Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/23f17058-c9b6-4230-9206-6583a1e07006.roa
File:                     23f17058-c9b6-4230-9206-6583a1e07006.roa (raw, json)
Hash identifier:          aap2uDCjVt4/vuFSkln74N3cdFO6KLGX9Cx2jDC6qqg=
Subject key identifier:   A7:D3:04:19:B9:C1:C8:29:F3:C8:DF:23:41:BA:73:52:F0:B8:7B:9C
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       272515E320491B7DAB8E55DDFBA683ED0CE71566
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/23f17058-c9b6-4230-9206-6583a1e07006.roa
Signing time:             Mon 22 May 2023 00:00:00 +0000
ROA not before:           Mon 22 May 2023 00:00:00 +0000
ROA not after:            Thu 25 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:25:15:e3:20:49:1b:7d:ab:8e:55:dd:fb:a6:83:ed:0c:e7:15:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 22 00:00:00 2023 GMT
            Not After : May 25 23:59:59 2023 GMT
        Subject: serialNumber=d0f9a090b3310da44f31f685e842a52dcc0746b9e629eb80f6fe232a576c9b48, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ac:03:9b:25:77:54:23:bc:25:29:02:83:12:
                    eb:b3:3b:6b:91:68:74:3c:ed:22:aa:14:53:ad:31:
                    e1:76:b3:2f:82:16:55:df:04:b3:0c:e9:6a:82:df:
                    1b:eb:27:6d:a5:9f:8a:da:e0:73:27:8f:4e:67:61:
                    f4:c0:e6:93:e0:7c:95:3f:27:87:ac:36:f5:62:87:
                    55:24:eb:d1:eb:1f:48:55:32:99:79:21:74:b2:12:
                    b4:d4:d4:c4:18:38:23:8a:f4:c9:38:4e:d5:a3:41:
                    e8:62:35:b5:16:82:ef:2c:77:3b:5a:93:59:c0:b6:
                    c1:04:7b:29:b4:0a:ab:a7:66:35:ac:82:ff:8f:42:
                    f9:1c:c7:a1:54:34:10:af:60:8d:01:e6:8a:a5:7e:
                    59:71:f6:8b:46:e6:99:0d:3a:93:43:c1:1d:80:16:
                    e7:05:7a:08:7e:5a:b7:34:a4:0b:48:c6:72:1a:d0:
                    11:db:41:e6:c3:a7:f7:1b:f8:0b:4d:09:af:3a:40:
                    80:0b:53:34:82:3f:37:7d:de:a8:fc:4e:88:89:0d:
                    f4:20:d1:5d:97:13:29:a3:af:6f:1b:bf:c2:5e:bd:
                    4c:8d:87:77:65:3e:e9:33:22:7f:4d:18:5d:b0:1e:
                    a7:96:58:00:31:83:37:b4:3d:c9:b5:6f:22:62:26:
                    a7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D3:04:19:B9:C1:C8:29:F3:C8:DF:23:41:BA:73:52:F0:B8:7B:9C
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/23f17058-c9b6-4230-9206-6583a1e07006.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:aa:4e:9e:0e:0f:ce:d0:83:1c:55:fb:26:0e:23:17:b3:f3:
         8e:10:c7:f2:0b:4b:cb:56:52:d0:25:8e:0e:20:77:40:cd:26:
         69:05:46:da:18:b2:8e:4b:ae:af:7f:5f:42:85:66:5c:df:36:
         b2:90:11:d3:b1:8d:84:6c:bd:a4:45:09:b3:c4:29:4d:cb:a6:
         21:16:af:9b:50:74:89:e9:b3:2f:56:0e:6d:9d:e6:92:c5:6e:
         df:51:a8:86:a6:81:c5:36:8b:3f:d0:a2:bb:91:86:d0:ae:f6:
         3c:16:61:7a:a0:cf:fc:df:a9:fb:09:4d:2e:f1:c7:20:88:12:
         d6:b8:95:85:4d:11:aa:c8:dc:91:8d:85:66:a3:b4:ca:20:83:
         fd:b0:a9:3e:78:31:84:c8:d2:3f:cb:f6:94:79:29:16:08:12:
         0f:cd:36:ae:43:05:44:7f:6c:97:64:31:9c:0c:51:67:a0:87:
         0a:36:7e:b4:d4:41:a8:69:bf:74:9a:5f:dd:23:2f:66:71:8e:
         56:50:eb:b8:31:97:be:b5:7a:27:4a:5e:2b:2c:2a:b3:8e:e0:
         6f:50:c5:e5:b2:3c:c8:9c:de:f2:b0:6b:72:80:49:70:fc:3c:
         e2:97:cf:83:f6:d3:a5:e6:06:c0:6c:36:56:82:26:ac:8f:1b:
         da:d9:64:cb
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUJyUV4yBJG32rjlXd+6aD7QznFWYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNTIyMDAwMDAwWhcNMjMwNTI1MjM1OTU5
WjCBpTFJMEcGA1UEBRNAZDBmOWEwOTBiMzMxMGRhNDRmMzFmNjg1ZTg0MmE1MmRj
YzA3NDZiOWU2MjllYjgwZjZmZTIzMmE1NzZjOWI0ODEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAI6sA5sld1QjvCUpAoMS67M7a5FodDztIqoUU60x4XazL4IWVd8E
swzpaoLfG+snbaWfitrgcyePTmdh9MDmk+B8lT8nh6w29WKHVSTr0esfSFUymXkh
dLIStNTUxBg4I4r0yThO1aNB6GI1tRaC7yx3O1qTWcC2wQR7KbQKq6dmNayC/49C
+RzHoVQ0EK9gjQHmiqV+WXH2i0bmmQ06k0PBHYAW5wV6CH5atzSkC0jGchrQEdtB
5sOn9xv4C00JrzpAgAtTNII/N33eqPxOiIkN9CDRXZcTKaOvbxu/wl69TI2Hd2U+
6TMif00YXbAep5ZYADGDN7Q9ybVvImImpy8CAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBSn0wQZucHIKfPI3yNBunNS8Lh7nDAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMjNmMTcwNTgtYzliNi00MjMwLTkyMDYtNjU4M2ExZTA3MDA2LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJ2qTp4OD87QgxxV
+yYOIxez844Qx/ILS8tWUtAljg4gd0DNJmkFRtoYso5Lrq9/X0KFZlzfNrKQEdOx
jYRsvaRFCbPEKU3LpiEWr5tQdInpsy9WDm2d5pLFbt9RqIamgcU2iz/QoruRhtCu
9jwWYXqgz/zfqfsJTS7xxyCIEta4lYVNEarI3JGNhWajtMogg/2wqT54MYTI0j/L
9pR5KRYIEg/NNq5DBUR/bJdkMZwMUWeghwo2frTUQahpv3SaX90jL2ZxjlZQ67gx
l761eidKXissKrOO4G9QxeWyPMic3vKwa3KASXD8POKXz4P206XmBsBsNlaCJqyP
G9rZZMs=
-----END CERTIFICATE-----