Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/53bb2f61-7b69-4272-a0d6-deee5c11da56.roa
File:                     53bb2f61-7b69-4272-a0d6-deee5c11da56.roa (raw, json)
Hash identifier:          x9JgNV45KuakpIBlA6PTIVEqtnyOTtiaxJ63Qnf4A0Q=
Subject key identifier:   CE:CF:E3:07:D3:0D:BD:56:6C:89:E2:CB:7C:15:F6:97:23:AB:AF:67
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       60B6D4CC7AC1302CFEAF8DE5F97DAA23A1320380
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/53bb2f61-7b69-4272-a0d6-deee5c11da56.roa
Signing time:             Wed 01 Mar 2023 00:00:00 +0000
ROA not before:           Wed 01 Mar 2023 00:00:00 +0000
ROA not after:            Sat 04 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b6:d4:cc:7a:c1:30:2c:fe:af:8d:e5:f9:7d:aa:23:a1:32:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  1 00:00:00 2023 GMT
            Not After : Mar  4 23:59:59 2023 GMT
        Subject: serialNumber=917fdc42c3b599b6237cdda4756d0344b3659c48ae18668994fc728cb232d3dd, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:16:f3:4e:d0:52:d0:65:36:e1:da:ae:61:0c:
                    83:9c:c0:5d:e1:76:33:5d:29:40:e9:61:c9:cd:82:
                    d7:0e:66:b4:b1:65:ad:d9:c7:24:5a:3a:d4:87:21:
                    36:a7:0a:8d:3e:83:07:28:cc:b7:50:8f:0d:a4:d5:
                    22:ed:3f:41:b1:42:84:15:4e:17:25:b7:a1:d1:e2:
                    af:3c:ee:e6:55:ef:0b:8d:ac:a2:bf:f3:cf:2e:24:
                    98:3f:f1:5b:48:fc:1e:bc:33:25:1c:03:b3:5a:c2:
                    05:15:8a:d3:09:68:25:11:1c:bd:ec:a9:8a:a7:da:
                    11:a0:6d:23:2f:3f:72:4c:8c:63:1b:4c:59:f6:09:
                    ce:ee:95:62:dd:a4:5d:05:80:f4:3d:c9:4f:15:e8:
                    21:4c:e8:06:27:bd:95:d8:5c:55:52:47:e3:4c:b9:
                    1b:2b:16:5a:e9:82:10:61:de:4c:64:30:78:3a:ed:
                    e2:24:ad:f4:aa:37:0d:74:50:27:19:61:ad:3a:67:
                    04:e4:0d:ef:7e:80:81:52:cc:4f:fc:3c:ad:46:9f:
                    c8:7b:a4:53:a6:6d:80:8e:a1:23:2e:8c:b7:e8:6c:
                    a6:45:86:2f:d3:37:03:df:c8:b4:13:1c:16:f7:ae:
                    18:4b:3a:14:c7:17:85:78:f8:4f:4d:50:50:7d:75:
                    bd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CF:E3:07:D3:0D:BD:56:6C:89:E2:CB:7C:15:F6:97:23:AB:AF:67
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/53bb2f61-7b69-4272-a0d6-deee5c11da56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:18:9e:c4:ce:8e:1b:ba:50:ad:d5:61:49:95:d5:2f:18:52:
         f3:7a:d2:28:66:dc:2b:9a:4e:f2:e3:e0:15:54:e8:00:83:7f:
         a3:e2:09:bc:83:ad:f9:40:0c:94:fc:10:f3:1c:ae:12:7e:02:
         02:f9:44:4c:08:17:52:74:67:69:e4:87:80:4d:af:fe:71:2f:
         14:c1:f1:a5:92:b5:77:13:f8:fe:a8:24:b7:50:e2:20:c6:81:
         d6:84:3f:aa:19:be:19:37:5b:2e:16:8f:85:4a:18:b3:cc:c3:
         a3:1c:05:2e:13:b2:7e:a3:23:8e:d5:7c:84:fc:a5:5a:3a:35:
         1a:83:7b:ea:b8:9a:6e:ad:45:38:c4:00:63:3c:e4:79:ea:93:
         72:e8:ac:bc:e5:36:03:87:79:6f:ca:81:e8:1e:e3:b9:7a:07:
         e9:fa:e3:eb:01:33:66:92:9d:16:78:33:47:70:3f:57:fe:7a:
         00:3f:9c:34:02:0c:02:ee:d2:19:90:f8:5b:2d:d8:84:f5:14:
         0c:6e:76:5a:03:dd:cc:e9:90:1a:0e:02:1a:81:37:54:0c:4a:
         76:89:a9:f4:9c:cc:99:73:e2:f9:b5:17:5a:9f:c7:c1:bf:b6:
         d8:87:81:fe:9b:7d:a6:3e:4c:6a:4d:f0:b3:de:1e:25:75:e6:
         5e:c8:d3:25
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUYLbUzHrBMCz+r43l+X2qI6EyA4AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMzAxMDAwMDAwWhcNMjMwMzA0MjM1OTU5
WjCBpTFJMEcGA1UEBRNAOTE3ZmRjNDJjM2I1OTliNjIzN2NkZGE0NzU2ZDAzNDRi
MzY1OWM0OGFlMTg2Njg5OTRmYzcyOGNiMjMyZDNkZDEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK0W807QUtBlNuHarmEMg5zAXeF2M10pQOlhyc2C1w5mtLFlrdnH
JFo61IchNqcKjT6DByjMt1CPDaTVIu0/QbFChBVOFyW3odHirzzu5lXvC42sor/z
zy4kmD/xW0j8HrwzJRwDs1rCBRWK0wloJREcveypiqfaEaBtIy8/ckyMYxtMWfYJ
zu6VYt2kXQWA9D3JTxXoIUzoBie9ldhcVVJH40y5GysWWumCEGHeTGQweDrt4iSt
9Ko3DXRQJxlhrTpnBOQN736AgVLMT/w8rUafyHukU6ZtgI6hIy6Mt+hspkWGL9M3
A9/ItBMcFveuGEs6FMcXhXj4T01QUH11vcECAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTOz+MH0w29VmyJ4st8FfaXI6uvZzAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNTNiYjJmNjEtN2I2OS00MjcyLWEwZDYtZGVlZTVjMTFkYTU2LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKwYnsTOjhu6UK3V
YUmV1S8YUvN60ihm3CuaTvLj4BVU6ACDf6PiCbyDrflADJT8EPMcrhJ+AgL5REwI
F1J0Z2nkh4BNr/5xLxTB8aWStXcT+P6oJLdQ4iDGgdaEP6oZvhk3Wy4Wj4VKGLPM
w6McBS4Tsn6jI47VfIT8pVo6NRqDe+q4mm6tRTjEAGM85Hnqk3LorLzlNgOHeW/K
gege47l6B+n64+sBM2aSnRZ4M0dwP1f+egA/nDQCDALu0hmQ+Fst2IT1FAxudloD
3czpkBoOAhqBN1QMSnaJqfSczJlz4vm1F1qfx8G/ttiHgf6bfaY+TGpN8LPeHiV1
5l7I0yU=
-----END CERTIFICATE-----