Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/464669c9-5194-46ad-a809-021b3ebedef7.roa
File:                     464669c9-5194-46ad-a809-021b3ebedef7.roa (raw, json)
Hash identifier:          iICKYifk1wFQ0L+IzD612eLKQIt+GUOfRcYrra6yHw0=
Subject key identifier:   B2:5A:F5:B6:58:96:AC:B5:FD:9F:C0:24:4E:46:C4:B3:87:BA:52:F1
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       712FFD4186EB819A584A054180A5A7CB8500A202
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/464669c9-5194-46ad-a809-021b3ebedef7.roa
Signing time:             Tue 30 May 2023 00:00:00 +0000
ROA not before:           Tue 30 May 2023 00:00:00 +0000
ROA not after:            Fri 02 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:2f:fd:41:86:eb:81:9a:58:4a:05:41:80:a5:a7:cb:85:00:a2:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 30 00:00:00 2023 GMT
            Not After : Jun  2 23:59:59 2023 GMT
        Subject: serialNumber=1ee66f905f2153e95347dd33517ea0da05a71f2d29d76c7eadc249d256e8ade0, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:19:34:18:29:d9:f5:43:29:23:89:e3:e0:6e:
                    50:5a:62:c3:2a:6b:d6:e3:8d:01:f9:f8:b8:79:5e:
                    e3:20:dd:2f:7b:fc:b8:fa:4a:b8:bb:7a:8e:3c:8f:
                    29:6c:cf:ab:f6:b0:8e:f5:45:5d:1d:62:11:e4:66:
                    cb:98:6d:e7:f4:c8:19:90:5e:90:62:7e:63:0c:5e:
                    14:92:a9:f3:8f:40:f6:fb:42:84:97:17:e7:13:43:
                    23:24:ee:85:52:01:74:43:72:c1:ff:43:4a:bb:31:
                    97:16:88:80:35:20:c6:a3:39:a7:02:4d:fc:4b:75:
                    c4:b5:ac:5f:3f:5a:23:f8:63:78:14:73:49:83:38:
                    ed:41:f9:6a:45:f7:fd:de:b4:fa:0c:af:57:9b:c6:
                    91:db:72:9a:9a:70:0a:cf:1b:48:f1:b0:66:ad:88:
                    bd:50:d0:c3:92:34:e2:01:fa:a8:05:97:3a:74:32:
                    eb:31:eb:bf:c3:3d:c1:b1:b1:17:21:5a:c5:af:be:
                    2b:dd:8a:8b:54:45:96:cf:d5:4c:9f:58:f5:cc:45:
                    e5:8d:bb:00:04:19:79:dc:ed:0d:d7:38:27:4c:c1:
                    02:13:44:ac:04:10:0f:2d:a9:c6:cc:65:e5:4f:8c:
                    98:fd:9c:79:bf:e7:6a:69:81:30:31:58:ec:0a:a5:
                    e9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5A:F5:B6:58:96:AC:B5:FD:9F:C0:24:4E:46:C4:B3:87:BA:52:F1
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/464669c9-5194-46ad-a809-021b3ebedef7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:46:40:65:ad:99:0e:c9:02:48:bc:56:81:48:ed:59:9f:0b:
         15:b7:1a:ad:ac:03:88:71:b9:ad:71:b1:e3:55:17:00:e0:9f:
         d0:2f:e9:b3:36:dd:62:76:d4:81:1c:e5:07:15:92:8a:a6:bc:
         85:1a:29:f5:c9:59:4a:28:67:07:4c:8c:6f:16:3b:a6:7b:ec:
         b7:b6:ca:22:55:4d:ac:3f:ff:08:fa:f5:a6:42:19:7a:55:04:
         38:ae:81:ab:04:84:6a:2f:80:4a:5d:99:6c:59:18:44:53:2d:
         f1:88:d2:24:7e:1f:59:c0:a8:03:47:16:b3:10:2b:18:0a:e0:
         b3:a6:06:d7:4f:9b:c0:fa:c2:57:43:c1:3f:3c:98:0f:65:a9:
         f6:85:29:a8:4f:3a:c6:7c:a8:7d:f9:a2:d3:a2:39:b8:23:8d:
         34:a0:ad:23:ab:21:ca:f8:9f:8c:52:cb:47:d0:58:97:b7:88:
         fd:26:46:b5:ff:d4:f5:bb:82:66:8b:a6:c7:12:39:9f:4b:75:
         a1:e3:22:1c:0d:8f:7e:46:4a:47:27:b6:b6:a1:8f:91:ca:0d:
         d1:a1:53:7f:19:1c:b1:7e:88:12:c5:4a:09:91:75:6e:97:34:
         c2:a5:92:ef:6e:49:72:78:42:0f:4b:7f:db:6b:15:90:35:55:
         00:44:a7:85
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUcS/9QYbrgZpYSgVBgKWny4UAogIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNTMwMDAwMDAwWhcNMjMwNjAyMjM1OTU5
WjCBpTFJMEcGA1UEBRNAMWVlNjZmOTA1ZjIxNTNlOTUzNDdkZDMzNTE3ZWEwZGEw
NWE3MWYyZDI5ZDc2YzdlYWRjMjQ5ZDI1NmU4YWRlMDEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMgZNBgp2fVDKSOJ4+BuUFpiwypr1uONAfn4uHle4yDdL3v8uPpK
uLt6jjyPKWzPq/awjvVFXR1iEeRmy5ht5/TIGZBekGJ+YwxeFJKp849A9vtChJcX
5xNDIyTuhVIBdENywf9DSrsxlxaIgDUgxqM5pwJN/Et1xLWsXz9aI/hjeBRzSYM4
7UH5akX3/d60+gyvV5vGkdtymppwCs8bSPGwZq2IvVDQw5I04gH6qAWXOnQy6zHr
v8M9wbGxFyFaxa++K92Ki1RFls/VTJ9Y9cxF5Y27AAQZedztDdc4J0zBAhNErAQQ
Dy2pxsxl5U+MmP2ceb/nammBMDFY7Aql6QsCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBSyWvW2WJastf2fwCRORsSzh7pS8TAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNDY0NjY5YzktNTE5NC00NmFkLWE4MDktMDIxYjNlYmVkZWY3LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAApGQGWtmQ7JAki8
VoFI7VmfCxW3Gq2sA4hxua1xseNVFwDgn9Av6bM23WJ21IEc5QcVkoqmvIUaKfXJ
WUooZwdMjG8WO6Z77Le2yiJVTaw//wj69aZCGXpVBDiugasEhGovgEpdmWxZGERT
LfGI0iR+H1nAqANHFrMQKxgK4LOmBtdPm8D6wldDwT88mA9lqfaFKahPOsZ8qH35
otOiObgjjTSgrSOrIcr4n4xSy0fQWJe3iP0mRrX/1PW7gmaLpscSOZ9LdaHjIhwN
j35GSkcntrahj5HKDdGhU38ZHLF+iBLFSgmRdW6XNMKlku9uSXJ4Qg9Lf9trFZA1
VQBEp4U=
-----END CERTIFICATE-----