Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/90960916-5903-40ef-93a5-c4f6b96a1b90.roa
File:                     90960916-5903-40ef-93a5-c4f6b96a1b90.roa (raw, json)
Hash identifier:          rB5q/dPxf3F45Q8nQ8u5Ffk+yXtCeBumtW2nquFBBOo=
Subject key identifier:   A5:B3:02:A2:93:58:43:EF:3A:BC:C2:F2:CE:DC:F0:B8:44:CC:1A:E6
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1A17F133E31C642248315E7ABF885B2D55B90AD2
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/90960916-5903-40ef-93a5-c4f6b96a1b90.roa
Signing time:             Sun 04 Jun 2023 00:00:00 +0000
ROA not before:           Sun 04 Jun 2023 00:00:00 +0000
ROA not after:            Wed 07 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:17:f1:33:e3:1c:64:22:48:31:5e:7a:bf:88:5b:2d:55:b9:0a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun  4 00:00:00 2023 GMT
            Not After : Jun  7 23:59:59 2023 GMT
        Subject: serialNumber=02214b67dfd262d31aaec1d6b4779ec11773ac7eab8652f9d25405e8767591ef, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2d:91:ab:bc:68:fe:a4:7d:3d:03:30:76:3a:
                    5c:a0:81:19:9a:d5:ee:22:9c:ea:a3:f7:68:1c:1d:
                    68:b2:91:62:69:69:36:a6:23:d2:ff:47:c5:b4:b4:
                    87:db:e7:e3:70:84:d4:69:e1:de:ae:fa:b1:f6:ce:
                    dd:2b:5a:31:c2:3f:5b:48:c2:09:9f:89:6f:d5:54:
                    b4:da:4d:57:2e:6c:3d:28:83:0f:31:db:71:f7:94:
                    bc:74:3c:a6:a9:ad:78:14:3a:81:55:28:79:ee:98:
                    39:40:72:22:31:c2:1a:95:9d:80:b9:8a:87:ab:16:
                    4e:24:fc:ea:de:8a:8a:e4:f4:ab:ab:95:45:09:98:
                    a3:c4:c3:b3:26:0e:99:24:d8:a9:42:23:c9:59:af:
                    38:13:a7:45:10:6e:05:42:43:9d:bd:2b:4c:0a:b3:
                    90:d2:e9:59:93:53:67:bf:33:20:9b:16:e9:56:f1:
                    5a:b0:bb:05:44:62:ac:30:18:06:97:1c:2e:a6:ed:
                    4d:e1:b2:18:a9:99:08:6f:6e:83:b3:34:ab:96:e7:
                    07:2c:f6:9b:88:cd:d0:02:1d:da:b9:49:f5:81:43:
                    30:57:80:55:bf:04:8e:5e:65:c6:49:20:45:fd:06:
                    50:da:59:d7:f5:5b:be:aa:84:36:d9:0d:bd:d0:03:
                    3c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B3:02:A2:93:58:43:EF:3A:BC:C2:F2:CE:DC:F0:B8:44:CC:1A:E6
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/90960916-5903-40ef-93a5-c4f6b96a1b90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:17:e6:c5:9d:39:19:09:b9:b2:52:79:3b:fb:d4:1e:75:19:
         e2:b0:55:a7:5a:42:99:2f:f8:1d:35:44:9e:c6:04:09:94:4c:
         49:06:df:44:37:92:76:df:9a:22:5b:df:0a:53:7f:90:a2:09:
         cb:7d:e1:13:af:30:9d:9a:ef:4f:72:4b:81:a1:5e:ae:e9:7e:
         c9:92:71:ae:65:2f:e3:2f:98:4e:d4:05:de:55:b3:96:07:e7:
         34:30:5e:d1:56:fb:ac:96:3b:0a:74:2f:eb:90:c4:b4:25:86:
         6c:eb:3c:38:8e:de:42:18:35:99:22:55:8c:63:f0:d2:ed:13:
         4d:b9:de:f8:a2:ec:34:6e:fb:51:a2:89:81:ee:14:f6:1c:9d:
         3d:57:b2:fc:92:ae:9d:c9:ba:0d:86:12:b2:b0:e3:10:b0:4b:
         4d:65:19:b9:7b:f5:15:bc:9d:d6:d2:95:de:9f:52:59:8c:72:
         58:89:b3:e2:66:a3:db:fc:d8:84:23:2f:f6:a5:31:4a:a4:19:
         78:19:ea:25:fb:bb:99:96:98:95:1e:f9:87:8d:11:f5:40:49:
         5f:80:ce:9e:e4:1b:8c:f2:ea:fa:df:90:c4:07:44:29:10:0e:
         fb:b8:ef:63:6e:1a:ae:56:c3:cb:29:7d:55:66:ca:1b:c6:ee:
         60:57:5b:db
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUGhfxM+McZCJIMV56v4hbLVW5CtIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNjA0MDAwMDAwWhcNMjMwNjA3MjM1OTU5
WjCBpTFJMEcGA1UEBRNAMDIyMTRiNjdkZmQyNjJkMzFhYWVjMWQ2YjQ3NzllYzEx
NzczYWM3ZWFiODY1MmY5ZDI1NDA1ZTg3Njc1OTFlZjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMstkau8aP6kfT0DMHY6XKCBGZrV7iKc6qP3aBwdaLKRYmlpNqYj
0v9HxbS0h9vn43CE1Gnh3q76sfbO3StaMcI/W0jCCZ+Jb9VUtNpNVy5sPSiDDzHb
cfeUvHQ8pqmteBQ6gVUoee6YOUByIjHCGpWdgLmKh6sWTiT86t6KiuT0q6uVRQmY
o8TDsyYOmSTYqUIjyVmvOBOnRRBuBUJDnb0rTAqzkNLpWZNTZ78zIJsW6VbxWrC7
BURirDAYBpccLqbtTeGyGKmZCG9ug7M0q5bnByz2m4jN0AId2rlJ9YFDMFeAVb8E
jl5lxkkgRf0GUNpZ1/VbvqqENtkNvdADPJkCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBSlswKik1hD7zq8wvLO3PC4RMwa5jAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvOTA5NjA5MTYtNTkwMy00MGVmLTkzYTUtYzRmNmI5NmExYjkwLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAFwX5sWdORkJubJS
eTv71B51GeKwVadaQpkv+B01RJ7GBAmUTEkG30Q3knbfmiJb3wpTf5CiCct94ROv
MJ2a709yS4GhXq7pfsmSca5lL+MvmE7UBd5Vs5YH5zQwXtFW+6yWOwp0L+uQxLQl
hmzrPDiO3kIYNZkiVYxj8NLtE0253vii7DRu+1GiiYHuFPYcnT1XsvySrp3Jug2G
ErKw4xCwS01lGbl79RW8ndbSld6fUlmMcliJs+Jmo9v82IQjL/alMUqkGXgZ6iX7
u5mWmJUe+YeNEfVASV+Azp7kG4zy6vrfkMQHRCkQDvu472NuGq5Ww8spfVVmyhvG
7mBXW9s=
-----END CERTIFICATE-----