Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/964e06a2-80e0-4c88-970e-4d0ea6320537.roa
File:                     964e06a2-80e0-4c88-970e-4d0ea6320537.roa (raw, json)
Hash identifier:          lgZupzxCnrXMnDxG092P6+kp7ofG2rmCupSbVyX1Rak=
Subject key identifier:   83:73:8D:35:DF:17:CD:C0:6A:49:20:EF:FB:3D:DD:87:6D:73:4A:62
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3E21A9EB637E83B4C8248761116E90C2F79A2A72
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/964e06a2-80e0-4c88-970e-4d0ea6320537.roa
Signing time:             Sun 09 Apr 2023 00:00:00 +0000
ROA not before:           Sun 09 Apr 2023 00:00:00 +0000
ROA not after:            Wed 12 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:21:a9:eb:63:7e:83:b4:c8:24:87:61:11:6e:90:c2:f7:9a:2a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  9 00:00:00 2023 GMT
            Not After : Apr 12 23:59:59 2023 GMT
        Subject: serialNumber=5e5d645fb0aa1e42d66a5e7f1fc9ba47579e6f4642cbd1efce0616ce1ac9cf72, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:53:4d:0a:07:c0:89:6d:fa:61:18:16:4a:ca:
                    f9:06:15:f1:9f:4d:b4:58:7f:f6:d7:52:dd:82:34:
                    1f:7d:04:45:66:78:c3:ae:63:4b:8f:8c:7d:9b:f5:
                    02:ca:eb:5b:b1:81:9c:28:21:10:a0:52:4e:31:5b:
                    8b:00:b5:74:b1:9f:96:ff:63:58:ac:96:2e:e5:5b:
                    1b:7e:ca:0c:80:6d:6a:fa:20:f5:b3:7c:42:74:3a:
                    4f:e3:b0:4a:82:3c:23:4c:72:56:bc:c4:73:08:d0:
                    d4:74:cf:e7:01:19:30:6a:43:37:93:de:ae:3e:2d:
                    36:96:02:cb:e3:b2:25:c8:e3:43:4f:e1:54:37:2d:
                    57:24:9c:1c:6f:15:de:3c:f9:dc:ac:b6:14:3d:35:
                    b2:b0:50:7c:1a:0e:0d:f3:1a:2a:95:fc:ce:bc:85:
                    d3:80:4a:03:e8:e0:3f:2a:8b:f3:4a:78:8d:8c:07:
                    59:1f:cc:4f:09:34:f5:0d:9e:c6:17:5a:43:c1:9d:
                    b5:41:cb:d7:6b:83:cc:de:3c:e3:ad:ee:5b:9a:c5:
                    f7:9d:2c:2f:04:e7:22:37:d3:70:c5:df:d7:e8:5c:
                    32:40:cf:85:84:7b:1a:e5:9c:ef:18:10:f0:ae:bd:
                    ca:c1:b5:b3:6c:a5:42:5b:3b:b0:65:1d:23:66:5f:
                    aa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:73:8D:35:DF:17:CD:C0:6A:49:20:EF:FB:3D:DD:87:6D:73:4A:62
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/964e06a2-80e0-4c88-970e-4d0ea6320537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:1b:ac:08:6a:e4:02:ab:d2:0f:5c:bb:96:00:18:85:34:8f:
         89:f2:74:4c:0f:1e:f9:fa:8a:95:4b:50:58:50:87:62:4c:00:
         e0:95:b9:ed:13:e9:73:76:de:b7:e7:60:a6:c0:a0:ee:89:3f:
         98:6b:46:6d:bc:c9:34:7f:bf:bd:80:d3:54:aa:da:ac:a6:d5:
         50:a6:d9:51:41:be:1e:ee:1b:2e:6d:76:55:22:a1:df:3b:4c:
         b4:e0:a6:a6:91:ee:84:94:60:8d:bf:86:8b:28:db:7d:9a:d2:
         4a:41:59:e1:11:04:9c:71:00:ec:82:1e:4a:2e:83:78:27:61:
         74:24:6e:93:22:6b:48:39:e4:76:4b:82:4a:f3:0d:57:b9:5c:
         ce:1c:82:d4:ec:60:4b:74:74:49:22:7f:6d:dc:4b:c4:f6:6e:
         97:4f:cf:f7:18:78:e3:79:fc:e5:0c:09:b8:48:e1:47:aa:95:
         c2:91:65:06:56:ff:70:a7:c5:24:b6:e3:c8:e6:85:6b:e5:51:
         6d:64:a4:0d:da:86:36:64:66:73:ec:19:c3:2b:be:51:06:e8:
         03:b6:5f:cb:79:7a:5a:50:2a:81:48:b7:5a:c5:c0:ba:f5:5b:
         5e:3e:1c:ec:f6:da:30:0b:8f:9a:62:d0:d8:82:13:97:82:ac:
         f5:c1:6e:09
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUPiGp62N+g7TIJIdhEW6QwveaKnIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNDA5MDAwMDAwWhcNMjMwNDEyMjM1OTU5
WjCBpTFJMEcGA1UEBRNANWU1ZDY0NWZiMGFhMWU0MmQ2NmE1ZTdmMWZjOWJhNDc1
NzllNmY0NjQyY2JkMWVmY2UwNjE2Y2UxYWM5Y2Y3MjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKNTTQoHwIlt+mEYFkrK+QYV8Z9NtFh/9tdS3YI0H30ERWZ4w65j
S4+MfZv1AsrrW7GBnCghEKBSTjFbiwC1dLGflv9jWKyWLuVbG37KDIBtavog9bN8
QnQ6T+OwSoI8I0xyVrzEcwjQ1HTP5wEZMGpDN5Perj4tNpYCy+OyJcjjQ0/hVDct
VyScHG8V3jz53Ky2FD01srBQfBoODfMaKpX8zryF04BKA+jgPyqL80p4jYwHWR/M
Twk09Q2exhdaQ8GdtUHL12uDzN48463uW5rF950sLwTnIjfTcMXf1+hcMkDPhYR7
GuWc7xgQ8K69ysG1s2ylQls7sGUdI2ZfquUCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBSDc4013xfNwGpJIO/7Pd2HbXNKYjAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvOTY0ZTA2YTItODBlMC00Yzg4LTk3MGUtNGQwZWE2MzIwNTM3LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKQbrAhq5AKr0g9c
u5YAGIU0j4nydEwPHvn6ipVLUFhQh2JMAOCVue0T6XN23rfnYKbAoO6JP5hrRm28
yTR/v72A01Sq2qym1VCm2VFBvh7uGy5tdlUiod87TLTgpqaR7oSUYI2/hoso232a
0kpBWeERBJxxAOyCHkoug3gnYXQkbpMia0g55HZLgkrzDVe5XM4cgtTsYEt0dEki
f23cS8T2bpdPz/cYeON5/OUMCbhI4UeqlcKRZQZW/3CnxSS248jmhWvlUW1kpA3a
hjZkZnPsGcMrvlEG6AO2X8t5elpQKoFIt1rFwLr1W14+HOz22jALj5pi0NiCE5eC
rPXBbgk=
-----END CERTIFICATE-----