Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2d8566e3-b8a7-491f-b0d8-e69bcaec6559.roa
File:                     2d8566e3-b8a7-491f-b0d8-e69bcaec6559.roa (raw, json)
Hash identifier:          9UaI5qTotU6Zd864qoNw87uOdaZk80Pe4WlExWuGb8I=
Subject key identifier:   BC:1D:52:6F:95:60:2E:65:7D:DD:C8:E3:C7:EB:EF:2A:EF:99:87:C9
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       343C3BA1DB0D4A57BE71364F155B349C5605CA7B
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2d8566e3-b8a7-491f-b0d8-e69bcaec6559.roa
Signing time:             Mon 20 Feb 2023 00:00:00 +0000
ROA not before:           Mon 20 Feb 2023 00:00:00 +0000
ROA not after:            Thu 23 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3c:3b:a1:db:0d:4a:57:be:71:36:4f:15:5b:34:9c:56:05:ca:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 20 00:00:00 2023 GMT
            Not After : Feb 23 23:59:59 2023 GMT
        Subject: serialNumber=b7e75a4436e65c87aaa88a0910f162b6c987cb46ff87ba49443ab8731c95564d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a8:58:8a:57:ac:e8:7e:29:ee:a3:66:37:71:
                    c1:8b:5c:53:f4:6d:9a:35:07:1f:5e:86:71:36:74:
                    ea:90:f2:0c:c1:ac:b8:09:6e:65:45:cf:e3:e6:79:
                    c4:a0:1d:ea:92:7a:73:2e:0e:61:32:39:89:47:a5:
                    1e:a4:92:f9:5b:17:62:04:fb:73:9b:6e:f4:cd:22:
                    56:fa:f1:b9:b0:cf:40:14:1d:65:df:d0:11:af:d6:
                    b3:44:7e:39:d2:06:11:5b:3d:a7:aa:90:d6:52:9f:
                    63:0d:f1:cd:d2:f7:1c:c3:36:73:d0:2b:c5:03:80:
                    83:79:d1:f1:20:84:d2:e7:e3:56:84:74:ea:14:ea:
                    4b:f0:c6:ce:b9:28:04:1d:f7:35:c6:1c:13:9f:bd:
                    42:4c:9d:79:37:ab:89:dc:17:8c:ee:72:0b:c7:43:
                    37:7c:0c:83:14:54:49:5e:56:80:9c:49:54:22:d0:
                    ae:03:f0:2b:ab:11:e4:cb:f5:33:d5:6f:b3:69:65:
                    07:4b:78:6f:69:18:83:59:d5:f0:15:ba:69:29:25:
                    74:93:02:f5:d9:f9:94:97:6c:23:70:97:c1:10:3f:
                    1e:42:bd:7e:7f:c1:d9:a9:37:7b:a1:0c:c6:c6:08:
                    68:3b:4d:5e:1d:1d:24:dd:25:54:a1:82:c7:87:22:
                    a3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1D:52:6F:95:60:2E:65:7D:DD:C8:E3:C7:EB:EF:2A:EF:99:87:C9
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2d8566e3-b8a7-491f-b0d8-e69bcaec6559.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:e9:05:21:73:1a:e3:15:de:77:78:15:16:58:24:dc:e2:bf:
         8d:32:9f:1f:07:6b:ae:cb:e6:41:be:00:3b:aa:9c:48:35:8f:
         d0:96:d9:d5:9a:3d:6c:04:27:f0:70:6d:57:57:a3:9f:99:7c:
         f0:46:00:50:25:cd:ff:75:81:e9:2d:4b:d2:4d:4a:8e:0e:61:
         bc:47:09:d7:27:c5:aa:c7:e2:08:e2:c6:46:c4:1f:f9:a4:e7:
         7d:5d:66:07:0c:41:8c:58:75:b5:80:b9:28:3e:31:85:14:2c:
         ac:93:99:5e:8d:45:4c:ed:c8:41:01:7b:19:63:ac:6f:1f:ee:
         47:24:dd:8f:01:0e:31:52:6a:08:ab:5d:37:39:e2:f0:1d:43:
         c8:0d:d1:5d:d9:9f:3e:c4:67:f2:f6:8b:12:b4:9f:73:55:7d:
         06:db:5f:12:cc:3a:e8:ab:e1:cc:49:fc:46:43:c4:e6:c3:34:
         e5:52:fb:07:91:71:59:66:52:2c:05:82:3e:f7:f7:ee:dd:6f:
         2e:95:4f:2d:0f:60:d5:4a:de:2d:44:61:6c:b3:cd:28:96:4b:
         4b:b7:54:a9:a2:f0:b9:ea:7b:87:4a:9d:af:b6:d3:0c:04:e6:
         af:72:53:35:e7:39:c6:06:2c:4a:91:89:fe:63:01:cc:f6:67:
         5c:64:51:87
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUNDw7odsNSle+cTZPFVs0nFYFynswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMjIwMDAwMDAwWhcNMjMwMjIzMjM1OTU5
WjCBpTFJMEcGA1UEBRNAYjdlNzVhNDQzNmU2NWM4N2FhYTg4YTA5MTBmMTYyYjZj
OTg3Y2I0NmZmODdiYTQ5NDQzYWI4NzMxYzk1NTY0ZDEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANyoWIpXrOh+Ke6jZjdxwYtcU/RtmjUHH16GcTZ06pDyDMGsuAlu
ZUXP4+Z5xKAd6pJ6cy4OYTI5iUelHqSS+VsXYgT7c5tu9M0iVvrxubDPQBQdZd/Q
Ea/Ws0R+OdIGEVs9p6qQ1lKfYw3xzdL3HMM2c9ArxQOAg3nR8SCE0ufjVoR06hTq
S/DGzrkoBB33NcYcE5+9QkydeTeridwXjO5yC8dDN3wMgxRUSV5WgJxJVCLQrgPw
K6sR5Mv1M9Vvs2llB0t4b2kYg1nV8BW6aSkldJMC9dn5lJdsI3CXwRA/HkK9fn/B
2ak3e6EMxsYIaDtNXh0dJN0lVKGCx4cio5sCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBS8HVJvlWAuZX3dyOPH6+8q75mHyTAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMmQ4NTY2ZTMtYjhhNy00OTFmLWIwZDgtZTY5YmNhZWM2NTU5LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEzpBSFzGuMV3nd4
FRZYJNziv40ynx8Ha67L5kG+ADuqnEg1j9CW2dWaPWwEJ/BwbVdXo5+ZfPBGAFAl
zf91gektS9JNSo4OYbxHCdcnxarH4gjixkbEH/mk531dZgcMQYxYdbWAuSg+MYUU
LKyTmV6NRUztyEEBexljrG8f7kck3Y8BDjFSagirXTc54vAdQ8gN0V3Znz7EZ/L2
ixK0n3NVfQbbXxLMOuir4cxJ/EZDxObDNOVS+weRcVlmUiwFgj739+7dby6VTy0P
YNVK3i1EYWyzzSiWS0u3VKmi8Lnqe4dKna+20wwE5q9yUzXnOcYGLEqRif5jAcz2
Z1xkUYc=
-----END CERTIFICATE-----