Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3df62127-063e-4722-b974-5d88c95f8383.roa
File:                     3df62127-063e-4722-b974-5d88c95f8383.roa (raw, json)
Hash identifier:          x5864fie//wzoFOtTmuL31dJN1u0bpeIwTpPZwd1wPs=
Subject key identifier:   36:69:A5:8F:C0:1F:6C:48:09:7F:85:4E:ED:86:91:21:2F:BF:E6:85
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       772EBAA222C544C79845157CF9EE481B35C24A39
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3df62127-063e-4722-b974-5d88c95f8383.roa
Signing time:             Thu 18 May 2023 00:00:00 +0000
ROA not before:           Thu 18 May 2023 00:00:00 +0000
ROA not after:            Sun 21 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:2e:ba:a2:22:c5:44:c7:98:45:15:7c:f9:ee:48:1b:35:c2:4a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 18 00:00:00 2023 GMT
            Not After : May 21 23:59:59 2023 GMT
        Subject: serialNumber=786010a2577d021a539971eb6094b0f06f0192bb0da69b368247d51ff3b4b163, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c2:71:19:6e:13:9b:c2:2b:65:94:13:e7:4a:
                    24:54:70:e3:86:03:3c:7e:3d:26:0a:e4:0d:ae:f8:
                    69:38:b4:75:e6:c9:6e:62:02:1b:ea:da:c5:f0:19:
                    bb:29:ab:5b:84:57:d8:96:84:9f:d8:58:9e:b5:3c:
                    44:f0:71:44:c0:3d:b3:7e:fe:03:08:64:a3:23:55:
                    48:6b:2b:b4:df:1e:95:3b:5c:0a:8b:c8:8a:da:e6:
                    23:5b:bc:ae:72:fe:e3:2c:17:4e:23:79:6c:3c:70:
                    ca:8b:f6:1c:11:ed:8a:dc:aa:22:8f:70:a4:9d:b4:
                    c1:c5:60:8f:da:f8:56:e2:5a:47:8c:c6:d1:97:82:
                    4c:a4:db:9b:40:1c:6f:80:d1:27:bb:a6:bd:0b:58:
                    3b:88:19:bd:89:1f:44:22:41:4b:56:20:f9:62:15:
                    bf:d0:7b:e2:8f:28:94:b4:47:a0:6f:14:df:76:77:
                    11:8a:d8:ef:ce:83:00:38:57:ef:63:aa:bc:18:d2:
                    84:6e:91:fb:84:16:b3:72:f3:a9:15:af:66:65:61:
                    4d:1a:da:c8:88:8c:6c:0b:f4:37:5f:b1:77:d7:e9:
                    47:97:f5:3b:67:e9:62:46:ff:b2:2c:74:10:29:4c:
                    50:19:f3:ef:2c:35:68:72:3a:e2:11:85:52:c8:48:
                    9d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:69:A5:8F:C0:1F:6C:48:09:7F:85:4E:ED:86:91:21:2F:BF:E6:85
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3df62127-063e-4722-b974-5d88c95f8383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:10:b6:86:f0:a4:36:12:93:05:23:60:b5:1a:15:ea:17:ff:
         b3:c2:7e:95:16:55:42:3c:4f:97:1e:3d:bb:1a:4a:75:f4:4f:
         31:f7:f5:63:19:5d:48:aa:2c:ec:c9:83:5a:f5:9a:4a:73:98:
         ca:d5:14:1f:35:0d:89:fc:b6:2d:bb:cb:ca:65:8b:df:a3:d3:
         7f:91:41:f3:46:0c:67:99:3a:24:f7:e2:cd:54:26:68:7e:53:
         b5:b3:46:d0:f5:cc:7c:bf:dc:c8:06:9e:76:3c:5d:3c:f7:58:
         8d:1c:02:cb:3b:0c:8f:be:3b:04:25:2f:2e:fb:19:6e:da:f0:
         8e:bb:1c:7b:5b:43:e5:97:62:62:1b:da:66:73:52:9a:f0:ea:
         ea:68:c3:71:e7:10:9a:8d:e0:a9:a8:50:d8:03:0b:57:66:6e:
         4f:4b:62:8f:44:26:f1:1d:33:7c:91:31:db:39:a8:51:de:1a:
         03:0f:34:fe:48:7b:9f:47:5c:34:1d:6e:29:00:45:8b:b5:c4:
         b2:0b:bc:db:d7:a1:5f:a9:c9:80:67:c4:3c:70:c8:92:40:85:
         2d:ec:f5:d6:fe:59:cb:ab:b3:01:2e:3c:48:54:01:80:db:ad:
         22:63:10:b9:aa:cb:2e:86:42:23:7f:c0:1a:ce:cc:bc:af:6e:
         fb:35:32:02
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUdy66oiLFRMeYRRV8+e5IGzXCSjkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNTE4MDAwMDAwWhcNMjMwNTIxMjM1OTU5
WjCBpTFJMEcGA1UEBRNANzg2MDEwYTI1NzdkMDIxYTUzOTk3MWViNjA5NGIwZjA2
ZjAxOTJiYjBkYTY5YjM2ODI0N2Q1MWZmM2I0YjE2MzEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ/CcRluE5vCK2WUE+dKJFRw44YDPH49JgrkDa74aTi0debJbmIC
G+raxfAZuymrW4RX2JaEn9hYnrU8RPBxRMA9s37+AwhkoyNVSGsrtN8elTtcCovI
itrmI1u8rnL+4ywXTiN5bDxwyov2HBHtityqIo9wpJ20wcVgj9r4VuJaR4zG0ZeC
TKTbm0Acb4DRJ7umvQtYO4gZvYkfRCJBS1Yg+WIVv9B74o8olLRHoG8U33Z3EYrY
786DADhX72OqvBjShG6R+4QWs3LzqRWvZmVhTRrayIiMbAv0N1+xd9fpR5f1O2fp
Ykb/six0EClMUBnz7yw1aHI64hGFUshInW8CAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQ2aaWPwB9sSAl/hU7thpEhL7/mhTAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvM2RmNjIxMjctMDYzZS00NzIyLWI5NzQtNWQ4OGM5NWY4MzgzLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBALUQtobwpDYSkwUj
YLUaFeoX/7PCfpUWVUI8T5cePbsaSnX0TzH39WMZXUiqLOzJg1r1mkpzmMrVFB81
DYn8ti27y8pli9+j03+RQfNGDGeZOiT34s1UJmh+U7WzRtD1zHy/3MgGnnY8XTz3
WI0cAss7DI++OwQlLy77GW7a8I67HHtbQ+WXYmIb2mZzUprw6upow3HnEJqN4Kmo
UNgDC1dmbk9LYo9EJvEdM3yRMds5qFHeGgMPNP5Ie59HXDQdbikARYu1xLILvNvX
oV+pyYBnxDxwyJJAhS3s9db+WcurswEuPEhUAYDbrSJjELmqyy6GQiN/wBrOzLyv
bvs1MgI=
-----END CERTIFICATE-----