Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/69c7ffaa-54fe-4f95-a8a6-9b1fb8ea4c09.roa
File:                     69c7ffaa-54fe-4f95-a8a6-9b1fb8ea4c09.roa (raw, json)
Hash identifier:          8+/DsN13GasYfMJiv1qQdgm5I8EcnQmvp+4XPlcRH8E=
Subject key identifier:   CA:8C:2D:69:63:50:A8:F3:03:67:CC:BD:2D:D0:69:72:4F:95:5A:22
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       063E8E53468DE091644B098C3EBAA2867A9AFA6B
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/69c7ffaa-54fe-4f95-a8a6-9b1fb8ea4c09.roa
Signing time:             Sat 08 Apr 2023 00:00:00 +0000
ROA not before:           Sat 08 Apr 2023 00:00:00 +0000
ROA not after:            Tue 11 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:3e:8e:53:46:8d:e0:91:64:4b:09:8c:3e:ba:a2:86:7a:9a:fa:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  8 00:00:00 2023 GMT
            Not After : Apr 11 23:59:59 2023 GMT
        Subject: serialNumber=5e823c6f472f474ffdfcb3cda460ba6933ad98d5bdbc13e18d3bca153acc246d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:41:14:58:11:97:02:01:93:48:e3:5e:e6:30:
                    75:37:0a:3a:51:8c:8e:18:e7:3d:f8:e5:99:89:6b:
                    7b:c9:7c:fa:32:1c:38:e9:cf:b7:64:69:90:df:de:
                    87:46:d1:63:69:7c:de:0b:38:dc:f9:57:f3:b3:a5:
                    5a:80:5e:7a:e4:15:21:9b:ec:6a:08:20:50:37:d5:
                    44:7b:22:57:c8:f5:93:46:97:ee:db:be:e8:66:56:
                    09:6c:71:8d:01:2f:c8:3a:c4:1c:77:5f:d7:24:2f:
                    44:06:7b:0f:0a:b0:c4:b9:3a:38:ec:72:ef:76:9e:
                    26:9d:ae:13:bb:9a:52:45:0c:7e:ca:98:61:b5:27:
                    d4:de:9d:4b:92:b8:58:f5:09:fa:de:67:87:19:9c:
                    62:9c:0a:2c:6a:5d:0b:3b:ba:87:15:cd:79:4b:9a:
                    26:79:78:5d:72:06:1b:57:44:2f:bc:fc:5a:fd:12:
                    c3:77:e5:85:c8:02:f9:80:25:10:6b:18:1f:73:bf:
                    5d:3f:e2:a7:de:1a:02:ca:91:64:21:0c:ca:ac:3f:
                    09:1f:70:b4:fe:e1:42:5a:1d:17:de:81:1a:35:3e:
                    a6:59:51:cf:14:4e:29:29:df:d0:07:96:ec:0c:74:
                    e0:4a:df:56:3b:86:ff:05:0c:02:10:85:bd:8b:b0:
                    b3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8C:2D:69:63:50:A8:F3:03:67:CC:BD:2D:D0:69:72:4F:95:5A:22
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/69c7ffaa-54fe-4f95-a8a6-9b1fb8ea4c09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:06:88:4e:ab:55:68:e8:94:20:26:5c:9c:e0:30:d0:12:88:
         42:b7:b6:00:a8:87:7c:fa:34:9f:5b:ff:40:0a:b3:c6:1e:a9:
         01:dd:5a:a0:30:31:25:dc:57:f7:d3:75:cf:3b:ed:d0:0d:2e:
         4a:ec:e6:3e:2d:fc:12:30:94:10:19:8c:b2:ed:4b:95:67:79:
         bd:8d:a7:84:55:6c:63:01:f0:72:00:4e:9d:49:df:72:2d:fd:
         53:1e:db:30:8e:52:5c:b8:99:c6:74:26:53:00:42:7e:bc:1a:
         eb:9b:41:5d:fb:ba:f2:f0:a9:98:35:5b:b3:c9:29:45:62:97:
         be:b7:51:b1:63:ad:59:bb:c0:3e:19:b7:5c:21:31:47:22:5f:
         aa:a0:70:6d:bd:ca:5b:eb:d2:e3:24:7a:94:d3:34:49:b7:0b:
         9a:c8:18:fe:e6:11:f3:83:f0:d2:4b:70:e5:df:62:96:e3:01:
         99:cb:34:3d:d6:3d:53:c3:83:ad:82:2c:fa:b3:54:33:e7:36:
         c5:17:9f:fa:1c:8a:01:13:b1:d4:d0:1f:cb:cf:08:a1:d1:f8:
         29:9d:b0:68:5c:07:8f:ae:e4:eb:49:40:fd:08:ff:56:6e:71:
         65:86:ab:01:12:96:46:5a:af:40:83:df:cd:ad:3d:7b:c7:a5:
         5c:60:66:70
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUBj6OU0aN4JFkSwmMPrqihnqa+mswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNDA4MDAwMDAwWhcNMjMwNDExMjM1OTU5
WjCBpTFJMEcGA1UEBRNANWU4MjNjNmY0NzJmNDc0ZmZkZmNiM2NkYTQ2MGJhNjkz
M2FkOThkNWJkYmMxM2UxOGQzYmNhMTUzYWNjMjQ2ZDEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKBBFFgRlwIBk0jjXuYwdTcKOlGMjhjnPfjlmYlre8l8+jIcOOnP
t2RpkN/eh0bRY2l83gs43PlX87OlWoBeeuQVIZvsagggUDfVRHsiV8j1k0aX7tu+
6GZWCWxxjQEvyDrEHHdf1yQvRAZ7DwqwxLk6OOxy73aeJp2uE7uaUkUMfsqYYbUn
1N6dS5K4WPUJ+t5nhxmcYpwKLGpdCzu6hxXNeUuaJnl4XXIGG1dEL7z8Wv0Sw3fl
hcgC+YAlEGsYH3O/XT/ip94aAsqRZCEMyqw/CR9wtP7hQlodF96BGjU+pllRzxRO
KSnf0AeW7Ax04ErfVjuG/wUMAhCFvYuws20CAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTKjC1pY1Co8wNnzL0t0GlyT5VaIjAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNjljN2ZmYWEtNTRmZS00Zjk1LWE4YTYtOWIxZmI4ZWE0YzA5LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEAGiE6rVWjolCAm
XJzgMNASiEK3tgCoh3z6NJ9b/0AKs8YeqQHdWqAwMSXcV/fTdc877dANLkrs5j4t
/BIwlBAZjLLtS5Vneb2Np4RVbGMB8HIATp1J33It/VMe2zCOUly4mcZ0JlMAQn68
GuubQV37uvLwqZg1W7PJKUVil763UbFjrVm7wD4Zt1whMUciX6qgcG29ylvr0uMk
epTTNEm3C5rIGP7mEfOD8NJLcOXfYpbjAZnLND3WPVPDg62CLPqzVDPnNsUXn/oc
igETsdTQH8vPCKHR+CmdsGhcB4+u5OtJQP0I/1ZucWWGqwESlkZar0CD382tPXvH
pVxgZnA=
-----END CERTIFICATE-----