Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/35251c0c-f922-4a6c-94d9-97f5336a6575.roa
File:                     35251c0c-f922-4a6c-94d9-97f5336a6575.roa (raw, json)
Hash identifier:          930jly0bwChsKckJD7sIhsY+788WcCcbPa2EcuiCLi8=
Subject key identifier:   7B:3E:AF:14:ED:3F:50:3B:2A:CA:53:5A:DC:CC:C0:79:36:14:11:3B
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       16CA7C3D285A0C17B7662707D11F63F752295A99
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/35251c0c-f922-4a6c-94d9-97f5336a6575.roa
Signing time:             Tue 30 May 2023 00:00:00 +0000
ROA not before:           Tue 30 May 2023 00:00:00 +0000
ROA not after:            Fri 02 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ca:7c:3d:28:5a:0c:17:b7:66:27:07:d1:1f:63:f7:52:29:5a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 30 00:00:00 2023 GMT
            Not After : Jun  2 23:59:59 2023 GMT
        Subject: serialNumber=c2d54e49b09daa39824847f4fd94b84a532f8411fe070a7a8800e91a56fa643a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:53:94:14:49:24:7e:9c:02:20:26:be:da:2b:
                    f8:b8:33:f5:83:1c:33:9a:25:14:05:f8:2c:23:a5:
                    9c:b3:0e:d5:5f:54:90:11:1b:8a:12:cd:ba:83:75:
                    c8:0e:90:aa:f4:5f:07:46:fb:d3:18:4d:75:97:a5:
                    6b:31:c9:fc:ed:fd:ad:e7:40:4f:43:8e:39:ac:ab:
                    8f:83:55:5c:e2:0b:3f:d2:a2:24:ac:5b:12:19:6a:
                    98:8b:30:5b:17:1e:51:80:2f:7e:45:57:ab:a8:12:
                    9f:03:7c:47:a4:90:fa:41:9b:ed:b1:84:32:46:1a:
                    57:9e:d4:f1:64:82:62:3e:5e:5c:af:52:e2:b5:20:
                    d6:25:8e:9d:6a:0d:4e:2f:ec:e5:f8:5c:60:1a:50:
                    f0:0e:92:cb:77:46:8c:f4:18:09:4c:ec:c6:7c:37:
                    14:78:b1:0c:bc:6c:66:83:ba:71:83:d3:7b:79:b4:
                    02:09:52:76:77:8b:55:76:47:61:91:28:1f:d7:50:
                    0c:68:76:0b:ff:05:bc:b1:39:af:ed:f5:6b:6a:87:
                    9a:a8:8e:ef:de:e8:8a:d3:1a:6c:b3:3b:5e:44:51:
                    68:26:10:8d:38:fe:44:11:8e:6b:c4:02:1c:00:8f:
                    ce:ec:fc:84:63:e2:ec:76:40:00:e3:51:d0:d9:e8:
                    e9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3E:AF:14:ED:3F:50:3B:2A:CA:53:5A:DC:CC:C0:79:36:14:11:3B
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/35251c0c-f922-4a6c-94d9-97f5336a6575.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:5e:f7:10:fe:b3:01:42:8f:65:b9:10:a2:df:fb:e7:27:ab:
         5a:c6:da:09:a0:fe:be:85:9b:11:30:ea:de:fd:0a:74:1b:1d:
         da:77:2f:6c:8c:64:72:3a:47:84:68:03:1c:f6:df:47:61:f0:
         78:fa:5c:a5:99:ef:b5:b5:0b:00:16:eb:2b:a3:32:1f:3e:99:
         e0:1d:3f:ef:bd:1e:a0:d1:a5:bf:32:fe:48:ec:57:bb:40:8a:
         4d:65:e1:95:4c:c4:f8:56:a3:ab:ee:c0:95:ef:97:e0:b3:9f:
         bf:03:81:ec:b8:5c:20:91:dc:5b:0f:bf:78:5c:79:98:5e:aa:
         d8:ec:82:28:60:c7:d6:03:4c:f9:62:b9:1e:70:a3:c1:2b:40:
         0a:3e:f3:a8:20:f0:77:f9:18:d2:11:f2:25:5e:e1:13:4f:5f:
         9f:f7:0e:70:bf:64:c0:31:64:79:38:a6:6f:59:41:50:58:d2:
         dc:f3:93:7b:ac:d6:fd:8a:a9:cb:bb:94:cb:54:75:66:81:36:
         88:99:4c:03:40:4c:93:90:ac:0d:7f:7a:10:aa:ab:4e:d8:b2:
         53:ce:f5:8d:5c:f7:b0:5d:26:ac:67:64:1d:02:0f:b0:f9:ba:
         d4:4c:14:22:70:a9:7a:f7:d6:19:c3:0c:7d:ea:41:aa:4b:95:
         8d:8c:1a:3f
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUFsp8PShaDBe3ZicH0R9j91IpWpkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNTMwMDAwMDAwWhcNMjMwNjAyMjM1OTU5
WjCBpTFJMEcGA1UEBRNAYzJkNTRlNDliMDlkYWEzOTgyNDg0N2Y0ZmQ5NGI4NGE1
MzJmODQxMWZlMDcwYTdhODgwMGU5MWE1NmZhNjQzYTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJBTlBRJJH6cAiAmvtor+Lgz9YMcM5olFAX4LCOlnLMO1V9UkBEb
ihLNuoN1yA6QqvRfB0b70xhNdZelazHJ/O39redAT0OOOayrj4NVXOILP9KiJKxb
EhlqmIswWxceUYAvfkVXq6gSnwN8R6SQ+kGb7bGEMkYaV57U8WSCYj5eXK9S4rUg
1iWOnWoNTi/s5fhcYBpQ8A6Sy3dGjPQYCUzsxnw3FHixDLxsZoO6cYPTe3m0AglS
dneLVXZHYZEoH9dQDGh2C/8FvLE5r+31a2qHmqiO797oitMabLM7XkRRaCYQjTj+
RBGOa8QCHACPzuz8hGPi7HZAAONR0Nno6RUCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBR7Pq8U7T9QOyrKU1rczMB5NhQROzAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMzUyNTFjMGMtZjkyMi00YTZjLTk0ZDktOTdmNTMzNmE2NTc1LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAE9e9xD+swFCj2W5
EKLf++cnq1rG2gmg/r6FmxEw6t79CnQbHdp3L2yMZHI6R4RoAxz230dh8Hj6XKWZ
77W1CwAW6yujMh8+meAdP++9HqDRpb8y/kjsV7tAik1l4ZVMxPhWo6vuwJXvl+Cz
n78Dgey4XCCR3FsPv3hceZheqtjsgihgx9YDTPliuR5wo8ErQAo+86gg8Hf5GNIR
8iVe4RNPX5/3DnC/ZMAxZHk4pm9ZQVBY0tzzk3us1v2Kqcu7lMtUdWaBNoiZTANA
TJOQrA1/ehCqq07YslPO9Y1c97BdJqxnZB0CD7D5utRMFCJwqXr31hnDDH3qQapL
lY2MGj8=
-----END CERTIFICATE-----