Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5701d6cd-7463-4324-a122-5237c35d69f4.roa
File:                     5701d6cd-7463-4324-a122-5237c35d69f4.roa (raw, json)
Hash identifier:          kRZ9skVS+x9XGzjhd+890br4csSmMZmIxcuuNx44GJI=
Subject key identifier:   05:3A:D1:2D:CB:13:96:FE:76:75:61:49:DC:F0:7A:E9:9D:D4:7E:9E
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7D358B0218EE6077BD762A5EE62AB9B4868E9EA3
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5701d6cd-7463-4324-a122-5237c35d69f4.roa
Signing time:             Sun 05 Mar 2023 00:00:00 +0000
ROA not before:           Sun 05 Mar 2023 00:00:00 +0000
ROA not after:            Wed 08 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:35:8b:02:18:ee:60:77:bd:76:2a:5e:e6:2a:b9:b4:86:8e:9e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  5 00:00:00 2023 GMT
            Not After : Mar  8 23:59:59 2023 GMT
        Subject: serialNumber=807e697a544544d2e8f35ca59658d9d26f222ae58cab7606273e5e16bc69ccf8, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:78:2d:c0:8a:35:34:69:cf:a0:1e:b6:37:a0:
                    16:da:3b:a9:bb:0f:70:3d:ac:f9:3f:60:53:b7:a9:
                    ea:a8:3b:86:87:40:f7:92:5e:f2:12:85:ad:57:6f:
                    5a:7d:0f:f7:c9:ef:ba:22:0a:12:64:2b:0d:17:a8:
                    cc:e3:42:ff:b1:20:09:aa:f2:88:76:0d:6b:ea:a8:
                    c5:8e:89:3a:34:b2:52:f7:20:0b:c5:ca:19:3e:30:
                    62:0b:95:ac:a8:39:3e:45:34:ef:a1:45:33:00:77:
                    cd:a5:3a:bc:31:73:c7:f1:12:2c:bd:35:f9:3e:e7:
                    66:a5:37:1c:57:d5:15:d0:54:3b:96:92:28:db:62:
                    15:30:80:d8:f5:aa:a3:1c:62:60:98:04:ec:74:c2:
                    41:a2:52:a4:f4:22:c1:4d:cd:4e:6c:c2:29:38:39:
                    02:21:e3:f3:ab:e1:98:0b:b4:82:63:ae:72:76:65:
                    6c:9e:ea:d4:bc:69:5e:e0:a4:36:82:f4:50:44:d9:
                    b3:1a:49:2c:4f:72:ba:75:3a:6d:29:8e:f1:e9:20:
                    37:eb:3b:98:8a:7a:46:b4:3f:e9:ce:df:57:2d:20:
                    5d:52:6c:b6:38:23:8b:21:4c:1d:a6:f2:44:ca:ad:
                    2d:ca:1e:09:10:67:af:29:3a:ec:9a:e0:38:36:17:
                    b2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3A:D1:2D:CB:13:96:FE:76:75:61:49:DC:F0:7A:E9:9D:D4:7E:9E
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5701d6cd-7463-4324-a122-5237c35d69f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:09:b4:1a:50:74:50:e3:82:e2:4a:d7:8f:ce:72:84:f9:de:
         21:29:1e:aa:ff:fc:4c:b9:1c:2f:5f:b6:69:88:c6:42:29:29:
         1f:50:95:32:58:20:e3:4d:df:e0:49:00:91:d2:a8:14:5d:20:
         a4:c3:ba:81:1b:5d:5b:a7:2a:c3:6f:75:6c:8d:f5:c8:a9:9f:
         94:a8:1c:bf:75:09:53:d5:39:16:d5:a5:8f:ac:9c:1b:e5:01:
         39:a9:a9:fd:68:66:ac:af:5b:d5:c5:d3:0b:30:67:27:26:98:
         4b:83:00:61:b1:bf:96:39:b7:8d:52:51:40:f5:2e:f4:02:d2:
         c1:c4:c0:17:05:db:1e:95:c9:c8:df:99:f4:5f:92:19:e3:cd:
         62:bf:13:45:00:c1:98:b5:cf:06:94:8d:84:44:a5:9e:6d:92:
         92:7f:2e:db:c2:46:73:48:d9:4c:8e:c2:69:93:e2:7e:94:ac:
         90:1b:e2:89:6c:a0:2a:72:20:c8:c8:1e:66:6c:10:43:86:a0:
         9d:4a:37:1c:83:5b:2b:82:8b:77:56:3e:41:33:01:00:17:6a:
         c3:20:4a:9b:bf:8f:23:25:a3:21:98:78:8a:10:2a:33:51:32:
         16:79:15:7a:51:d2:96:3f:74:5b:11:db:55:af:b0:82:fa:37:
         fd:0c:ac:7b
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUfTWLAhjuYHe9dipe5iq5tIaOnqMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMzA1MDAwMDAwWhcNMjMwMzA4MjM1OTU5
WjCBpTFJMEcGA1UEBRNAODA3ZTY5N2E1NDQ1NDRkMmU4ZjM1Y2E1OTY1OGQ5ZDI2
ZjIyMmFlNThjYWI3NjA2MjczZTVlMTZiYzY5Y2NmODEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKx4LcCKNTRpz6AetjegFto7qbsPcD2s+T9gU7ep6qg7hodA95Je
8hKFrVdvWn0P98nvuiIKEmQrDReozONC/7EgCaryiHYNa+qoxY6JOjSyUvcgC8XK
GT4wYguVrKg5PkU076FFMwB3zaU6vDFzx/ESLL01+T7nZqU3HFfVFdBUO5aSKNti
FTCA2PWqoxxiYJgE7HTCQaJSpPQiwU3NTmzCKTg5AiHj86vhmAu0gmOucnZlbJ7q
1LxpXuCkNoL0UETZsxpJLE9yunU6bSmO8ekgN+s7mIp6RrQ/6c7fVy0gXVJstjgj
iyFMHabyRMqtLcoeCRBnryk67JrgODYXsi8CAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQFOtEtyxOW/nZ1YUnc8HrpndR+njAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNTcwMWQ2Y2QtNzQ2My00MzI0LWExMjItNTIzN2MzNWQ2OWY0LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAFMJtBpQdFDjguJK
14/OcoT53iEpHqr//Ey5HC9ftmmIxkIpKR9QlTJYIONN3+BJAJHSqBRdIKTDuoEb
XVunKsNvdWyN9cipn5SoHL91CVPVORbVpY+snBvlATmpqf1oZqyvW9XF0wswZycm
mEuDAGGxv5Y5t41SUUD1LvQC0sHEwBcF2x6VycjfmfRfkhnjzWK/E0UAwZi1zwaU
jYREpZ5tkpJ/LtvCRnNI2UyOwmmT4n6UrJAb4olsoCpyIMjIHmZsEEOGoJ1KNxyD
WyuCi3dWPkEzAQAXasMgSpu/jyMloyGYeIoQKjNRMhZ5FXpR0pY/dFsR21WvsIL6
N/0MrHs=
-----END CERTIFICATE-----