Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6ff57841-7fc5-4a6d-b749-f5e8fa9cf791.roa
File:                     6ff57841-7fc5-4a6d-b749-f5e8fa9cf791.roa (raw, json)
Hash identifier:          IgaTXyfmLaApmIldGVlqXeARVY8hVigWTzO0R04bUJg=
Subject key identifier:   3A:7F:5B:04:83:37:00:44:BF:08:FB:04:49:E2:80:F6:C9:6C:49:D6
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       329D2AA790DC375C0B2F8B41ACC33FDE794337ED
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6ff57841-7fc5-4a6d-b749-f5e8fa9cf791.roa
Signing time:             Mon 20 Feb 2023 00:00:00 +0000
ROA not before:           Mon 20 Feb 2023 00:00:00 +0000
ROA not after:            Thu 23 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:9d:2a:a7:90:dc:37:5c:0b:2f:8b:41:ac:c3:3f:de:79:43:37:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 20 00:00:00 2023 GMT
            Not After : Feb 23 23:59:59 2023 GMT
        Subject: serialNumber=55f2b58978fe942617f230d44e845c2b5ef84d1343afb50d3c8a5bde65ca2cf0, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:20:d5:17:33:bc:84:cf:3e:e3:04:d7:4a:a9:
                    fe:cb:93:21:0d:36:30:02:34:1b:a8:5a:40:24:4c:
                    3e:f7:53:46:7d:91:60:78:4b:04:20:1f:8e:fa:5a:
                    e1:a8:9c:bb:c4:f9:4d:0a:f5:a4:24:f0:08:54:49:
                    8a:32:34:4a:70:a5:83:3b:d3:5d:6b:ef:e7:9c:48:
                    e4:d0:13:6b:64:4f:18:cc:cc:4d:c9:f1:57:c2:29:
                    dd:07:05:95:e2:b8:7e:ff:d9:45:12:da:91:7b:1e:
                    11:ef:19:c4:9d:96:28:c8:d8:01:e4:cd:17:56:33:
                    51:c6:90:6a:57:2e:14:d4:34:77:ba:06:07:ec:3f:
                    c8:d6:3e:73:6d:8c:f0:0d:54:d7:28:0f:96:bd:0b:
                    f3:be:b8:cf:a4:a7:e7:64:be:22:0e:50:9e:c7:fc:
                    6d:26:f0:ac:8b:57:d0:cf:ef:cb:9f:ee:6b:57:20:
                    d9:72:f0:c6:56:cf:11:ab:0a:dd:d0:2d:50:06:55:
                    c1:8a:6e:14:35:04:11:43:62:1a:34:18:87:08:f0:
                    2f:72:59:99:59:e1:66:c9:94:dc:3c:58:a2:ed:0a:
                    48:5b:37:65:df:6d:b7:38:df:a4:f4:51:36:00:30:
                    25:c8:6b:b5:74:5a:d8:46:d6:78:eb:27:8d:0d:57:
                    31:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7F:5B:04:83:37:00:44:BF:08:FB:04:49:E2:80:F6:C9:6C:49:D6
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6ff57841-7fc5-4a6d-b749-f5e8fa9cf791.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:3f:48:68:d7:7c:6d:39:b6:5e:07:5e:b3:49:18:11:42:85:
         06:0d:55:56:0b:67:45:02:af:19:8d:be:ea:37:c3:7e:c4:c9:
         51:6b:11:ae:d7:45:c3:60:14:97:68:43:7a:65:0d:bd:ef:41:
         68:41:cb:db:06:8f:de:95:0b:ae:62:de:9f:f6:d8:1e:bf:a3:
         15:5f:3d:53:5c:f1:61:f4:ec:f3:20:35:34:9c:91:b1:de:a6:
         51:87:eb:ee:ea:64:47:e0:88:12:97:89:55:23:79:b5:60:45:
         b3:3f:3e:a4:70:64:06:0d:1e:53:a6:5c:30:02:09:f7:7e:74:
         4d:bd:ef:a2:af:69:b9:01:62:87:3b:8a:f4:7e:5d:30:91:61:
         2c:69:ed:dc:72:46:4c:d4:6b:7b:4a:ef:a9:f8:b2:42:6b:69:
         58:82:98:fb:c1:a6:26:be:b3:4f:26:74:33:ae:0c:19:21:c5:
         b5:d6:68:eb:6b:a8:42:86:02:8a:60:51:c3:ca:1d:f6:6a:5c:
         3c:51:c3:30:66:b6:7b:48:fa:29:42:59:05:6c:0e:04:5b:a2:
         07:4b:d7:b7:e4:44:f5:a7:91:58:19:51:0e:20:cc:9f:5f:87:
         66:6e:da:1e:84:83:bf:61:c9:42:30:ed:65:4c:ef:24:7f:93:
         cc:a6:55:a3
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUMp0qp5DcN1wLL4tBrMM/3nlDN+0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMjIwMDAwMDAwWhcNMjMwMjIzMjM1OTU5
WjCBpTFJMEcGA1UEBRNANTVmMmI1ODk3OGZlOTQyNjE3ZjIzMGQ0NGU4NDVjMmI1
ZWY4NGQxMzQzYWZiNTBkM2M4YTViZGU2NWNhMmNmMDEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOQg1RczvITPPuME10qp/suTIQ02MAI0G6haQCRMPvdTRn2RYHhL
BCAfjvpa4aicu8T5TQr1pCTwCFRJijI0SnClgzvTXWvv55xI5NATa2RPGMzMTcnx
V8Ip3QcFleK4fv/ZRRLakXseEe8ZxJ2WKMjYAeTNF1YzUcaQalcuFNQ0d7oGB+w/
yNY+c22M8A1U1ygPlr0L8764z6Sn52S+Ig5Qnsf8bSbwrItX0M/vy5/ua1cg2XLw
xlbPEasK3dAtUAZVwYpuFDUEEUNiGjQYhwjwL3JZmVnhZsmU3DxYou0KSFs3Zd9t
tzjfpPRRNgAwJchrtXRa2EbWeOsnjQ1XMfsCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQ6f1sEgzcARL8I+wRJ4oD2yWxJ1jAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNmZmNTc4NDEtN2ZjNS00YTZkLWI3NDktZjVlOGZhOWNmNzkxLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAMQ/SGjXfG05tl4H
XrNJGBFChQYNVVYLZ0UCrxmNvuo3w37EyVFrEa7XRcNgFJdoQ3plDb3vQWhBy9sG
j96VC65i3p/22B6/oxVfPVNc8WH07PMgNTSckbHeplGH6+7qZEfgiBKXiVUjebVg
RbM/PqRwZAYNHlOmXDACCfd+dE2976KvabkBYoc7ivR+XTCRYSxp7dxyRkzUa3tK
76n4skJraViCmPvBpia+s08mdDOuDBkhxbXWaOtrqEKGAopgUcPKHfZqXDxRwzBm
tntI+ilCWQVsDgRbogdL17fkRPWnkVgZUQ4gzJ9fh2Zu2h6Eg79hyUIw7WVM7yR/
k8ymVaM=
-----END CERTIFICATE-----