Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8dc67326-7100-45c2-b8ab-868699b471cc.roa
File:                     8dc67326-7100-45c2-b8ab-868699b471cc.roa (raw, json)
Hash identifier:          8C0i/bYhJXdNPfcOgKZVLSxMeBtqPUd/9wlYBzvtr0A=
Subject key identifier:   2B:BD:15:66:E0:C3:28:CB:34:04:FC:FE:EC:7D:E0:49:4F:1D:89:BF
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3943A8EFD103058700BEEF3593AF75D2F154B8DC
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8dc67326-7100-45c2-b8ab-868699b471cc.roa
Signing time:             Wed 22 Mar 2023 00:00:00 +0000
ROA not before:           Wed 22 Mar 2023 00:00:00 +0000
ROA not after:            Sat 25 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:43:a8:ef:d1:03:05:87:00:be:ef:35:93:af:75:d2:f1:54:b8:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar 22 00:00:00 2023 GMT
            Not After : Mar 25 23:59:59 2023 GMT
        Subject: serialNumber=a344c5230f1cf704a2d6012aa1e5a84fc3de09bd6a21ba9c513a8273c21e18cb, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:16:52:26:87:5c:fa:14:87:66:1d:e5:22:ed:
                    41:39:cf:2b:36:53:39:71:b5:d5:07:63:29:a1:d0:
                    dc:8a:a3:8a:3b:d4:11:e7:a7:6f:1d:9c:54:84:cb:
                    de:4f:9f:b3:14:eb:7b:d7:30:b9:7f:a3:60:69:fc:
                    49:92:d7:b0:a4:75:18:25:7d:3c:cb:78:82:84:92:
                    42:fc:ff:7e:92:5b:57:bb:37:0c:8d:3e:8c:81:51:
                    9b:12:c0:dc:4c:3f:1a:cc:5e:ac:48:35:c4:6d:cc:
                    b6:1f:a1:64:1e:c2:5e:89:eb:10:3e:0d:f3:29:32:
                    15:2b:1c:60:73:62:8b:15:77:f7:7a:a5:b2:28:a5:
                    7b:e1:31:23:1a:90:62:2d:31:a3:5f:0f:e8:0e:00:
                    a2:c1:99:a5:2b:fd:28:4d:b5:45:68:5e:c0:2e:e2:
                    72:ac:4a:f8:f8:1f:3c:35:70:78:e5:0f:95:60:db:
                    06:80:1d:0b:b3:49:b5:28:c0:be:52:a6:70:e2:1b:
                    b2:ac:6f:96:7f:02:ef:34:ff:67:e9:b2:67:57:ca:
                    d5:44:78:09:ca:06:81:3e:1e:ff:e9:2e:1d:49:89:
                    5f:ec:db:78:ae:63:08:0a:e6:49:0d:93:a8:28:b5:
                    1c:5b:fd:2d:d8:94:3e:0b:82:22:e7:0f:e3:bf:e8:
                    c6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BD:15:66:E0:C3:28:CB:34:04:FC:FE:EC:7D:E0:49:4F:1D:89:BF
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8dc67326-7100-45c2-b8ab-868699b471cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:98:11:f3:78:e7:e1:de:16:56:3d:00:56:25:87:bb:7d:4f:
         73:db:b0:22:1e:20:86:42:da:0a:2c:eb:99:91:9b:23:63:27:
         af:88:13:1f:c5:2d:b0:84:52:90:b2:d7:fb:e1:fd:a6:2d:cb:
         37:bd:f3:c6:f7:bd:0e:6f:0c:31:89:03:94:33:ee:9c:94:3d:
         c8:1b:1e:75:a9:b9:14:cf:0b:1d:33:a1:21:32:cb:2e:4b:cb:
         c0:30:1b:86:6b:0d:7e:39:c0:1a:5f:8e:9c:e7:d3:0d:62:93:
         4c:e1:b9:b7:f1:7e:a8:ff:f3:bc:61:bf:55:bc:56:cd:1b:6f:
         c8:ff:0f:2b:49:cd:c8:d3:f9:47:d8:a6:b5:a7:e1:0b:0e:5c:
         7a:f9:4b:f9:3e:b8:3c:d9:cb:12:3b:a0:c2:9e:fd:fd:51:47:
         c5:ba:9d:a4:c8:30:16:17:df:9b:5e:85:a5:ab:7c:78:49:97:
         b5:11:f8:6a:57:6b:02:5f:61:e1:8b:04:ec:66:20:fc:6c:61:
         37:51:fa:35:a1:78:89:2f:9c:b2:79:75:c9:02:8a:51:f4:e7:
         d4:e7:be:9d:b1:f8:d1:35:ed:2b:a4:ea:4d:67:ad:91:84:ad:
         6b:1a:4a:52:a0:f9:f7:2c:2d:fa:e3:41:8d:46:ec:8d:42:12:
         fb:db:2c:2c
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUOUOo79EDBYcAvu81k6910vFUuNwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMzIyMDAwMDAwWhcNMjMwMzI1MjM1OTU5
WjCBpTFJMEcGA1UEBRNAYTM0NGM1MjMwZjFjZjcwNGEyZDYwMTJhYTFlNWE4NGZj
M2RlMDliZDZhMjFiYTljNTEzYTgyNzNjMjFlMThjYjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALgWUiaHXPoUh2Yd5SLtQTnPKzZTOXG11QdjKaHQ3IqjijvUEeen
bx2cVITL3k+fsxTre9cwuX+jYGn8SZLXsKR1GCV9PMt4goSSQvz/fpJbV7s3DI0+
jIFRmxLA3Ew/GsxerEg1xG3Mth+hZB7CXonrED4N8ykyFSscYHNiixV393qlsiil
e+ExIxqQYi0xo18P6A4AosGZpSv9KE21RWhewC7icqxK+PgfPDVweOUPlWDbBoAd
C7NJtSjAvlKmcOIbsqxvln8C7zT/Z+myZ1fK1UR4CcoGgT4e/+kuHUmJX+zbeK5j
CArmSQ2TqCi1HFv9LdiUPguCIucP47/oxgsCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQrvRVm4MMoyzQE/P7sfeBJTx2JvzAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvOGRjNjczMjYtNzEwMC00NWMyLWI4YWItODY4Njk5YjQ3MWNjLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGuYEfN45+HeFlY9
AFYlh7t9T3PbsCIeIIZC2gos65mRmyNjJ6+IEx/FLbCEUpCy1/vh/aYtyze988b3
vQ5vDDGJA5Qz7pyUPcgbHnWpuRTPCx0zoSEyyy5Ly8AwG4ZrDX45wBpfjpzn0w1i
k0zhubfxfqj/87xhv1W8Vs0bb8j/DytJzcjT+UfYprWn4QsOXHr5S/k+uDzZyxI7
oMKe/f1RR8W6naTIMBYX35tehaWrfHhJl7UR+GpXawJfYeGLBOxmIPxsYTdR+jWh
eIkvnLJ5dckCilH059Tnvp2x+NE17Suk6k1nrZGErWsaSlKg+fcsLfrjQY1G7I1C
EvvbLCw=
-----END CERTIFICATE-----