Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/95156e2d-b8b0-47b8-9788-63c22e8b82e1.roa
File:                     95156e2d-b8b0-47b8-9788-63c22e8b82e1.roa (raw, json)
Hash identifier:          G2tFUGwesuBsf8CWphUi+tybdb4NMYEd1+Z8Qwqmye4=
Subject key identifier:   0E:FF:AD:60:A0:2B:91:16:7B:0F:91:27:41:17:97:E8:88:BA:7C:7E
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       777E94403E5F761617A48D99EFC5CB1BC36495F0
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/95156e2d-b8b0-47b8-9788-63c22e8b82e1.roa
Signing time:             Wed 10 May 2023 00:00:00 +0000
ROA not before:           Wed 10 May 2023 00:00:00 +0000
ROA not after:            Sat 13 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7e:94:40:3e:5f:76:16:17:a4:8d:99:ef:c5:cb:1b:c3:64:95:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 10 00:00:00 2023 GMT
            Not After : May 13 23:59:59 2023 GMT
        Subject: serialNumber=f8994e452daba83154805e9d355c10944279c78cb5bde0fb1b6a79d7fb7edad3, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a5:3a:ba:cf:88:7b:12:5f:ee:84:04:b7:30:
                    f4:05:e4:43:7e:61:fc:41:4f:76:3c:29:eb:9b:28:
                    80:c0:4a:4d:8a:cf:fe:f9:90:f6:2b:a3:e4:f6:50:
                    fc:31:90:0b:a1:7c:53:29:3d:a0:fe:2e:58:b5:61:
                    cd:0f:68:85:cc:ac:cb:61:0f:8d:e6:42:7c:e5:ae:
                    68:8e:f8:fb:58:f1:bd:0b:75:07:10:a9:d3:dd:05:
                    d5:60:23:f7:d1:7c:3e:80:ee:a4:94:ab:dc:e7:67:
                    e0:93:2d:00:90:ef:d3:88:2d:76:3f:0c:65:42:62:
                    f9:00:c3:b5:98:0a:10:85:ee:be:2f:2c:b5:9e:bd:
                    ad:6d:6b:b6:22:90:84:98:e9:5b:0f:e8:28:3c:6e:
                    88:7a:1b:eb:ac:f3:f9:8a:86:0c:00:9e:82:b6:b5:
                    99:26:8f:c7:7a:d7:dc:b6:92:2a:9b:96:38:74:20:
                    e3:4e:af:9f:e0:9c:03:9a:87:ab:07:26:22:68:3c:
                    f7:ab:f7:27:a4:31:f1:07:92:7a:0a:59:0e:bf:64:
                    d2:0d:f6:41:32:52:8f:dc:e4:ba:3b:9c:6e:ee:69:
                    00:89:2b:30:18:6a:6b:f8:71:78:de:fb:6b:62:d1:
                    38:75:97:92:cd:67:65:27:1c:e3:ee:9c:9c:f0:67:
                    ff:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FF:AD:60:A0:2B:91:16:7B:0F:91:27:41:17:97:E8:88:BA:7C:7E
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/95156e2d-b8b0-47b8-9788-63c22e8b82e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:18:23:6b:6c:ef:03:40:03:92:e0:ad:1e:98:60:d3:c8:12:
         ec:ca:9d:52:98:4b:ef:5d:8d:97:c0:79:03:3c:11:61:a9:87:
         d1:5c:03:e9:2a:32:39:32:16:3a:83:f5:c7:b8:25:98:7d:aa:
         0d:ca:fd:a3:14:3c:aa:ae:b8:a8:26:d1:0b:47:55:28:24:ae:
         57:21:50:97:9c:79:46:94:06:b2:c9:24:1b:c5:5e:fe:2f:75:
         86:e2:ee:dd:0d:11:2a:ab:ca:ad:52:c4:fa:89:86:bf:0b:03:
         4c:f8:f0:4c:e6:93:aa:60:3d:9c:c9:57:9f:e2:a6:3d:37:16:
         50:b0:66:da:4f:e6:12:42:a6:0b:b1:5e:ba:b3:12:4e:ad:cc:
         be:fc:c5:9e:2e:40:ae:c6:09:6d:39:c3:a6:9d:98:e5:a7:ab:
         a5:47:8e:a8:e5:25:35:0b:e0:1e:d9:38:d6:6a:c3:86:da:60:
         bf:c0:6b:56:38:61:f7:cb:71:40:81:bb:1b:d4:62:91:2e:d3:
         fa:b5:c8:12:a3:1c:c4:6b:31:17:d7:41:6d:79:30:aa:22:a4:
         62:b2:73:89:32:fc:3a:a3:e2:d9:79:bb:6f:d2:16:9d:b5:8e:
         31:cb:a6:7c:ce:46:82:0d:40:7e:6c:4a:14:de:d3:30:46:60:
         8b:a4:6a:a6
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUd36UQD5fdhYXpI2Z78XLG8NklfAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNTEwMDAwMDAwWhcNMjMwNTEzMjM1OTU5
WjCBpTFJMEcGA1UEBRNAZjg5OTRlNDUyZGFiYTgzMTU0ODA1ZTlkMzU1YzEwOTQ0
Mjc5Yzc4Y2I1YmRlMGZiMWI2YTc5ZDdmYjdlZGFkMzEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN6lOrrPiHsSX+6EBLcw9AXkQ35h/EFPdjwp65sogMBKTYrP/vmQ
9iuj5PZQ/DGQC6F8Uyk9oP4uWLVhzQ9ohcysy2EPjeZCfOWuaI74+1jxvQt1BxCp
090F1WAj99F8PoDupJSr3Odn4JMtAJDv04gtdj8MZUJi+QDDtZgKEIXuvi8stZ69
rW1rtiKQhJjpWw/oKDxuiHob66zz+YqGDACegra1mSaPx3rX3LaSKpuWOHQg406v
n+CcA5qHqwcmImg896v3J6Qx8QeSegpZDr9k0g32QTJSj9zkujucbu5pAIkrMBhq
a/hxeN77a2LROHWXks1nZScc4+6cnPBn/z8CAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQO/61goCuRFnsPkSdBF5foiLp8fjAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvOTUxNTZlMmQtYjhiMC00N2I4LTk3ODgtNjNjMjJlOGI4MmUxLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGUYI2ts7wNAA5Lg
rR6YYNPIEuzKnVKYS+9djZfAeQM8EWGph9FcA+kqMjkyFjqD9ce4JZh9qg3K/aMU
PKquuKgm0QtHVSgkrlchUJeceUaUBrLJJBvFXv4vdYbi7t0NESqryq1SxPqJhr8L
A0z48Ezmk6pgPZzJV5/ipj03FlCwZtpP5hJCpguxXrqzEk6tzL78xZ4uQK7GCW05
w6admOWnq6VHjqjlJTUL4B7ZONZqw4baYL/Aa1Y4YffLcUCBuxvUYpEu0/q1yBKj
HMRrMRfXQW15MKoipGKyc4ky/Dqj4tl5u2/SFp21jjHLpnzORoINQH5sShTe0zBG
YIukaqY=
-----END CERTIFICATE-----