Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/477c9908-9c41-4f24-b864-f8432181b49b.roa
File:                     477c9908-9c41-4f24-b864-f8432181b49b.roa (raw, json)
Hash identifier:          0DymD37hhyPsXw2vApFzwL+m2O26YeyhOzx2V5hVyEg=
Subject key identifier:   73:03:0E:68:45:44:35:6F:E5:B3:9C:40:2B:EA:4E:47:06:7A:66:9D
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       249EAE03C816A58E593DEDEBDCA702A1D3034DE5
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/477c9908-9c41-4f24-b864-f8432181b49b.roa
Signing time:             Sun 14 May 2023 00:00:00 +0000
ROA not before:           Sun 14 May 2023 00:00:00 +0000
ROA not after:            Wed 17 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:9e:ae:03:c8:16:a5:8e:59:3d:ed:eb:dc:a7:02:a1:d3:03:4d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 14 00:00:00 2023 GMT
            Not After : May 17 23:59:59 2023 GMT
        Subject: serialNumber=979014af540d780a65e4275983f95e7795ea82094e957dc18644185bf35e17c6, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:52:be:9b:87:28:e4:52:5c:b1:fe:3d:15:e7:
                    f7:6b:34:6e:df:c6:7b:76:d7:b7:63:64:c2:e3:51:
                    93:0a:69:45:6f:d0:00:15:67:86:d6:f7:ea:fc:a8:
                    7c:fd:bb:1b:7f:a5:ff:e4:14:56:ce:92:8f:7d:b1:
                    05:e6:dd:dc:8a:ed:24:46:ba:58:9b:a5:14:12:8d:
                    9f:3e:fb:2a:16:ee:de:7d:67:9d:8d:0e:21:86:10:
                    99:65:cb:12:40:5f:69:aa:98:f0:9f:c8:fb:81:0a:
                    49:8d:d1:10:d4:71:18:f6:d7:b8:ab:fd:15:46:a2:
                    56:f1:55:ec:81:53:bb:bb:0c:81:09:64:38:6b:2b:
                    f0:60:62:3b:c0:da:e6:46:05:86:cc:ff:d5:05:8b:
                    99:62:f8:5c:88:5f:ff:e3:74:54:14:5d:3b:59:9a:
                    00:88:c1:f4:7f:43:e3:af:49:27:a1:6f:74:e8:6e:
                    0e:e6:0d:59:13:74:bc:50:75:6b:0a:82:03:b3:2c:
                    fc:ad:6b:2b:6a:93:f1:f6:25:33:e7:9b:1f:8a:d6:
                    fd:f4:60:90:a5:4d:7d:32:2f:79:e1:b1:b4:67:ac:
                    cb:58:3d:91:af:c9:d7:db:4f:c1:1d:c2:7f:bc:73:
                    ec:4c:9b:20:11:9f:67:6d:ea:9f:01:07:cf:71:8a:
                    eb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:03:0E:68:45:44:35:6F:E5:B3:9C:40:2B:EA:4E:47:06:7A:66:9D
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/477c9908-9c41-4f24-b864-f8432181b49b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:46:ec:52:e9:77:db:99:94:9b:5b:f4:68:33:01:19:0d:2c:
         6a:5a:18:01:a3:f5:66:85:6f:7b:6e:89:e7:10:10:ff:3b:2a:
         95:3b:95:56:b2:bd:66:24:2a:d7:90:d3:4b:f3:03:c7:9f:c1:
         b3:2c:7b:d0:60:8c:0a:8a:b0:fc:07:1e:e3:15:8a:c5:90:43:
         2b:11:d5:d7:14:c4:f1:d6:8d:0b:15:ba:0d:6a:a8:3f:81:03:
         8d:8b:79:bf:79:82:2d:a3:49:8b:ed:e8:9d:08:b9:09:aa:b7:
         00:45:9b:cc:49:0c:e0:19:db:16:96:bb:98:b8:5c:a1:79:36:
         e7:91:44:aa:89:4b:ae:94:21:59:e2:04:aa:52:67:ae:d5:ba:
         bd:9d:c4:fb:65:1d:b2:78:4b:43:10:a0:19:bf:1f:b9:bb:b8:
         48:73:1b:35:76:f7:88:6f:69:94:23:e9:28:4f:88:aa:a4:8e:
         fc:9b:5a:9e:73:74:f2:be:16:14:29:c0:00:c0:03:eb:4b:64:
         63:ea:10:65:6f:e5:12:b3:2f:9f:46:f8:f3:6d:ec:9a:eb:48:
         66:9e:19:15:be:49:40:eb:dc:b8:44:9f:5c:34:e3:8b:d8:9c:
         43:41:c6:7f:69:21:80:79:b5:42:6a:68:34:2c:6e:63:19:d2:
         d5:40:2e:d7
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUJJ6uA8gWpY5ZPe3r3KcCodMDTeUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNTE0MDAwMDAwWhcNMjMwNTE3MjM1OTU5
WjCBpTFJMEcGA1UEBRNAOTc5MDE0YWY1NDBkNzgwYTY1ZTQyNzU5ODNmOTVlNzc5
NWVhODIwOTRlOTU3ZGMxODY0NDE4NWJmMzVlMTdjNjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMhSvpuHKORSXLH+PRXn92s0bt/Ge3bXt2NkwuNRkwppRW/QABVn
htb36vyofP27G3+l/+QUVs6Sj32xBebd3IrtJEa6WJulFBKNnz77Khbu3n1nnY0O
IYYQmWXLEkBfaaqY8J/I+4EKSY3RENRxGPbXuKv9FUaiVvFV7IFTu7sMgQlkOGsr
8GBiO8Da5kYFhsz/1QWLmWL4XIhf/+N0VBRdO1maAIjB9H9D469JJ6FvdOhuDuYN
WRN0vFB1awqCA7Ms/K1rK2qT8fYlM+ebH4rW/fRgkKVNfTIveeGxtGesy1g9ka/J
19tPwR3Cf7xz7EybIBGfZ23qnwEHz3GK6/sCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRzAw5oRUQ1b+WznEAr6k5HBnpmnTAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNDc3Yzk5MDgtOWM0MS00ZjI0LWI4NjQtZjg0MzIxODFiNDliLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAZG7FLpd9uZlJtb
9GgzARkNLGpaGAGj9WaFb3tuiecQEP87KpU7lVayvWYkKteQ00vzA8efwbMse9Bg
jAqKsPwHHuMVisWQQysR1dcUxPHWjQsVug1qqD+BA42Leb95gi2jSYvt6J0IuQmq
twBFm8xJDOAZ2xaWu5i4XKF5NueRRKqJS66UIVniBKpSZ67Vur2dxPtlHbJ4S0MQ
oBm/H7m7uEhzGzV294hvaZQj6ShPiKqkjvybWp5zdPK+FhQpwADAA+tLZGPqEGVv
5RKzL59G+PNt7JrrSGaeGRW+SUDr3LhEn1w044vYnENBxn9pIYB5tUJqaDQsbmMZ
0tVALtc=
-----END CERTIFICATE-----