Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/893f8b63-8c07-44bd-8ff2-0f595bc402e5.roa
File:                     893f8b63-8c07-44bd-8ff2-0f595bc402e5.roa (raw, json)
Hash identifier:          seP6IFvGBM+57mVWfbO6SrcjIr9bhI6shwehcZ0WLfs=
Subject key identifier:   D0:94:B5:1C:58:84:85:9D:07:E0:AC:BC:46:54:2A:4F:2D:D8:0F:5E
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7E51BA63C3A6206ACDC28B6BC5CEB5209F71AEDF
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/893f8b63-8c07-44bd-8ff2-0f595bc402e5.roa
Signing time:             Mon 27 Mar 2023 00:00:00 +0000
ROA not before:           Mon 27 Mar 2023 00:00:00 +0000
ROA not after:            Thu 30 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:51:ba:63:c3:a6:20:6a:cd:c2:8b:6b:c5:ce:b5:20:9f:71:ae:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 27 00:00:00 2023 GMT
            Not After : Mar 30 23:59:59 2023 GMT
        Subject: serialNumber=98fad511552d0f74d21f8096489be444ea498ac4c5aa2a0b59245a4610437324, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:aa:67:a1:bd:a0:60:2e:ca:d4:80:a8:dc:ea:
                    87:b4:36:62:17:6c:89:d0:c6:2c:1e:f4:71:bb:85:
                    fa:58:24:0f:2f:eb:17:cf:a5:6f:88:84:79:87:d7:
                    33:28:7f:c9:17:ad:58:33:0a:f3:57:0b:4f:92:b6:
                    13:a4:a5:31:20:07:46:73:32:d5:26:ca:9c:be:a4:
                    03:3a:11:90:d7:a3:33:10:d7:b3:2d:4d:02:ab:82:
                    b6:b8:f2:17:d0:7e:c5:11:cc:1b:3f:6e:d9:c5:14:
                    35:59:c4:ab:f7:e3:82:7d:c1:93:30:f0:cb:7f:66:
                    6f:09:b0:9b:24:71:1a:7b:59:1b:15:fa:4e:14:3c:
                    35:cf:94:83:8b:25:f6:8c:d9:37:4b:66:70:35:1d:
                    e6:0b:42:4e:db:59:dc:91:b6:47:e2:f1:34:f9:3a:
                    ed:8c:e6:3b:39:b7:f8:78:4a:9a:90:e3:d0:d8:49:
                    2a:cf:c7:10:a6:fd:d4:9a:bc:c6:9b:b8:4c:fb:75:
                    83:52:4d:ec:46:93:5f:6c:3c:d8:44:b1:23:f6:e9:
                    f8:0b:fa:80:b0:33:c2:7a:9d:b4:a4:a5:23:45:f2:
                    7d:8d:ae:aa:ce:9f:a2:30:22:a6:61:a3:a6:3a:c6:
                    f4:3f:9e:bf:e6:97:ca:dd:49:11:0b:b6:6c:a8:83:
                    50:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:94:B5:1C:58:84:85:9D:07:E0:AC:BC:46:54:2A:4F:2D:D8:0F:5E
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/893f8b63-8c07-44bd-8ff2-0f595bc402e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:a4:db:f0:a1:ec:a4:62:50:78:bb:0e:0b:f0:fb:1b:af:35:
         c8:9a:60:ab:86:b6:79:e5:5c:a7:d2:15:e6:e0:a6:00:02:2e:
         b0:3c:e5:ce:ea:af:54:d1:94:ae:8e:de:a2:77:41:c8:a8:1c:
         75:06:0a:6d:ac:82:13:ed:93:00:08:41:10:57:24:cb:31:56:
         df:00:b4:70:dd:5d:e0:bc:79:da:36:91:01:3c:1e:57:76:69:
         4a:3e:3a:96:58:56:8c:97:60:f2:45:ac:86:3b:4d:6d:40:19:
         ec:9d:f5:18:20:9b:48:ce:6e:a1:f9:7b:38:c1:82:72:9d:46:
         93:9a:4f:07:7d:71:91:3f:03:1d:70:d7:00:78:80:a3:c6:c6:
         af:32:76:54:76:ff:2e:d5:c3:08:52:43:4f:ee:4e:61:65:95:
         c7:71:8d:02:e8:eb:5e:74:1a:bb:b5:24:eb:d3:5e:8e:e1:eb:
         59:2d:3e:21:4e:a1:dc:4e:ca:58:23:24:f0:ed:10:11:5c:f0:
         57:90:78:08:72:86:bc:9b:8a:b7:64:7f:35:fe:69:12:4d:83:
         de:93:b1:02:62:88:d1:55:bc:b3:82:c9:4d:89:20:11:65:a4:
         a3:e9:82:ee:08:62:01:db:d6:fe:89:9b:2f:10:36:4a:31:1a:
         54:4d:b2:b4
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUflG6Y8OmIGrNwotrxc61IJ9xrt8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMzI3MDAwMDAwWhcNMjMwMzMwMjM1OTU5
WjCBpTFJMEcGA1UEBRNAOThmYWQ1MTE1NTJkMGY3NGQyMWY4MDk2NDg5YmU0NDRl
YTQ5OGFjNGM1YWEyYTBiNTkyNDVhNDYxMDQzNzMyNDEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMuqZ6G9oGAuytSAqNzqh7Q2YhdsidDGLB70cbuF+lgkDy/rF8+l
b4iEeYfXMyh/yRetWDMK81cLT5K2E6SlMSAHRnMy1SbKnL6kAzoRkNejMxDXsy1N
AquCtrjyF9B+xRHMGz9u2cUUNVnEq/fjgn3BkzDwy39mbwmwmyRxGntZGxX6ThQ8
Nc+Ug4sl9ozZN0tmcDUd5gtCTttZ3JG2R+LxNPk67YzmOzm3+HhKmpDj0NhJKs/H
EKb91Jq8xpu4TPt1g1JN7EaTX2w82ESxI/bp+Av6gLAzwnqdtKSlI0XyfY2uqs6f
ojAipmGjpjrG9D+ev+aXyt1JEQu2bKiDUO8CAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTQlLUcWISFnQfgrLxGVCpPLdgPXjAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvODkzZjhiNjMtOGMwNy00NGJkLThmZjItMGY1OTViYzQwMmU1LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAMSk2/Ch7KRiUHi7
Dgvw+xuvNciaYKuGtnnlXKfSFebgpgACLrA85c7qr1TRlK6O3qJ3QcioHHUGCm2s
ghPtkwAIQRBXJMsxVt8AtHDdXeC8edo2kQE8Hld2aUo+OpZYVoyXYPJFrIY7TW1A
Geyd9Rggm0jObqH5ezjBgnKdRpOaTwd9cZE/Ax1w1wB4gKPGxq8ydlR2/y7VwwhS
Q0/uTmFllcdxjQLo6150Gru1JOvTXo7h61ktPiFOodxOylgjJPDtEBFc8FeQeAhy
hrybirdkfzX+aRJNg96TsQJiiNFVvLOCyU2JIBFlpKPpgu4IYgHb1v6Jmy8QNkox
GlRNsrQ=
-----END CERTIFICATE-----