Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/75f6ce89-979b-4c29-8d39-2404faa30bad.roa
File:                     75f6ce89-979b-4c29-8d39-2404faa30bad.roa (raw, json)
Hash identifier:          XqI1o4wBTOy++e15L54/L8pDumgkqkXjbkC51cszF5Q=
Subject key identifier:   EA:8C:5C:20:BF:D3:88:20:6B:CA:62:FA:BF:BF:2A:AF:40:BC:DA:CE
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       58488FBE6EB84723BC72052A57DA2443E77B3C65
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/75f6ce89-979b-4c29-8d39-2404faa30bad.roa
Signing time:             Tue 07 Mar 2023 00:00:00 +0000
ROA not before:           Tue 07 Mar 2023 00:00:00 +0000
ROA not after:            Fri 10 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:48:8f:be:6e:b8:47:23:bc:72:05:2a:57:da:24:43:e7:7b:3c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  7 00:00:00 2023 GMT
            Not After : Mar 10 23:59:59 2023 GMT
        Subject: serialNumber=3875179396e8ccd495569d5cf109beb593079b0ecf7fec74d93f0a05174b8fe2, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d7:17:56:36:88:fb:28:65:a1:6f:70:50:a0:
                    a5:e7:fa:42:75:01:29:4c:cd:eb:27:ad:2b:54:bf:
                    05:3e:9e:97:5f:a7:50:c7:2d:ca:8a:de:36:71:ff:
                    13:18:f0:2b:46:9b:56:9f:e6:be:a0:6b:c1:a4:33:
                    ab:c9:15:4e:35:85:86:2f:d2:5c:27:f9:6f:5d:52:
                    d8:dd:9d:cf:07:51:54:93:5a:b1:03:b0:d0:c4:c3:
                    0c:e0:66:70:c8:65:32:5d:e9:78:93:8a:9e:cd:01:
                    44:30:3c:6b:d0:0d:3c:6b:e3:a6:7d:b4:5b:07:82:
                    61:fa:c0:3b:cb:8f:ef:6a:9b:a9:00:58:9a:a5:b3:
                    58:28:91:36:6d:07:4f:7e:e4:55:78:f4:0e:3f:55:
                    f6:e0:a6:3f:70:1f:24:e2:91:4f:19:f5:fe:09:95:
                    8c:e6:ba:e1:f6:16:0b:fc:1d:27:29:2b:1f:a5:03:
                    51:2d:eb:83:36:b7:e1:2f:d5:cb:81:31:5d:0c:68:
                    f8:15:80:36:12:e7:69:b5:88:db:ad:73:77:6c:3b:
                    8e:e0:54:72:86:18:29:de:cb:d0:b6:59:db:d0:e2:
                    4c:b6:e9:51:42:fb:84:27:7d:b7:c4:9a:1f:eb:67:
                    30:e8:4d:28:df:e4:b3:b4:d0:4d:a4:63:83:b2:2f:
                    0a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8C:5C:20:BF:D3:88:20:6B:CA:62:FA:BF:BF:2A:AF:40:BC:DA:CE
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/75f6ce89-979b-4c29-8d39-2404faa30bad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:ca:c9:f9:35:7c:6c:b4:74:d7:e6:28:6a:9b:e9:b2:a9:1c:
         52:76:8c:b9:b1:ef:6e:e9:3b:ed:ac:03:a5:2c:6d:8f:d4:93:
         41:14:40:78:49:a4:f9:b1:c3:ff:8d:60:a1:be:76:79:bc:ea:
         7a:79:27:3b:8c:66:fc:93:78:19:0e:15:8c:00:3d:76:a8:2a:
         a3:0b:64:2a:09:91:e2:c6:c1:0b:64:3d:c2:5b:84:8f:76:24:
         d2:31:06:88:a3:b3:41:10:e3:b7:72:03:44:48:66:3e:90:26:
         5e:ac:3e:30:8a:d7:6a:45:74:ec:72:9a:ef:57:fd:84:53:77:
         cb:92:e3:a7:ab:43:39:61:50:6f:5e:d4:a8:28:8e:2b:df:cb:
         8c:32:6d:c4:c8:17:6a:7b:dc:35:62:1a:56:d1:d5:ae:68:09:
         83:ef:88:25:db:29:46:20:64:29:f8:ee:90:ba:19:30:6a:83:
         2d:be:7c:a9:00:48:d7:68:ae:7e:7c:6a:0f:96:15:68:3b:58:
         8f:9a:3e:0b:a5:31:0f:d5:d8:b6:0c:99:64:cc:6e:a2:73:f3:
         43:a8:4d:d1:67:b9:c9:09:43:bd:95:b4:d6:ce:54:26:ed:8b:
         35:bc:ac:c6:f2:65:af:4d:6d:62:10:a9:55:c3:61:dd:90:5c:
         67:d2:d6:e9
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUWEiPvm64RyO8cgUqV9okQ+d7PGUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMzA3MDAwMDAwWhcNMjMwMzEwMjM1OTU5
WjCBpTFJMEcGA1UEBRNAMzg3NTE3OTM5NmU4Y2NkNDk1NTY5ZDVjZjEwOWJlYjU5
MzA3OWIwZWNmN2ZlYzc0ZDkzZjBhMDUxNzRiOGZlMjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANPXF1Y2iPsoZaFvcFCgpef6QnUBKUzN6yetK1S/BT6el1+nUMct
yoreNnH/ExjwK0abVp/mvqBrwaQzq8kVTjWFhi/SXCf5b11S2N2dzwdRVJNasQOw
0MTDDOBmcMhlMl3peJOKns0BRDA8a9ANPGvjpn20WweCYfrAO8uP72qbqQBYmqWz
WCiRNm0HT37kVXj0Dj9V9uCmP3AfJOKRTxn1/gmVjOa64fYWC/wdJykrH6UDUS3r
gza34S/Vy4ExXQxo+BWANhLnabWI261zd2w7juBUcoYYKd7L0LZZ29DiTLbpUUL7
hCd9t8SaH+tnMOhNKN/ks7TQTaRjg7IvCvECAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTqjFwgv9OIIGvKYvq/vyqvQLzazjAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNzVmNmNlODktOTc5Yi00YzI5LThkMzktMjQwNGZhYTMwYmFkLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAMPKyfk1fGy0dNfm
KGqb6bKpHFJ2jLmx727pO+2sA6UsbY/Uk0EUQHhJpPmxw/+NYKG+dnm86np5JzuM
ZvyTeBkOFYwAPXaoKqMLZCoJkeLGwQtkPcJbhI92JNIxBoijs0EQ47dyA0RIZj6Q
Jl6sPjCK12pFdOxymu9X/YRTd8uS46erQzlhUG9e1Kgojivfy4wybcTIF2p73DVi
GlbR1a5oCYPviCXbKUYgZCn47pC6GTBqgy2+fKkASNdorn58ag+WFWg7WI+aPgul
MQ/V2LYMmWTMbqJz80OoTdFnuckJQ72VtNbOVCbtizW8rMbyZa9NbWIQqVXDYd2Q
XGfS1uk=
-----END CERTIFICATE-----