Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/54070ab4-69eb-439b-a638-facbda9cd56c.roa
File:                     54070ab4-69eb-439b-a638-facbda9cd56c.roa (raw, json)
Hash identifier:          jaVrmE0aq5gwptLTZxRf89ciYqzcIqXXmbD9QUKtBSQ=
Subject key identifier:   3B:98:10:F8:70:E4:33:B0:A8:2F:B6:7C:D0:EB:16:FA:3A:3C:94:D7
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3D2CE7B47713E7DCA5B9C49EC7DB2AAA645F03AE
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/54070ab4-69eb-439b-a638-facbda9cd56c.roa
Signing time:             Sat 18 Feb 2023 00:00:00 +0000
ROA not before:           Sat 18 Feb 2023 00:00:00 +0000
ROA not after:            Tue 21 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:2c:e7:b4:77:13:e7:dc:a5:b9:c4:9e:c7:db:2a:aa:64:5f:03:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 18 00:00:00 2023 GMT
            Not After : Feb 21 23:59:59 2023 GMT
        Subject: serialNumber=a8efd889fc75c147ecf7d73561a8eb7db20caaf761dcc6be5d172c3cca03be1f, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:12:3e:00:c3:b9:df:50:48:7e:4c:ab:01:d7:
                    9b:24:a8:00:5b:be:1a:72:8f:31:4e:23:7a:7f:4f:
                    0b:b5:5b:7b:ab:71:74:51:10:6b:b8:b4:ed:96:34:
                    d0:1d:55:b6:0c:99:a7:39:55:d0:68:4d:52:f7:dc:
                    e6:dd:7e:20:ca:66:45:54:81:a3:98:b8:57:d9:ca:
                    fc:e6:0a:dd:e4:c0:71:23:63:ae:e7:92:74:66:19:
                    40:34:98:8a:b4:3d:3d:b9:7d:84:3e:64:97:16:06:
                    77:11:18:35:91:17:d0:c2:da:ae:f1:e7:0d:23:22:
                    75:fb:c2:a7:54:04:c3:4d:98:47:7e:f8:d7:0c:66:
                    2b:db:83:72:f2:fb:e1:4c:e2:a0:a3:2e:ce:c5:b5:
                    e0:f2:82:24:95:19:ce:17:58:cd:84:76:7c:b8:15:
                    fc:70:0e:f4:1e:a5:58:b1:b7:65:53:07:2e:4e:2a:
                    4c:d3:bd:e9:f0:e5:6c:6e:33:23:9e:3a:bc:62:04:
                    20:34:c3:47:67:9e:76:3e:d7:94:2c:d0:8d:0d:b7:
                    96:21:cd:de:31:99:1b:a7:2f:93:28:b0:fe:6e:1d:
                    d4:a1:7a:3e:00:98:69:83:98:8b:5c:ab:6c:5f:16:
                    36:ca:7e:62:c0:e9:c5:6e:6c:5b:fd:b1:87:e9:7e:
                    9b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:98:10:F8:70:E4:33:B0:A8:2F:B6:7C:D0:EB:16:FA:3A:3C:94:D7
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/54070ab4-69eb-439b-a638-facbda9cd56c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:2f:f3:77:94:51:a6:6c:de:97:ce:2a:ca:23:3a:a1:42:04:
         66:89:d1:b5:47:ea:16:71:3e:87:5a:3d:c0:da:2c:a9:46:c4:
         cc:fc:11:14:f2:40:07:da:40:02:95:72:c4:38:b6:77:9e:74:
         29:f7:cd:38:ff:77:3f:27:52:5b:34:5e:05:b3:0f:55:a3:86:
         e0:4e:d8:0d:e6:e8:24:6e:d2:49:24:ce:92:97:f4:7f:7e:8a:
         f9:cd:5a:3f:98:5c:0f:3a:c8:64:0f:b4:31:91:77:34:f2:9e:
         4a:4f:bb:77:98:26:fb:b7:f5:14:05:94:2c:14:f1:3a:a0:da:
         9f:8c:15:52:5f:4d:ed:10:2d:2d:31:9b:cd:e9:52:f5:b8:18:
         16:bb:60:06:f1:b1:23:b9:9e:04:d4:f4:f2:fb:cc:68:27:97:
         ba:e7:3a:e2:b7:d0:5e:a9:06:37:d1:a8:21:a1:e0:38:58:ee:
         ea:15:a2:6e:66:35:df:c3:0e:ef:d4:ec:75:9e:0e:43:8e:cd:
         97:30:3d:54:73:1d:f3:af:94:45:34:a3:c9:ee:e5:55:cb:0a:
         9f:bc:8d:db:12:6a:80:1d:4c:d2:ed:f4:de:3b:24:03:76:39:
         14:84:c5:62:be:da:c7:6d:f6:cc:9e:6b:c0:b2:db:61:31:7a:
         42:8f:61:8e
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUPSzntHcT59ylucSex9sqqmRfA64wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMjE4MDAwMDAwWhcNMjMwMjIxMjM1OTU5
WjCBpTFJMEcGA1UEBRNAYThlZmQ4ODlmYzc1YzE0N2VjZjdkNzM1NjFhOGViN2Ri
MjBjYWFmNzYxZGNjNmJlNWQxNzJjM2NjYTAzYmUxZjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ8SPgDDud9QSH5MqwHXmySoAFu+GnKPMU4jen9PC7Vbe6txdFEQ
a7i07ZY00B1VtgyZpzlV0GhNUvfc5t1+IMpmRVSBo5i4V9nK/OYK3eTAcSNjrueS
dGYZQDSYirQ9Pbl9hD5klxYGdxEYNZEX0MLarvHnDSMidfvCp1QEw02YR3741wxm
K9uDcvL74UzioKMuzsW14PKCJJUZzhdYzYR2fLgV/HAO9B6lWLG3ZVMHLk4qTNO9
6fDlbG4zI546vGIEIDTDR2eedj7XlCzQjQ23liHN3jGZG6cvkyiw/m4d1KF6PgCY
aYOYi1yrbF8WNsp+YsDpxW5sW/2xh+l+m4MCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQ7mBD4cOQzsKgvtnzQ6xb6OjyU1zAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNTQwNzBhYjQtNjllYi00MzliLWE2MzgtZmFjYmRhOWNkNTZjLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADgv83eUUaZs3pfO
KsojOqFCBGaJ0bVH6hZxPodaPcDaLKlGxMz8ERTyQAfaQAKVcsQ4tneedCn3zTj/
dz8nUls0XgWzD1WjhuBO2A3m6CRu0kkkzpKX9H9+ivnNWj+YXA86yGQPtDGRdzTy
nkpPu3eYJvu39RQFlCwU8Tqg2p+MFVJfTe0QLS0xm83pUvW4GBa7YAbxsSO5ngTU
9PL7zGgnl7rnOuK30F6pBjfRqCGh4DhY7uoVom5mNd/DDu/U7HWeDkOOzZcwPVRz
HfOvlEU0o8nu5VXLCp+8jdsSaoAdTNLt9N47JAN2ORSExWK+2sdt9syea8Cy22Ex
ekKPYY4=
-----END CERTIFICATE-----