Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/34f518ec-2f9e-46ba-b2a5-befbfa377249.roa
File:                     34f518ec-2f9e-46ba-b2a5-befbfa377249.roa (raw, json)
Hash identifier:          2VjebselWA40jnOh64A30F2Gylbz09iYDQxJL8T91f4=
Subject key identifier:   F2:7E:C0:83:22:C1:99:CA:FB:43:70:7A:F0:7A:FA:13:22:22:A9:B4
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       09FC01AE609588B9BD39C231BEFF2AAA7378FFC7
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/34f518ec-2f9e-46ba-b2a5-befbfa377249.roa
Signing time:             Sat 25 Feb 2023 00:00:00 +0000
ROA not before:           Sat 25 Feb 2023 00:00:00 +0000
ROA not after:            Tue 28 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fc:01:ae:60:95:88:b9:bd:39:c2:31:be:ff:2a:aa:73:78:ff:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 25 00:00:00 2023 GMT
            Not After : Feb 28 23:59:59 2023 GMT
        Subject: serialNumber=b5a4ba7718bced1d84855b6c1d8b45e5b6dec4a21ca31e5632d6a59bc0cd6cde, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:42:20:2b:08:8e:2a:7d:8e:57:37:32:02:4f:
                    6f:40:f2:ad:80:39:ae:44:3f:42:c7:2e:22:a3:3b:
                    4f:32:f1:47:03:87:f7:b3:47:63:7c:fe:97:2e:13:
                    04:e9:06:75:f5:92:8e:a0:38:69:7c:46:b6:e8:db:
                    a3:c3:0b:95:cf:bb:da:a3:29:14:85:bc:a4:f9:a9:
                    65:a5:6d:73:2b:83:f6:89:b7:77:df:41:a1:22:6c:
                    08:54:f9:7a:3d:85:76:99:2c:84:54:ff:af:ef:7c:
                    d3:a1:49:ff:53:df:d6:86:87:a0:4f:80:c2:f3:e4:
                    51:3d:43:da:de:8e:64:13:48:52:00:db:8d:fc:7a:
                    10:f8:2d:5d:ef:15:03:86:83:06:90:10:54:c5:67:
                    b0:a2:6a:29:87:1e:fb:b2:3c:35:22:ce:b2:f7:d1:
                    2a:e4:b4:ce:34:94:9f:5a:9d:55:31:08:fb:4a:47:
                    2b:5b:04:60:9b:12:2b:19:96:e3:4c:95:14:03:27:
                    98:0f:21:00:c5:3f:7d:ec:19:e6:e2:a8:f7:88:a3:
                    b6:e2:12:66:66:dc:d2:d0:7a:2d:2e:3e:08:79:8e:
                    70:cb:23:f1:32:a1:82:28:b1:cb:e5:66:93:af:ca:
                    03:e5:ed:53:87:e9:95:c0:2c:4d:70:ac:a7:08:c7:
                    f8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7E:C0:83:22:C1:99:CA:FB:43:70:7A:F0:7A:FA:13:22:22:A9:B4
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/34f518ec-2f9e-46ba-b2a5-befbfa377249.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:61:ce:95:4a:fd:db:13:fb:42:f4:42:5f:a7:57:6a:d0:80:
         45:8f:ba:4a:00:28:6f:66:b7:b1:fe:36:0c:43:19:27:32:ef:
         51:a1:41:5c:0c:a2:7f:e9:1e:d3:05:b7:5e:c7:22:26:1a:60:
         17:0d:8f:8d:f2:39:54:2d:e7:1c:6e:e3:f7:b3:f4:52:82:06:
         33:4f:1a:f7:00:a5:4e:fa:e7:31:9b:73:cd:e4:21:5d:d3:00:
         b0:9f:e1:c2:0d:0b:8c:e1:ce:bd:07:42:7a:df:f8:0c:c2:24:
         d2:5a:34:db:83:77:23:6d:e5:e8:93:ed:13:97:ee:47:4e:ca:
         c7:10:6d:1c:07:63:c9:77:2e:d4:94:67:ee:f0:f1:34:88:2f:
         0a:0f:06:45:1d:1f:00:93:da:c3:6b:b1:b8:23:70:e8:58:b9:
         b9:03:9c:b0:8b:4c:f7:1b:b9:64:6d:9c:86:9e:88:3d:56:fb:
         30:c9:61:44:83:c9:7e:82:68:4c:24:57:dd:ea:2f:b9:e3:c4:
         a0:48:88:36:ed:4c:dd:0b:78:3d:f2:0e:11:5a:75:f9:47:97:
         d7:98:42:42:4a:8e:79:fa:3f:40:86:d4:24:a6:2b:b9:af:7d:
         2f:eb:31:fd:fa:4e:80:35:dd:c3:7b:06:91:c5:2a:68:1e:4f:
         e3:24:3c:40
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUCfwBrmCViLm9OcIxvv8qqnN4/8cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMjI1MDAwMDAwWhcNMjMwMjI4MjM1OTU5
WjCBpTFJMEcGA1UEBRNAYjVhNGJhNzcxOGJjZWQxZDg0ODU1YjZjMWQ4YjQ1ZTVi
NmRlYzRhMjFjYTMxZTU2MzJkNmE1OWJjMGNkNmNkZTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK1CICsIjip9jlc3MgJPb0DyrYA5rkQ/QscuIqM7TzLxRwOH97NH
Y3z+ly4TBOkGdfWSjqA4aXxGtujbo8MLlc+72qMpFIW8pPmpZaVtcyuD9om3d99B
oSJsCFT5ej2FdpkshFT/r+9806FJ/1Pf1oaHoE+AwvPkUT1D2t6OZBNIUgDbjfx6
EPgtXe8VA4aDBpAQVMVnsKJqKYce+7I8NSLOsvfRKuS0zjSUn1qdVTEI+0pHK1sE
YJsSKxmW40yVFAMnmA8hAMU/fewZ5uKo94ijtuISZmbc0tB6LS4+CHmOcMsj8TKh
giixy+Vmk6/KA+XtU4fplcAsTXCspwjH+F0CAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTyfsCDIsGZyvtDcHrwevoTIiKptDAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMzRmNTE4ZWMtMmY5ZS00NmJhLWIyYTUtYmVmYmZhMzc3MjQ5LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAG1hzpVK/dsT+0L0
Ql+nV2rQgEWPukoAKG9mt7H+NgxDGScy71GhQVwMon/pHtMFt17HIiYaYBcNj43y
OVQt5xxu4/ez9FKCBjNPGvcApU765zGbc83kIV3TALCf4cINC4zhzr0HQnrf+AzC
JNJaNNuDdyNt5eiT7ROX7kdOyscQbRwHY8l3LtSUZ+7w8TSILwoPBkUdHwCT2sNr
sbgjcOhYubkDnLCLTPcbuWRtnIaeiD1W+zDJYUSDyX6CaEwkV93qL7njxKBIiDbt
TN0LeD3yDhFadflHl9eYQkJKjnn6P0CG1CSmK7mvfS/rMf36ToA13cN7BpHFKmge
T+MkPEA=
-----END CERTIFICATE-----