Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/550b2713-3dc5-4099-8898-5e12ffc92803.roa
File:                     550b2713-3dc5-4099-8898-5e12ffc92803.roa (raw, json)
Hash identifier:          rR2TpTz+KK3LZW+BmIL+R/QNo1l1dW101Yk8P92Si2k=
Subject key identifier:   8F:54:DE:44:64:50:C8:2B:9C:5F:F0:EA:E2:75:06:CB:4D:B3:AC:2A
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       52E752F34CCCD39EA5EE6D0C95736402FA87779A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/550b2713-3dc5-4099-8898-5e12ffc92803.roa
Signing time:             Tue 07 Mar 2023 00:00:00 +0000
ROA not before:           Tue 07 Mar 2023 00:00:00 +0000
ROA not after:            Fri 10 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e7:52:f3:4c:cc:d3:9e:a5:ee:6d:0c:95:73:64:02:fa:87:77:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  7 00:00:00 2023 GMT
            Not After : Mar 10 23:59:59 2023 GMT
        Subject: serialNumber=b506ff125496e48d17a1d0e9400c943800e43800d4fbc875faaaeeca02bbf966, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:22:c5:e5:18:b8:52:12:2f:0a:cd:d2:03:67:
                    6f:86:df:34:de:f8:9d:ec:d9:88:49:52:12:70:71:
                    62:87:e4:64:35:f7:66:74:45:93:bf:4b:51:8a:ed:
                    72:72:27:ab:12:6e:68:2d:28:85:98:69:c9:2e:e9:
                    9a:0c:21:b2:03:fd:65:e4:12:4c:2a:f0:57:02:86:
                    1c:71:21:cb:5a:db:ea:03:a1:6a:c5:05:0a:11:c6:
                    9a:34:93:30:bc:c3:18:96:df:e3:51:be:d3:d0:4f:
                    71:80:4e:5d:f0:06:44:19:5c:ba:9a:4b:73:74:5f:
                    bc:75:b5:e6:81:82:71:bd:0b:69:71:48:71:aa:5c:
                    ec:5d:2c:76:e0:1a:f9:87:49:e4:b8:86:81:2c:61:
                    a2:2c:62:bf:4b:81:e7:02:25:90:72:8c:69:fe:48:
                    7c:93:63:bb:21:04:25:4e:b9:d6:d3:27:07:55:df:
                    a3:da:c9:d0:ca:41:14:c9:19:b5:e7:7e:2c:aa:b3:
                    77:ad:57:f0:be:fc:d1:35:90:d3:d3:1d:76:1e:36:
                    31:5c:fe:b2:cb:30:c4:c8:22:6a:a7:74:b7:66:d4:
                    ba:39:02:91:e6:cf:7b:3b:34:2b:6c:26:6d:f2:81:
                    72:37:11:00:a6:02:11:06:00:cb:9f:c0:5b:ff:d8:
                    f5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:54:DE:44:64:50:C8:2B:9C:5F:F0:EA:E2:75:06:CB:4D:B3:AC:2A
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/550b2713-3dc5-4099-8898-5e12ffc92803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:54:32:93:2a:7c:7a:09:26:d9:a6:85:a1:56:09:f3:18:1a:
         e7:d4:e0:12:8a:35:9c:1c:9e:70:05:f9:9d:63:38:1f:bc:ad:
         f9:0d:43:01:b3:82:2e:0a:1a:46:42:ec:5a:16:bd:b7:44:0c:
         5e:23:b2:b8:ab:52:6f:d3:0b:ae:16:71:a8:a0:6c:73:2a:44:
         ba:9c:f2:05:dd:72:48:b5:9e:b8:ce:2d:55:34:79:b3:91:85:
         ef:74:fa:33:51:a3:ef:e1:34:30:a5:05:50:fd:51:a4:9e:24:
         c0:65:36:1f:c4:83:02:de:9b:20:99:2d:24:01:94:24:79:28:
         0e:7b:b6:cb:0d:15:20:53:5e:3c:f5:1e:24:57:fc:29:c2:df:
         0c:7f:fc:e9:14:74:df:3a:26:ad:a3:b4:73:24:be:d8:26:ab:
         88:5f:5f:fc:c0:36:6d:87:c9:ea:af:c0:23:17:45:74:8f:a0:
         17:82:66:8c:48:03:79:21:90:32:1c:bb:96:70:5c:53:43:13:
         06:7e:b6:2c:a8:69:88:59:bb:6d:bc:8e:39:24:b8:5e:aa:7c:
         2f:25:0c:3c:08:fc:91:e5:dc:42:b2:18:a5:62:b8:13:2f:3d:
         fa:1c:1c:a9:a7:2d:a6:51:2b:b9:dc:23:8c:26:f6:d9:f5:5e:
         e2:0d:16:07
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUUudS80zM056l7m0MlXNkAvqHd5owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMzA3MDAwMDAwWhcNMjMwMzEwMjM1OTU5
WjCBpTFJMEcGA1UEBRNAYjUwNmZmMTI1NDk2ZTQ4ZDE3YTFkMGU5NDAwYzk0Mzgw
MGU0MzgwMGQ0ZmJjODc1ZmFhYWVlY2EwMmJiZjk2NjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMoixeUYuFISLwrN0gNnb4bfNN74nezZiElSEnBxYofkZDX3ZnRF
k79LUYrtcnInqxJuaC0ohZhpyS7pmgwhsgP9ZeQSTCrwVwKGHHEhy1rb6gOhasUF
ChHGmjSTMLzDGJbf41G+09BPcYBOXfAGRBlcuppLc3RfvHW15oGCcb0LaXFIcapc
7F0sduAa+YdJ5LiGgSxhoixiv0uB5wIlkHKMaf5IfJNjuyEEJU651tMnB1Xfo9rJ
0MpBFMkZted+LKqzd61X8L780TWQ09Mddh42MVz+ssswxMgiaqd0t2bUujkCkebP
ezs0K2wmbfKBcjcRAKYCEQYAy5/AW//Y9QECAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBSPVN5EZFDIK5xf8OridQbLTbOsKjAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNTUwYjI3MTMtM2RjNS00MDk5LTg4OTgtNWUxMmZmYzkyODAzLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGFUMpMqfHoJJtmm
haFWCfMYGufU4BKKNZwcnnAF+Z1jOB+8rfkNQwGzgi4KGkZC7FoWvbdEDF4jsrir
Um/TC64WcaigbHMqRLqc8gXdcki1nrjOLVU0ebORhe90+jNRo+/hNDClBVD9UaSe
JMBlNh/EgwLemyCZLSQBlCR5KA57tssNFSBTXjz1HiRX/CnC3wx//OkUdN86Jq2j
tHMkvtgmq4hfX/zANm2HyeqvwCMXRXSPoBeCZoxIA3khkDIcu5ZwXFNDEwZ+tiyo
aYhZu228jjkkuF6qfC8lDDwI/JHl3EKyGKViuBMvPfocHKmnLaZRK7ncI4wm9tn1
XuINFgc=
-----END CERTIFICATE-----