Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2e57ba4f-57fb-4793-8e6b-49cc185424a4.roa
File:                     2e57ba4f-57fb-4793-8e6b-49cc185424a4.roa (raw, json)
Hash identifier:          D1FeMfxO0/3B30B8+NZjKkes2QuOHHXji6bneW+m2EQ=
Subject key identifier:   D1:55:81:44:56:01:C2:EC:DB:C8:28:08:84:D6:81:E8:7D:AD:52:CB
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       514CF256817B762521698BAEDAC8F5B2C3463DE0
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2e57ba4f-57fb-4793-8e6b-49cc185424a4.roa
Signing time:             Fri 17 Feb 2023 00:00:00 +0000
ROA not before:           Fri 17 Feb 2023 00:00:00 +0000
ROA not after:            Mon 20 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:4c:f2:56:81:7b:76:25:21:69:8b:ae:da:c8:f5:b2:c3:46:3d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 17 00:00:00 2023 GMT
            Not After : Feb 20 23:59:59 2023 GMT
        Subject: serialNumber=0aa1b929434d88da88fd852911d249d5f7ea1cc116e271f08946ae7073f1aef2, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1d:d9:85:19:e3:dc:ec:07:24:7a:5e:0e:4c:
                    b5:1d:75:31:44:22:35:7d:31:58:92:f0:6a:e6:31:
                    a7:04:38:d9:2c:2f:c4:f7:a5:22:57:ff:a7:a1:3a:
                    8f:29:ff:25:37:da:0b:d1:23:82:8a:a6:3a:e2:60:
                    9a:f0:5b:22:e0:6a:06:ce:01:49:9c:e8:e0:ba:99:
                    a7:2b:20:dd:d7:85:85:7a:b3:ad:ee:35:dc:48:fe:
                    5b:ed:a3:86:b7:ce:d9:95:d6:22:91:64:bc:59:90:
                    b6:f5:a4:f6:4a:d9:35:c5:47:7d:0c:0a:13:47:92:
                    72:50:e8:db:e6:6e:d1:00:bb:3e:fb:41:9f:78:8e:
                    11:b3:18:02:13:bd:64:40:1a:0f:1d:95:fa:0b:47:
                    81:d8:ad:9a:56:eb:a7:2d:f6:2f:80:7d:09:46:cd:
                    48:fd:e2:2f:e3:f7:1c:07:9e:e5:5b:8d:db:6d:55:
                    42:c1:68:f7:a9:fb:71:94:e1:a9:db:fd:94:1d:df:
                    f5:de:d5:77:14:33:23:da:3f:de:e7:73:9d:eb:2e:
                    b7:7a:14:aa:b8:e7:c7:9a:0b:ed:f0:f9:6d:5e:12:
                    2c:c9:fc:b8:a2:52:1d:3a:91:fb:f8:e8:63:42:ec:
                    79:27:e6:06:8d:c0:96:6b:c3:b8:a1:1d:40:77:52:
                    14:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:55:81:44:56:01:C2:EC:DB:C8:28:08:84:D6:81:E8:7D:AD:52:CB
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2e57ba4f-57fb-4793-8e6b-49cc185424a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:96:5c:f7:57:f5:40:98:2c:76:85:7b:8f:db:08:08:73:c3:
         91:7d:43:d8:96:2e:f3:02:a1:b8:74:65:6a:fa:08:ab:3d:d5:
         6b:2a:ea:d2:c7:f0:ba:c4:60:c2:23:a3:fa:82:15:e0:24:34:
         7c:e9:df:e7:e9:18:a4:4c:fa:05:22:74:f7:ee:ec:9a:b8:34:
         a4:04:09:4c:8e:64:f7:06:4f:e6:2b:4e:21:eb:88:63:c6:0c:
         22:6a:78:41:08:60:e4:26:9b:b7:f4:34:f1:38:57:4f:a0:c8:
         3a:6d:01:3d:5f:3d:fc:68:8d:f9:11:1f:00:f5:bd:af:90:76:
         04:7a:9c:bf:04:8b:23:3e:1d:db:4d:3b:4b:ef:9c:0b:c4:eb:
         5e:2d:28:bc:d7:71:87:4e:04:a7:6c:03:ed:4a:96:f8:8e:4f:
         53:d9:5a:98:af:aa:73:bf:18:c7:85:8d:f3:bc:98:4b:6f:0e:
         5a:ec:de:0e:7a:96:68:20:a4:8b:93:35:db:6b:0b:13:e2:fd:
         c3:e4:39:21:e0:c4:78:cf:4a:bf:67:3a:0d:38:92:52:9b:fe:
         89:41:7e:a1:c5:98:e2:f1:86:75:f8:66:04:23:d6:bd:46:9f:
         25:25:37:74:ca:5b:26:9b:2f:37:02:cb:57:dd:08:8a:87:d3:
         92:66:b1:ef
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUUUzyVoF7diUhaYuu2sj1ssNGPeAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMjE3MDAwMDAwWhcNMjMwMjIwMjM1OTU5
WjCBpTFJMEcGA1UEBRNAMGFhMWI5Mjk0MzRkODhkYTg4ZmQ4NTI5MTFkMjQ5ZDVm
N2VhMWNjMTE2ZTI3MWYwODk0NmFlNzA3M2YxYWVmMjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMYd2YUZ49zsByR6Xg5MtR11MUQiNX0xWJLwauYxpwQ42SwvxPel
Ilf/p6E6jyn/JTfaC9EjgoqmOuJgmvBbIuBqBs4BSZzo4LqZpysg3deFhXqzre41
3Ej+W+2jhrfO2ZXWIpFkvFmQtvWk9krZNcVHfQwKE0eSclDo2+Zu0QC7PvtBn3iO
EbMYAhO9ZEAaDx2V+gtHgditmlbrpy32L4B9CUbNSP3iL+P3HAee5VuN221VQsFo
96n7cZThqdv9lB3f9d7VdxQzI9o/3udznesut3oUqrjnx5oL7fD5bV4SLMn8uKJS
HTqR+/joY0LseSfmBo3AlmvDuKEdQHdSFPUCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTRVYFEVgHC7NvIKAiE1oHofa1SyzAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMmU1N2JhNGYtNTdmYi00NzkzLThlNmItNDljYzE4NTQyNGE0LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAI2WXPdX9UCYLHaF
e4/bCAhzw5F9Q9iWLvMCobh0ZWr6CKs91Wsq6tLH8LrEYMIjo/qCFeAkNHzp3+fp
GKRM+gUidPfu7Jq4NKQECUyOZPcGT+YrTiHriGPGDCJqeEEIYOQmm7f0NPE4V0+g
yDptAT1fPfxojfkRHwD1va+QdgR6nL8EiyM+HdtNO0vvnAvE614tKLzXcYdOBKds
A+1KlviOT1PZWpivqnO/GMeFjfO8mEtvDlrs3g56lmggpIuTNdtrCxPi/cPkOSHg
xHjPSr9nOg04klKb/olBfqHFmOLxhnX4ZgQj1r1GnyUlN3TKWyabLzcCy1fdCIqH
05Jmse8=
-----END CERTIFICATE-----