Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3de46759-5725-4791-a38d-264beb477e9b.roa
File:                     3de46759-5725-4791-a38d-264beb477e9b.roa (raw, json)
Hash identifier:          PRoxnEGd7PUWorzowMyVfhmGq4gQ5TYp4czVPW96fnE=
Subject key identifier:   4C:18:4D:96:0F:74:C9:AA:05:BD:F0:68:70:0D:E7:79:6B:64:29:B3
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4FDAF153B5E4C6830E3C9545E1D6730385301C11
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3de46759-5725-4791-a38d-264beb477e9b.roa
Signing time:             Sat 14 Jan 2023 00:00:00 +0000
ROA not before:           Sat 14 Jan 2023 00:00:00 +0000
ROA not after:            Tue 17 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:da:f1:53:b5:e4:c6:83:0e:3c:95:45:e1:d6:73:03:85:30:1c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan 14 00:00:00 2023 GMT
            Not After : Jan 17 23:59:59 2023 GMT
        Subject: serialNumber=977464dfb70c6846c61be3c23561d77116f0bda3a645bc6aaa7ae87aabd929ee, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6d:ce:98:93:81:e3:bd:2b:e9:05:11:32:97:
                    e9:59:f8:36:1d:17:cc:7d:eb:ba:2e:a1:96:e7:84:
                    23:6f:ef:5f:3f:8d:62:f1:93:87:c3:cc:f9:52:e1:
                    b1:db:8a:10:22:91:6e:10:af:ba:45:d4:da:88:7c:
                    94:ca:c0:4f:bd:ca:52:0e:22:90:ae:27:70:f6:80:
                    29:23:a8:77:6e:76:5a:ed:b2:17:b6:81:3b:63:85:
                    34:d1:e7:55:28:17:cb:07:35:7b:4d:65:71:2b:74:
                    89:35:a7:5b:94:94:35:55:12:09:fe:0a:f6:5d:a1:
                    37:a3:c9:a9:4a:98:bc:c7:6e:f8:8d:89:59:b7:cd:
                    fd:20:77:37:f9:3f:49:89:d4:4b:49:47:d7:d4:f8:
                    6c:de:06:38:ae:95:da:31:91:d6:99:ea:65:cf:52:
                    87:b3:a2:f0:95:f9:36:40:e0:26:a0:5e:50:f6:f3:
                    ca:e6:83:0e:78:70:49:d0:58:ab:0e:e9:3e:e9:0a:
                    27:a8:1e:2b:ed:e0:e2:c5:4b:83:c8:31:8b:7a:57:
                    6e:39:6e:58:ae:d3:ad:21:8d:09:82:7d:98:ca:c2:
                    38:9e:3a:e2:09:85:c4:b4:3a:ca:6f:07:6d:a3:d3:
                    d0:c4:6c:c7:83:68:0e:3e:3a:78:d9:46:aa:67:3a:
                    d9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:18:4D:96:0F:74:C9:AA:05:BD:F0:68:70:0D:E7:79:6B:64:29:B3
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3de46759-5725-4791-a38d-264beb477e9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:b1:bd:b3:86:4d:b1:cc:a4:be:d7:f6:0f:6c:18:94:c6:e9:
         06:96:73:5a:74:40:00:fd:dc:7f:ee:a3:8f:99:d6:75:53:76:
         fb:3f:79:f6:f0:7c:10:43:df:15:34:ce:b8:c3:f0:22:34:5a:
         ce:cf:9b:c2:cf:51:ec:84:0e:ad:bc:a2:0e:12:94:9c:48:6e:
         68:08:16:3e:a9:6a:ae:a2:0d:7e:3b:2e:9e:1d:37:51:7d:c5:
         70:48:79:00:6b:f7:ca:16:a2:22:3a:26:a0:b1:88:5f:fb:83:
         43:4e:4a:7c:fd:bc:ba:16:30:58:e5:ca:41:71:88:20:d3:66:
         21:55:96:26:d4:37:2c:1e:f0:92:d8:04:61:c5:49:73:ea:86:
         da:13:45:60:cc:d0:c7:78:97:c4:78:fc:4c:45:6e:a7:4e:08:
         05:e8:4c:e6:98:03:df:06:3a:37:2c:fc:d6:62:f8:c6:2b:ad:
         72:2b:e6:d0:1f:cb:90:df:ca:91:40:3f:38:9d:52:47:ac:e3:
         7a:4a:f2:dc:73:42:c4:24:83:67:3c:12:ed:f9:bd:85:ea:aa:
         0b:53:f7:3f:92:57:3f:99:53:ef:fd:9e:87:0c:26:6d:aa:41:
         99:31:e7:64:2b:8b:ef:ac:44:d5:58:98:b6:e1:2d:d5:7a:74:
         eb:33:37:e5
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUT9rxU7XkxoMOPJVF4dZzA4UwHBEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMTE0MDAwMDAwWhcNMjMwMTE3MjM1OTU5
WjCBpTFJMEcGA1UEBRNAOTc3NDY0ZGZiNzBjNjg0NmM2MWJlM2MyMzU2MWQ3NzEx
NmYwYmRhM2E2NDViYzZhYWE3YWU4N2FhYmQ5MjllZTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMhtzpiTgeO9K+kFETKX6Vn4Nh0XzH3rui6hlueEI2/vXz+NYvGT
h8PM+VLhsduKECKRbhCvukXU2oh8lMrAT73KUg4ikK4ncPaAKSOod252Wu2yF7aB
O2OFNNHnVSgXywc1e01lcSt0iTWnW5SUNVUSCf4K9l2hN6PJqUqYvMdu+I2JWbfN
/SB3N/k/SYnUS0lH19T4bN4GOK6V2jGR1pnqZc9Sh7Oi8JX5NkDgJqBeUPbzyuaD
DnhwSdBYqw7pPukKJ6geK+3g4sVLg8gxi3pXbjluWK7TrSGNCYJ9mMrCOJ464gmF
xLQ6ym8HbaPT0MRsx4NoDj46eNlGqmc62TcCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRMGE2WD3TJqgW98GhwDed5a2QpszAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvM2RlNDY3NTktNTcyNS00NzkxLWEzOGQtMjY0YmViNDc3ZTliLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAMSxvbOGTbHMpL7X
9g9sGJTG6QaWc1p0QAD93H/uo4+Z1nVTdvs/efbwfBBD3xU0zrjD8CI0Ws7Pm8LP
UeyEDq28og4SlJxIbmgIFj6paq6iDX47Lp4dN1F9xXBIeQBr98oWoiI6JqCxiF/7
g0NOSnz9vLoWMFjlykFxiCDTZiFVlibUNywe8JLYBGHFSXPqhtoTRWDM0Md4l8R4
/ExFbqdOCAXoTOaYA98GOjcs/NZi+MYrrXIr5tAfy5DfypFAPzidUkes43pK8txz
QsQkg2c8Eu35vYXqqgtT9z+SVz+ZU+/9nocMJm2qQZkx52Qri++sRNVYmLbhLdV6
dOszN+U=
-----END CERTIFICATE-----