Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2dd27fee-2775-47d8-afd9-d92e17fed6b3.roa
File:                     2dd27fee-2775-47d8-afd9-d92e17fed6b3.roa (raw, json)
Hash identifier:          NQMWL/FtcqPlkEgUQLTkWX/sFzfLjsFUTwzYmFU1naU=
Subject key identifier:   55:DD:45:A4:16:35:79:F6:48:7D:0A:DF:D9:DF:DB:6E:10:24:B4:AA
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       79051EFD3FF862B154E840F1F6D8195B7B5AC7FB
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2dd27fee-2775-47d8-afd9-d92e17fed6b3.roa
Signing time:             Sun 05 Mar 2023 00:00:00 +0000
ROA not before:           Sun 05 Mar 2023 00:00:00 +0000
ROA not after:            Wed 08 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:05:1e:fd:3f:f8:62:b1:54:e8:40:f1:f6:d8:19:5b:7b:5a:c7:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  5 00:00:00 2023 GMT
            Not After : Mar  8 23:59:59 2023 GMT
        Subject: serialNumber=72abcb76d378cda4eb62fa78ccdd79f0f2b3a330c28e95a328546d1f18bd6b3d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e3:10:3e:b2:5e:21:59:c0:47:a2:ab:4b:70:
                    ec:48:4f:ab:53:fa:9b:c6:d6:4b:64:de:2f:62:83:
                    b9:74:6a:a1:f0:87:00:dd:a4:5d:47:a6:66:7c:36:
                    a6:af:ed:c2:eb:80:2b:9c:dc:b4:16:e7:b5:b8:0b:
                    cd:50:04:dd:ee:19:b6:7c:fd:98:41:3b:f9:ce:ab:
                    8f:08:e5:76:68:42:11:50:cd:38:88:a1:79:d8:c2:
                    17:46:4a:14:d3:e9:6e:56:b0:42:ff:f3:77:94:96:
                    ec:35:32:08:9d:b8:c2:93:39:aa:f1:eb:4d:29:cd:
                    21:30:e0:a9:cd:ef:86:dc:95:ff:57:57:12:f8:a7:
                    0e:63:6d:ff:b3:38:5b:a3:d1:d5:ee:0b:fb:29:2a:
                    7a:3e:5a:19:6d:27:25:d3:55:a9:fa:e2:4f:38:28:
                    40:f2:bb:5c:10:65:a2:01:6d:a9:16:d3:17:bf:b3:
                    ac:c7:3d:e9:7d:23:6a:06:6f:27:25:86:ae:16:68:
                    b6:1e:23:69:f2:a7:b0:fa:24:0a:bd:45:26:db:f5:
                    6b:7e:bb:85:25:67:90:cb:1d:33:47:d3:ad:a3:34:
                    2f:be:c0:b4:59:21:9c:84:ed:d9:73:c2:77:02:b7:
                    ed:a2:f9:1c:2c:f6:d9:c8:74:da:b2:92:3f:a0:fe:
                    d1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DD:45:A4:16:35:79:F6:48:7D:0A:DF:D9:DF:DB:6E:10:24:B4:AA
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2dd27fee-2775-47d8-afd9-d92e17fed6b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:d4:8b:58:51:69:cc:48:39:3b:96:1e:ea:2e:5e:db:87:03:
         16:83:4b:9b:36:d3:86:54:b4:60:aa:cd:cb:9e:76:db:8c:c5:
         e7:90:7b:cd:8c:d1:c0:18:eb:06:4d:15:05:33:50:81:c9:ce:
         a1:26:e4:78:3d:fc:90:43:8c:41:f2:d4:05:7e:ae:5f:18:27:
         06:e1:b9:21:cd:f5:74:7f:b7:d8:37:4d:d3:94:a0:ce:f4:a4:
         99:fb:dc:e4:e4:23:df:5d:d7:e3:6f:fa:3d:5f:89:41:ad:e8:
         32:6e:d2:f8:f4:9f:11:e8:e0:40:7b:49:81:bc:9a:d1:f7:3a:
         95:99:f2:65:c9:21:75:1e:bb:ec:00:3a:a6:a6:53:cc:b6:24:
         f8:fa:09:fa:e3:79:bc:92:90:cd:3e:32:85:97:32:49:46:20:
         9d:56:35:0e:05:2b:78:45:ae:9e:35:eb:80:3c:df:cb:a4:ea:
         8f:2e:21:4b:a5:75:65:bd:33:8b:45:41:b5:34:b2:bc:7a:2e:
         68:38:49:00:7a:a3:7f:dd:92:94:c8:a1:70:81:cd:e8:a2:5a:
         34:a5:9f:a0:5f:41:94:94:c7:6e:cf:37:e4:47:51:ff:7b:ce:
         a7:10:24:7d:d5:4f:52:23:66:8f:48:f1:dd:a2:59:ae:10:c0:
         7c:d0:85:fa
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUeQUe/T/4YrFU6EDx9tgZW3tax/swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMzA1MDAwMDAwWhcNMjMwMzA4MjM1OTU5
WjCBpTFJMEcGA1UEBRNANzJhYmNiNzZkMzc4Y2RhNGViNjJmYTc4Y2NkZDc5ZjBm
MmIzYTMzMGMyOGU5NWEzMjg1NDZkMWYxOGJkNmIzZDEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJPjED6yXiFZwEeiq0tw7EhPq1P6m8bWS2TeL2KDuXRqofCHAN2k
XUemZnw2pq/twuuAK5zctBbntbgLzVAE3e4Ztnz9mEE7+c6rjwjldmhCEVDNOIih
edjCF0ZKFNPpblawQv/zd5SW7DUyCJ24wpM5qvHrTSnNITDgqc3vhtyV/1dXEvin
DmNt/7M4W6PR1e4L+ykqej5aGW0nJdNVqfriTzgoQPK7XBBlogFtqRbTF7+zrMc9
6X0jagZvJyWGrhZoth4jafKnsPokCr1FJtv1a367hSVnkMsdM0fTraM0L77AtFkh
nITt2XPCdwK37aL5HCz22ch02rKSP6D+0Z8CAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRV3UWkFjV59kh9Ct/Z39tuECS0qjAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMmRkMjdmZWUtMjc3NS00N2Q4LWFmZDktZDkyZTE3ZmVkNmIzLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAL3Ui1hRacxIOTuW
HuouXtuHAxaDS5s204ZUtGCqzcuedtuMxeeQe82M0cAY6wZNFQUzUIHJzqEm5Hg9
/JBDjEHy1AV+rl8YJwbhuSHN9XR/t9g3TdOUoM70pJn73OTkI99d1+Nv+j1fiUGt
6DJu0vj0nxHo4EB7SYG8mtH3OpWZ8mXJIXUeu+wAOqamU8y2JPj6CfrjebySkM0+
MoWXMklGIJ1WNQ4FK3hFrp4164A838uk6o8uIUuldWW9M4tFQbU0srx6Lmg4SQB6
o3/dkpTIoXCBzeiiWjSln6BfQZSUx27PN+RHUf97zqcQJH3VT1IjZo9I8d2iWa4Q
wHzQhfo=
-----END CERTIFICATE-----