Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/58ac755f-a89a-4594-a07b-70c1ee6c13a4.roa
File:                     58ac755f-a89a-4594-a07b-70c1ee6c13a4.roa (raw, json)
Hash identifier:          +cN8x/SMhDtmftouv8l+UkIgyAglvisEXqTsIEELNTU=
Subject key identifier:   E7:33:E5:2E:A4:81:51:70:66:14:D9:D6:0F:DE:D5:6E:B9:65:D4:94
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       354BDA1837874FEEB29FA6240BF2FB532A60FFCA
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/58ac755f-a89a-4594-a07b-70c1ee6c13a4.roa
Signing time:             Sun 09 Apr 2023 00:00:00 +0000
ROA not before:           Sun 09 Apr 2023 00:00:00 +0000
ROA not after:            Wed 12 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:4b:da:18:37:87:4f:ee:b2:9f:a6:24:0b:f2:fb:53:2a:60:ff:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  9 00:00:00 2023 GMT
            Not After : Apr 12 23:59:59 2023 GMT
        Subject: serialNumber=fb1099b0baac3c07a00d98684fef9b705b1a1bfbc3624d5689faba0deb91a10f, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:82:9f:d1:92:bf:80:f9:86:df:ab:61:e3:32:
                    87:30:89:df:49:5a:81:1d:fe:4a:e5:37:9c:16:59:
                    bf:53:ce:93:e9:f9:25:94:a0:ee:ba:d6:fb:19:2a:
                    7e:13:b2:5d:42:44:e1:8c:d5:9d:c5:ff:4a:c1:27:
                    c8:48:c2:d2:c0:c0:3b:51:ff:ad:84:5c:c4:6f:5c:
                    25:24:26:0e:71:38:e0:ec:d4:bf:44:bd:87:dc:fd:
                    13:10:97:76:53:94:23:97:cb:e1:09:2b:d2:85:7a:
                    46:ff:7a:e6:21:ac:df:86:94:53:33:c7:24:53:bc:
                    8f:ac:f3:f3:04:5f:12:43:d2:6a:c6:4d:8c:6a:39:
                    57:cd:79:72:5d:54:31:3d:04:b4:c5:16:32:8c:58:
                    aa:df:cf:ba:e4:c3:47:14:12:b0:b9:d1:38:93:6a:
                    61:47:81:e0:e7:86:32:2b:6b:f2:eb:69:34:2c:8d:
                    5c:14:0e:19:4a:53:dc:24:57:5c:56:df:88:76:3d:
                    95:6f:77:1d:8f:18:bf:d5:aa:c7:b6:f5:ed:15:25:
                    b9:47:be:9d:17:7e:08:91:d0:2f:fd:be:73:b8:09:
                    4a:68:ae:34:20:53:1a:b5:ba:6c:03:99:d5:87:07:
                    c0:f4:33:cd:68:f1:6e:2e:d5:a5:5c:7d:70:6e:6e:
                    b5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:33:E5:2E:A4:81:51:70:66:14:D9:D6:0F:DE:D5:6E:B9:65:D4:94
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/58ac755f-a89a-4594-a07b-70c1ee6c13a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:5f:05:3f:7b:de:72:d8:f9:63:21:f7:27:4c:af:56:0c:cd:
         06:8f:29:7c:e9:0a:2b:29:d2:a4:89:ed:a8:bf:8b:93:8a:fb:
         e7:bb:15:1a:3f:0f:bc:76:91:a5:44:6d:39:6d:43:9f:2a:6b:
         74:8f:b1:83:8f:a4:92:f1:65:4e:d4:ac:a3:0f:0a:d0:b5:08:
         11:ae:3d:2e:2a:df:cf:8d:97:ea:34:36:61:56:b3:e0:49:1c:
         9e:18:e9:86:76:ec:00:95:13:6b:13:3d:6b:4f:c1:6d:10:2a:
         60:e0:5e:56:f7:af:49:62:7b:66:13:ad:4b:25:cf:cf:13:d8:
         c5:6a:58:e6:c3:3a:b8:5f:80:6d:51:1c:e3:5f:3e:49:ab:4c:
         44:09:61:04:f1:f9:b6:ec:c6:34:fe:6d:d8:99:ee:65:49:7b:
         26:a9:0f:2c:39:13:45:a0:ea:28:d5:38:b0:08:45:16:b3:da:
         1e:f4:4b:b4:5d:8b:88:9b:b4:7c:e2:19:a9:97:b4:ea:7c:52:
         b5:cd:0f:a1:0c:b1:01:84:57:db:12:39:da:55:25:d0:92:a9:
         fb:60:a6:fb:17:01:83:0c:51:0c:80:3c:d8:79:49:f9:2e:3d:
         5e:8e:dc:7a:fd:e6:3f:bf:03:7a:42:8d:3b:a0:72:ef:7f:67:
         30:28:d2:03
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUNUvaGDeHT+6yn6YkC/L7Uypg/8owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNDA5MDAwMDAwWhcNMjMwNDEyMjM1OTU5
WjCBpTFJMEcGA1UEBRNAZmIxMDk5YjBiYWFjM2MwN2EwMGQ5ODY4NGZlZjliNzA1
YjFhMWJmYmMzNjI0ZDU2ODlmYWJhMGRlYjkxYTEwZjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMCCn9GSv4D5ht+rYeMyhzCJ30lagR3+SuU3nBZZv1POk+n5JZSg
7rrW+xkqfhOyXUJE4YzVncX/SsEnyEjC0sDAO1H/rYRcxG9cJSQmDnE44OzUv0S9
h9z9ExCXdlOUI5fL4Qkr0oV6Rv965iGs34aUUzPHJFO8j6zz8wRfEkPSasZNjGo5
V815cl1UMT0EtMUWMoxYqt/PuuTDRxQSsLnROJNqYUeB4OeGMitr8utpNCyNXBQO
GUpT3CRXXFbfiHY9lW93HY8Yv9Wqx7b17RUluUe+nRd+CJHQL/2+c7gJSmiuNCBT
GrW6bAOZ1YcHwPQzzWjxbi7VpVx9cG5utXsCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTnM+UupIFRcGYU2dYP3tVuuWXUlDAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNThhYzc1NWYtYTg5YS00NTk0LWEwN2ItNzBjMWVlNmMxM2E0LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAMpfBT973nLY+WMh
9ydMr1YMzQaPKXzpCisp0qSJ7ai/i5OK++e7FRo/D7x2kaVEbTltQ58qa3SPsYOP
pJLxZU7UrKMPCtC1CBGuPS4q38+Nl+o0NmFWs+BJHJ4Y6YZ27ACVE2sTPWtPwW0Q
KmDgXlb3r0lie2YTrUslz88T2MVqWObDOrhfgG1RHONfPkmrTEQJYQTx+bbsxjT+
bdiZ7mVJeyapDyw5E0Wg6ijVOLAIRRaz2h70S7Rdi4ibtHziGamXtOp8UrXND6EM
sQGEV9sSOdpVJdCSqftgpvsXAYMMUQyAPNh5SfkuPV6O3Hr95j+/A3pCjTugcu9/
ZzAo0gM=
-----END CERTIFICATE-----