Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3c4cddd9-4a1a-4241-b37c-f4beb2bf8f8c.roa
File:                     3c4cddd9-4a1a-4241-b37c-f4beb2bf8f8c.roa (raw, json)
Hash identifier:          MMX1DkchqhQo8D3N/4R6dfSHYEA7gyZ/MVkWd2PCeFU=
Subject key identifier:   D1:A1:1C:2A:A4:CA:92:41:CC:E0:AE:C8:68:1B:5E:67:61:A0:B4:85
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       36D221B0C6CB197A076C7B0F8F9D64BD5CC5FCFB
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3c4cddd9-4a1a-4241-b37c-f4beb2bf8f8c.roa
Signing time:             Sun 14 May 2023 00:00:00 +0000
ROA not before:           Sun 14 May 2023 00:00:00 +0000
ROA not after:            Wed 17 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d2:21:b0:c6:cb:19:7a:07:6c:7b:0f:8f:9d:64:bd:5c:c5:fc:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 14 00:00:00 2023 GMT
            Not After : May 17 23:59:59 2023 GMT
        Subject: serialNumber=b920c4f2334b62f3d4e4efa298dae0de9ac2b28f1566e4d9b91e8baa141a314b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a7:18:b6:88:e2:f5:34:21:b1:53:fe:c7:fe:
                    f9:fc:86:51:e2:39:39:b0:74:bd:77:ae:d1:c7:20:
                    65:4b:bf:3c:b5:f0:73:86:8a:6f:3f:e6:b4:4d:5d:
                    4a:56:3d:7a:30:46:29:12:77:5d:92:b5:3c:ed:28:
                    6b:1e:f7:64:48:dd:d8:2d:9e:32:a7:a9:80:76:35:
                    32:e6:15:68:95:d0:ae:00:d2:1b:7a:4f:57:c8:5e:
                    f0:08:d5:04:37:fa:b5:10:d5:86:a5:b0:5b:d3:2a:
                    1b:28:39:41:21:b9:15:26:01:a8:05:e1:8e:1c:9b:
                    4c:7c:f1:e6:fb:1a:12:cd:c0:1e:a9:c7:13:8e:e1:
                    04:19:c6:26:ff:df:6a:83:ea:95:e4:a1:91:04:f3:
                    65:d0:72:38:4c:f8:28:a3:c2:f4:07:bb:66:64:1f:
                    bf:7d:7e:72:cb:3f:24:67:05:da:c0:a0:2c:51:f2:
                    b1:6f:51:22:f0:7a:fb:85:e0:6e:5b:58:5a:d6:d6:
                    26:51:4e:7a:1c:95:4d:46:a3:ea:f6:81:72:7f:22:
                    3e:ff:73:e3:0d:8c:06:dc:56:05:47:16:92:72:28:
                    b9:59:8c:a9:8c:e2:e1:8a:1a:df:bf:3f:71:d0:e8:
                    81:79:17:bb:cd:c0:a1:55:8c:66:ae:f2:d5:f1:0a:
                    05:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A1:1C:2A:A4:CA:92:41:CC:E0:AE:C8:68:1B:5E:67:61:A0:B4:85
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3c4cddd9-4a1a-4241-b37c-f4beb2bf8f8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:8d:28:25:3e:94:3f:5e:c5:65:b0:6b:05:23:a3:ea:0f:1d:
         52:d2:e0:58:f9:57:85:e7:df:e8:53:9b:09:0b:33:bf:01:3d:
         86:26:c7:9d:05:ea:ff:ba:ec:ca:da:fd:90:8e:1e:c0:7c:c7:
         04:1e:e4:ef:16:25:20:ac:89:63:c7:c2:5d:8d:06:90:d6:5c:
         8b:61:42:f6:ba:a9:e4:b5:6a:64:52:09:f8:a9:cf:64:86:09:
         02:7b:9e:34:a0:7d:d0:20:0d:3f:99:6c:83:35:e5:8d:fb:6f:
         7e:b1:b4:ac:ce:82:63:42:6a:bd:54:b6:7b:fe:89:8a:d5:ef:
         fd:56:e1:fe:8b:83:44:5a:3b:3c:57:6a:3b:9f:32:61:d3:07:
         fa:81:50:a9:f8:b1:de:c3:7e:c0:fd:bf:7b:75:e9:29:65:fd:
         7b:f6:42:9d:94:fc:69:a8:ac:a8:a5:97:29:b2:7b:8f:17:13:
         bd:da:fb:a5:be:9d:4f:a5:f7:dc:36:da:72:74:be:90:97:90:
         ba:bd:ff:3c:1b:ff:85:77:eb:85:a1:d9:99:6e:5c:13:ce:83:
         8a:5c:8a:90:54:20:f7:17:16:07:19:b9:cd:69:b5:67:3f:9e:
         8b:74:a1:5f:c3:79:c2:50:40:3f:f2:87:75:d8:7c:97:7a:08:
         9f:13:d5:41
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUNtIhsMbLGXoHbHsPj51kvVzF/PswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNTE0MDAwMDAwWhcNMjMwNTE3MjM1OTU5
WjCBpTFJMEcGA1UEBRNAYjkyMGM0ZjIzMzRiNjJmM2Q0ZTRlZmEyOThkYWUwZGU5
YWMyYjI4ZjE1NjZlNGQ5YjkxZThiYWExNDFhMzE0YjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ2nGLaI4vU0IbFT/sf++fyGUeI5ObB0vXeu0ccgZUu/PLXwc4aK
bz/mtE1dSlY9ejBGKRJ3XZK1PO0oax73ZEjd2C2eMqepgHY1MuYVaJXQrgDSG3pP
V8he8AjVBDf6tRDVhqWwW9MqGyg5QSG5FSYBqAXhjhybTHzx5vsaEs3AHqnHE47h
BBnGJv/faoPqleShkQTzZdByOEz4KKPC9Ae7ZmQfv31+css/JGcF2sCgLFHysW9R
IvB6+4XgbltYWtbWJlFOehyVTUaj6vaBcn8iPv9z4w2MBtxWBUcWknIouVmMqYzi
4Yoa378/cdDogXkXu83AoVWMZq7y1fEKBXECAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTRoRwqpMqSQczgrshoG15nYaC0hTAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvM2M0Y2RkZDktNGExYS00MjQxLWIzN2MtZjRiZWIyYmY4ZjhjLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABaNKCU+lD9exWWw
awUjo+oPHVLS4Fj5V4Xn3+hTmwkLM78BPYYmx50F6v+67Mra/ZCOHsB8xwQe5O8W
JSCsiWPHwl2NBpDWXIthQva6qeS1amRSCfipz2SGCQJ7njSgfdAgDT+ZbIM15Y37
b36xtKzOgmNCar1Utnv+iYrV7/1W4f6Lg0RaOzxXajufMmHTB/qBUKn4sd7DfsD9
v3t16Sll/Xv2Qp2U/GmorKillymye48XE73a+6W+nU+l99w22nJ0vpCXkLq9/zwb
/4V364Wh2ZluXBPOg4pcipBUIPcXFgcZuc1ptWc/not0oV/DecJQQD/yh3XYfJd6
CJ8T1UE=
-----END CERTIFICATE-----