Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/253b35b8-4f8d-4553-a0fc-c069c0f57a34.roa
File:                     253b35b8-4f8d-4553-a0fc-c069c0f57a34.roa (raw, json)
Hash identifier:          CYM5otkiR13CdNJnHfdR7u4lHPXgC+heG4U3tx4yPU4=
Subject key identifier:   58:24:65:65:41:68:6C:12:6A:A3:34:F8:87:FF:73:AE:25:B4:33:CD
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6D16F6361EDCA2A91A8C345298A882DBDB21A201
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/253b35b8-4f8d-4553-a0fc-c069c0f57a34.roa
Signing time:             Fri 17 Mar 2023 00:00:00 +0000
ROA not before:           Fri 17 Mar 2023 00:00:00 +0000
ROA not after:            Mon 20 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:16:f6:36:1e:dc:a2:a9:1a:8c:34:52:98:a8:82:db:db:21:a2:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 17 00:00:00 2023 GMT
            Not After : Mar 20 23:59:59 2023 GMT
        Subject: serialNumber=bf3d2d7e005015c4119966f2e732a1581d60f4f7c9f03bfef989a39d21cf5884, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4b:1e:3e:95:64:6a:cd:6d:50:25:bd:76:e5:
                    ec:5a:2a:8c:92:07:f1:50:3e:ad:4b:20:41:e1:1b:
                    76:94:59:d1:2a:66:c1:ca:04:a0:17:d3:8c:3e:37:
                    38:e6:f4:ec:18:bd:b3:4e:d8:3e:b1:36:77:f7:65:
                    f2:5a:0d:40:c1:d9:9f:05:b7:41:a0:a3:c7:e8:c9:
                    c7:9c:7d:54:9d:67:9d:98:35:67:44:5e:ff:7c:cd:
                    f2:62:86:29:aa:c4:f0:02:b0:4f:d8:69:f2:6d:b2:
                    8b:2b:c3:1c:25:a8:94:2d:01:98:da:b1:63:2f:6d:
                    23:38:60:f1:3a:26:fe:3d:e3:17:e5:a1:33:09:3d:
                    9a:73:71:26:af:6c:ef:4b:e5:fd:81:cf:22:ba:13:
                    0d:4f:4c:e5:b4:de:8f:f1:be:64:79:f9:d0:f8:60:
                    fd:ae:bd:0d:0e:f1:78:ad:22:39:69:72:94:dd:04:
                    a4:22:bd:5a:aa:a1:99:1e:ff:b9:63:14:86:74:fd:
                    83:51:57:f6:98:12:35:a0:0a:0e:47:1f:2d:97:ff:
                    1e:41:24:83:31:74:cf:c0:f6:2a:2d:b0:3a:9c:03:
                    17:56:e1:e0:21:ef:83:16:58:4a:d9:5b:3f:2c:e0:
                    a2:92:67:47:af:d7:bb:33:42:60:79:0d:6b:25:95:
                    ac:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:24:65:65:41:68:6C:12:6A:A3:34:F8:87:FF:73:AE:25:B4:33:CD
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/253b35b8-4f8d-4553-a0fc-c069c0f57a34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:56:7d:59:1e:d2:34:df:62:5f:fe:a8:ab:29:93:da:40:76:
         1c:10:65:f9:52:82:aa:fc:60:8e:c1:f3:cc:b3:fa:51:bd:f6:
         fa:65:ea:28:b9:c2:5b:07:21:63:d5:39:f3:16:fa:fb:5b:5e:
         39:9a:e3:6b:f2:e2:5e:b0:93:f8:ab:62:5c:c4:2b:3c:a1:6e:
         ff:e2:9a:54:55:77:d4:12:61:ec:e6:ef:ac:d5:23:8b:b1:d8:
         34:28:b7:70:6a:6a:c1:ea:f7:cb:14:c5:cf:3d:42:c4:30:1d:
         88:05:0b:8e:f0:9f:a0:8c:a7:61:49:f3:b8:19:e6:07:16:3d:
         f5:ec:52:72:4e:0c:6a:91:d3:99:ab:1e:99:09:19:51:b6:62:
         cc:5a:8f:47:26:de:f8:1a:7e:34:22:56:c4:a4:92:b9:b4:6f:
         80:ce:e8:a4:06:d3:77:d8:20:6e:e7:05:7a:98:55:19:22:ad:
         ae:fa:15:14:b0:4e:e0:b6:da:69:b7:1a:3d:5c:d7:7d:3b:0b:
         61:7d:17:0e:20:20:68:48:99:b6:eb:ab:da:75:eb:99:62:84:
         be:a3:e0:2c:00:a9:a1:88:ed:06:0d:69:60:6e:e2:c0:ef:0e:
         cc:9c:e2:e4:0b:ca:54:e6:b0:b4:0f:46:49:47:be:8d:2a:74:
         fe:7f:f0:0e
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUbRb2Nh7coqkajDRSmKiC29shogEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMzE3MDAwMDAwWhcNMjMwMzIwMjM1OTU5
WjCBpTFJMEcGA1UEBRNAYmYzZDJkN2UwMDUwMTVjNDExOTk2NmYyZTczMmExNTgx
ZDYwZjRmN2M5ZjAzYmZlZjk4OWEzOWQyMWNmNTg4NDEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKdLHj6VZGrNbVAlvXbl7FoqjJIH8VA+rUsgQeEbdpRZ0SpmwcoE
oBfTjD43OOb07Bi9s07YPrE2d/dl8loNQMHZnwW3QaCjx+jJx5x9VJ1nnZg1Z0Re
/3zN8mKGKarE8AKwT9hp8m2yiyvDHCWolC0BmNqxYy9tIzhg8Tom/j3jF+WhMwk9
mnNxJq9s70vl/YHPIroTDU9M5bTej/G+ZHn50Phg/a69DQ7xeK0iOWlylN0EpCK9
WqqhmR7/uWMUhnT9g1FX9pgSNaAKDkcfLZf/HkEkgzF0z8D2Ki2wOpwDF1bh4CHv
gxZYStlbPyzgopJnR6/XuzNCYHkNayWVrAUCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRYJGVlQWhsEmqjNPiH/3OuJbQzzTAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMjUzYjM1YjgtNGY4ZC00NTUzLWEwZmMtYzA2OWMwZjU3YTM0LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAClWfVke0jTfYl/+
qKspk9pAdhwQZflSgqr8YI7B88yz+lG99vpl6ii5wlsHIWPVOfMW+vtbXjma42vy
4l6wk/irYlzEKzyhbv/imlRVd9QSYezm76zVI4ux2DQot3BqasHq98sUxc89QsQw
HYgFC47wn6CMp2FJ87gZ5gcWPfXsUnJODGqR05mrHpkJGVG2Ysxaj0cm3vgafjQi
VsSkkrm0b4DO6KQG03fYIG7nBXqYVRkira76FRSwTuC22mm3Gj1c1307C2F9Fw4g
IGhImbbrq9p165lihL6j4CwAqaGI7QYNaWBu4sDvDsyc4uQLylTmsLQPRklHvo0q
dP5/8A4=
-----END CERTIFICATE-----