                    6d:b0:01:c6:4c:42:90:b8:af:70:70:ca:3c:a1:d4:
                    fb:69:0e:32:c2:e8:0d:0e:7e:4d:36:fb:aa:10:24:
                    19:7f:98:ea:40:16:ed:bf:a2:2d:45:85:a5:ae:cb:
                    61:c9:b3:d5:df:98:90:65:85:7e:70:0e:3e:c2:52:
                    64:44:bd:7b:6d:6d:fa:44:b0:bc:ba:b4:3e:cc:ce:
                    0a:45:0b:69:5a:75:96:9c:18:16:0b:9c:92:6f:88:
                    91:a7:4b:e1:b7:3e:c1:ff:99:9e:35:b3:b2:84:dd:
                    21:e6:d4:c4:b4:cd:3c:17:15:e4:93:4f:66:c2:01:
                    b5:9b:83:ef:35:43:1c:f2:49:76:8b:19:27:c4:5e:
                    31:67:ef:2b:3a:9b:09:43:3f:50:bd:06:26:ec:d1:
                    79:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0E:77:31:80:E2:EB:8D:6E:85:57:86:C6:7F:50:F1:6F:CF:5E:21
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/19ff0d43-8a48-4ff8-8524-a47b6f841027.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:66:6a:a6:c1:0b:12:49:53:d1:66:3c:2e:a3:a6:83:01:ee:
         39:0a:f8:b2:fd:9a:d1:ea:13:92:18:5a:b7:d5:1f:87:09:93:
         3b:ef:51:92:f2:20:6e:8a:c4:08:a5:2d:ed:85:de:c0:7c:7a:
         e4:09:1c:55:98:71:82:0e:97:35:63:e6:27:12:b1:e0:d5:32:
         b8:b7:55:47:a4:43:02:ba:44:c7:4e:7a:64:fe:e6:f1:5f:a2:
         e8:4f:92:8d:89:6c:90:16:6d:3f:56:28:da:a4:75:73:1e:04:
         23:d1:ce:a6:33:5b:0b:69:d5:75:f9:d4:c3:66:45:e4:5b:34:
         36:c2:35:de:cd:69:f2:30:d7:ef:aa:3f:bd:34:b3:95:2a:3f:
         ea:89:92:68:3a:24:87:b7:36:52:96:4a:c5:49:10:6b:8f:ad:
         71:87:87:14:9b:3f:c6:ac:6b:91:63:e8:6f:de:e3:3d:03:31:
         b8:2d:51:d9:2b:f7:d4:3b:2a:63:f0:34:06:2c:21:08:05:48:
         71:8a:f0:c6:54:7b:c9:1b:ed:ba:bf:15:7b:95:69:4b:87:d9:
         82:ec:f1:f3:a1:b4:5e:5f:76:a5:4a:fb:7f:a8:a4:2d:85:1b:
         06:8f:9f:0c:64:e9:ce:15:23:af:66:8c:30:40:dc:34:f2:54:
         35:38:b4:f3
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUKrM99e56hm6JXN0GGicVBwQzHPkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMjIxMDAwMDAwWhcNMjMwMjI0MjM1OTU5
WjCBpTFJMEcGA1UEBRNAOWYxNTIyYjBhYWU3OTEzNjI0ZWM4Nzg5ZmEwODVkYmY5
YzhjYmI1MzNhZTM1MjdhY2I0MWNhM2RmOTQ4NmViZjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKIQM91mRMoa9whhP1DKf6IWv1Sxx3z4Qjm29b4O4f+nyCA8Wqac
Nrmeta28tpT1TtyGE0ZkJz0ozIkZH7eFBogLVU7VxXQ7WPCx7bfGKPmUf+e0WjU7
Ne85Y9EHV+cnhVruqMwksFEnbbABxkxCkLivcHDKPKHU+2kOMsLoDQ5+TTb7qhAk
GX+Y6kAW7b+iLUWFpa7LYcmz1d+YkGWFfnAOPsJSZES9e21t+kSwvLq0PszOCkUL
aVp1lpwYFguckm+IkadL4bc+wf+ZnjWzsoTdIebUxLTNPBcV5JNPZsIBtZuD7zVD
HPJJdosZJ8ReMWfvKzqbCUM/UL0GJuzReTUCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRsDncxgOLrjW6FV4bGf1Dxb89eITAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMTlmZjBkNDMtOGE0OC00ZmY4LTg1MjQtYTQ3YjZmODQxMDI3LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIRmaqbBCxJJU9Fm
PC6jpoMB7jkK+LL9mtHqE5IYWrfVH4cJkzvvUZLyIG6KxAilLe2F3sB8euQJHFWY
cYIOlzVj5icSseDVMri3VUekQwK6RMdOemT+5vFfouhPko2JbJAWbT9WKNqkdXMe
BCPRzqYzWwtp1XX51MNmReRbNDbCNd7NafIw1++qP700s5UqP+qJkmg6JIe3NlKW
SsVJEGuPrXGHhxSbP8asa5Fj6G/e4z0DMbgtUdkr99Q7KmPwNAYsIQgFSHGK8MZU
e8kb7bq/FXuVaUuH2YLs8fOhtF5fdqVK+3+opC2FGwaPnwxk6c4VI69mjDBA3DTy
VDU4tPM=
-----END CERTIFICATE-----