Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7a28dfe6-4152-483a-a0b9-e2eac58e0646.roa
File:                     7a28dfe6-4152-483a-a0b9-e2eac58e0646.roa (raw, json)
Hash identifier:          1fWNycjB0Jo/0GMt1UoL2nvoNeqAKZ9pbEcOn+8y46E=
Subject key identifier:   CD:DF:FA:8C:3F:64:1B:D4:58:EE:FC:19:21:24:AD:62:7B:16:8A:96
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       25DCBCCCA70B72D38C7414F6406A7C455A4E3326
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7a28dfe6-4152-483a-a0b9-e2eac58e0646.roa
Signing time:             Sat 04 Mar 2023 00:00:00 +0000
ROA not before:           Sat 04 Mar 2023 00:00:00 +0000
ROA not after:            Tue 07 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:dc:bc:cc:a7:0b:72:d3:8c:74:14:f6:40:6a:7c:45:5a:4e:33:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  4 00:00:00 2023 GMT
            Not After : Mar  7 23:59:59 2023 GMT
        Subject: serialNumber=ab5cb2cee9abd2a52975f799833fdc0336f0d6752b7e7dbae7e0b3ace9e00036, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:96:56:3b:52:cd:1f:85:68:f3:67:f2:be:48:
                    a3:56:c3:f6:4a:61:bf:37:17:7f:34:b0:7c:21:44:
                    6a:e2:bc:87:b4:cd:a7:b0:fa:dd:00:6e:8b:88:51:
                    43:00:44:13:f6:5a:f7:88:20:d7:73:07:e5:a8:08:
                    b1:85:f7:05:43:3c:02:ce:c0:fb:7f:50:5b:a2:8b:
                    10:fd:99:07:6d:fd:3c:17:f8:86:f9:63:0e:02:5c:
                    e8:85:d6:e7:e3:96:df:0e:35:ba:01:46:b6:44:c0:
                    1b:e3:43:90:2a:ad:72:20:d3:4b:f2:1e:49:42:0c:
                    c0:63:62:a2:af:b8:46:91:76:27:11:77:4a:a0:b3:
                    eb:e7:92:29:e2:79:35:b3:48:2d:6e:d0:54:ba:48:
                    0d:ce:c3:c4:01:29:56:64:63:05:87:ff:a9:fe:6a:
                    79:0a:b6:12:6f:2b:64:e5:d1:76:d7:d8:d0:37:84:
                    c4:c0:48:38:ab:33:59:74:71:f3:90:2d:37:e5:d3:
                    46:55:3f:e1:2c:11:6d:b7:11:49:4f:5c:2f:38:b9:
                    9e:db:9c:6b:cc:b3:a8:a7:47:ae:c0:e3:85:a4:4c:
                    c8:95:c3:f0:f3:98:60:b1:2d:f4:91:ef:0b:44:52:
                    94:b4:10:15:ab:e5:69:78:fa:d4:64:66:28:54:7e:
                    eb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DF:FA:8C:3F:64:1B:D4:58:EE:FC:19:21:24:AD:62:7B:16:8A:96
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7a28dfe6-4152-483a-a0b9-e2eac58e0646.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:27:da:74:f2:2e:1f:09:91:e8:29:3c:f7:27:51:ca:d5:fa:
         87:3f:00:00:f3:48:55:eb:2a:b0:c0:e2:3a:e9:d2:fa:a5:60:
         14:7f:56:06:6c:9d:16:78:52:43:15:2b:61:83:7e:85:a7:a9:
         08:27:24:10:c3:cf:cd:1f:87:dc:2c:77:7e:e8:64:d4:07:07:
         66:9a:ac:99:1e:70:d9:97:62:cc:e9:2c:be:8d:bd:de:11:55:
         fe:0f:53:8b:fe:28:a3:3f:b4:61:3a:6d:5d:86:f7:51:53:53:
         a8:db:a4:83:06:36:b0:c6:b6:6d:31:14:77:22:dc:2a:38:07:
         15:7b:f9:4f:ad:5c:93:96:33:c5:4e:6e:81:10:23:ad:9b:e4:
         44:f3:26:d3:a1:b5:56:6c:42:8c:96:45:5a:c6:04:07:52:8b:
         58:d2:c5:e2:a4:aa:0c:c0:2d:5c:6d:97:85:90:c6:09:43:72:
         98:71:81:7f:0a:f4:37:50:93:bc:2a:cc:61:1d:5b:17:fa:ae:
         0e:a9:2f:c0:55:4e:a0:06:30:80:98:ea:b6:ee:ba:0c:c3:9c:
         14:dc:91:f1:dc:b1:66:0b:16:9c:66:5f:69:84:4a:2c:47:47:
         65:04:26:08:e1:54:bf:51:82:be:17:55:38:4e:df:ca:ab:3e:
         dd:1f:d4:e4
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUJdy8zKcLctOMdBT2QGp8RVpOMyYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMzA0MDAwMDAwWhcNMjMwMzA3MjM1OTU5
WjCBpTFJMEcGA1UEBRNAYWI1Y2IyY2VlOWFiZDJhNTI5NzVmNzk5ODMzZmRjMDMz
NmYwZDY3NTJiN2U3ZGJhZTdlMGIzYWNlOWUwMDAzNjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK2WVjtSzR+FaPNn8r5Io1bD9kphvzcXfzSwfCFEauK8h7TNp7D6
3QBui4hRQwBEE/Za94gg13MH5agIsYX3BUM8As7A+39QW6KLEP2ZB239PBf4hvlj
DgJc6IXW5+OW3w41ugFGtkTAG+NDkCqtciDTS/IeSUIMwGNioq+4RpF2JxF3SqCz
6+eSKeJ5NbNILW7QVLpIDc7DxAEpVmRjBYf/qf5qeQq2Em8rZOXRdtfY0DeExMBI
OKszWXRx85AtN+XTRlU/4SwRbbcRSU9cLzi5ntuca8yzqKdHrsDjhaRMyJXD8POY
YLEt9JHvC0RSlLQQFavlaXj61GRmKFR+6wkCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTN3/qMP2Qb1Fju/BkhJK1iexaKljAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvN2EyOGRmZTYtNDE1Mi00ODNhLWEwYjktZTJlYWM1OGUwNjQ2LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEcn2nTyLh8Jkegp
PPcnUcrV+oc/AADzSFXrKrDA4jrp0vqlYBR/VgZsnRZ4UkMVK2GDfoWnqQgnJBDD
z80fh9wsd37oZNQHB2aarJkecNmXYszpLL6Nvd4RVf4PU4v+KKM/tGE6bV2G91FT
U6jbpIMGNrDGtm0xFHci3Co4BxV7+U+tXJOWM8VOboEQI62b5ETzJtOhtVZsQoyW
RVrGBAdSi1jSxeKkqgzALVxtl4WQxglDcphxgX8K9DdQk7wqzGEdWxf6rg6pL8BV
TqAGMICY6rbuugzDnBTckfHcsWYLFpxmX2mESixHR2UEJgjhVL9Rgr4XVThO38qr
Pt0f1OQ=
-----END CERTIFICATE-----