Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/98e2d661-649c-4567-a5d1-0bdd4cb515f0.roa
File:                     98e2d661-649c-4567-a5d1-0bdd4cb515f0.roa (raw, json)
Hash identifier:          3xHVyszOFAlcv9BPNCLynC83r2cTSaYdsk8npijqS5E=
Subject key identifier:   04:3F:39:E7:7A:4F:61:44:7F:9D:32:30:BC:AD:9D:40:6C:3B:11:B3
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       24BF4CFCD414A02737F9D3296286BF513EB157AA
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/98e2d661-649c-4567-a5d1-0bdd4cb515f0.roa
Signing time:             Sat 29 Apr 2023 00:00:00 +0000
ROA not before:           Sat 29 Apr 2023 00:00:00 +0000
ROA not after:            Tue 02 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:bf:4c:fc:d4:14:a0:27:37:f9:d3:29:62:86:bf:51:3e:b1:57:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 29 00:00:00 2023 GMT
            Not After : May  2 23:59:59 2023 GMT
        Subject: serialNumber=ab6ea6708e3bbc73565a5c627c0f953c218d2a696ac1fbacfd0e8e9c6a925b15, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:80:be:19:a6:e6:57:fb:11:f6:8d:47:b3:
                    77:4a:f3:d1:98:54:52:76:27:7b:0a:fb:93:59:92:
                    01:23:ac:9b:60:6c:a4:a1:fc:c7:7d:ed:99:ad:1b:
                    74:a1:b4:a2:19:30:5a:a6:b8:dd:f4:87:83:cb:df:
                    8f:30:36:4e:bd:df:0f:16:3d:89:45:e0:67:bd:44:
                    28:36:ad:7e:97:e3:90:f0:80:b7:ca:14:23:f7:9b:
                    20:bc:91:09:fc:1f:89:64:bb:07:34:f7:43:96:1e:
                    d7:80:da:1f:a4:97:83:b5:11:82:96:57:d6:ba:a2:
                    d8:a3:c7:59:26:c4:10:18:dd:0c:4b:62:70:29:6e:
                    8b:84:cd:7a:47:e7:a4:7d:b6:5a:1f:ed:38:77:4c:
                    c3:06:30:a9:a0:e0:fb:62:08:b6:75:85:49:6d:2f:
                    17:99:fd:7b:7d:65:36:a6:e6:26:0c:cb:f6:b6:b9:
                    e3:e3:fa:df:13:f7:68:b8:53:3e:1e:25:08:6a:a5:
                    ff:01:29:8f:a9:1d:a4:60:ec:6f:73:7b:03:76:18:
                    31:d1:c1:b3:14:db:38:a1:d9:76:3b:1e:d5:14:7f:
                    83:4f:76:43:6f:3a:bb:c5:0f:7c:1c:9b:89:f7:10:
                    0b:bc:21:e0:f4:d9:c5:16:7f:4f:b4:ab:de:f9:1c:
                    9a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3F:39:E7:7A:4F:61:44:7F:9D:32:30:BC:AD:9D:40:6C:3B:11:B3
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/98e2d661-649c-4567-a5d1-0bdd4cb515f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:f2:68:b4:3f:90:d8:0a:8a:83:b2:56:d4:8a:78:04:28:20:
         f0:70:9e:80:13:94:ea:97:fc:41:57:1c:91:72:03:8a:54:2d:
         82:de:52:9f:2d:fc:37:0b:65:f2:c2:1e:a9:3a:75:eb:98:f8:
         4b:1d:94:e4:d4:9d:92:38:23:09:3a:6d:dd:50:26:c9:b0:d0:
         75:db:3f:77:68:e5:df:0f:ae:4c:b0:48:53:6a:f2:b1:eb:8d:
         de:40:50:b3:84:4f:08:25:bc:92:3a:80:23:ef:3e:74:95:c1:
         e0:b0:2e:1b:90:1b:87:39:c0:1c:46:9a:01:71:80:0b:1d:46:
         76:39:2a:14:0d:3a:3d:73:c8:49:89:fb:8f:ca:22:48:7e:0d:
         a4:02:b5:36:04:28:2a:56:83:1e:9d:90:b0:cf:69:6c:73:ed:
         38:0c:a4:36:0d:5d:0b:9f:51:ac:5f:6a:fa:91:f6:21:f6:9b:
         7f:09:13:e6:32:0a:df:0f:95:04:1e:02:d7:21:81:cb:b2:6a:
         5b:53:37:9a:37:4a:d3:ca:db:a0:5c:6c:10:f8:16:4a:0c:71:
         74:8e:4a:48:04:b7:86:48:7c:e6:09:a3:21:dc:31:1d:73:66:
         d4:2b:51:f9:79:d9:6a:24:a0:bd:85:47:69:74:5c:d8:15:ba:
         18:a1:a9:b0
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUJL9M/NQUoCc3+dMpYoa/UT6xV6owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNDI5MDAwMDAwWhcNMjMwNTAyMjM1OTU5
WjCBpTFJMEcGA1UEBRNAYWI2ZWE2NzA4ZTNiYmM3MzU2NWE1YzYyN2MwZjk1M2My
MThkMmE2OTZhYzFmYmFjZmQwZThlOWM2YTkyNWIxNTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALqOgL4ZpuZX+xH2jUezd0rz0ZhUUnYnewr7k1mSASOsm2BspKH8
x33tma0bdKG0ohkwWqa43fSHg8vfjzA2Tr3fDxY9iUXgZ71EKDatfpfjkPCAt8oU
I/ebILyRCfwfiWS7BzT3Q5Ye14DaH6SXg7URgpZX1rqi2KPHWSbEEBjdDEticClu
i4TNekfnpH22Wh/tOHdMwwYwqaDg+2IItnWFSW0vF5n9e31lNqbmJgzL9ra54+P6
3xP3aLhTPh4lCGql/wEpj6kdpGDsb3N7A3YYMdHBsxTbOKHZdjse1RR/g092Q286
u8UPfBybifcQC7wh4PTZxRZ/T7Sr3vkcmoUCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQEPznnek9hRH+dMjC8rZ1AbDsRszAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvOThlMmQ2NjEtNjQ5Yy00NTY3LWE1ZDEtMGJkZDRjYjUxNWYwLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHfyaLQ/kNgKioOy
VtSKeAQoIPBwnoATlOqX/EFXHJFyA4pULYLeUp8t/DcLZfLCHqk6deuY+EsdlOTU
nZI4Iwk6bd1QJsmw0HXbP3do5d8PrkywSFNq8rHrjd5AULOETwglvJI6gCPvPnSV
weCwLhuQG4c5wBxGmgFxgAsdRnY5KhQNOj1zyEmJ+4/KIkh+DaQCtTYEKCpWgx6d
kLDPaWxz7TgMpDYNXQufUaxfavqR9iH2m38JE+YyCt8PlQQeAtchgcuyaltTN5o3
StPK26BcbBD4FkoMcXSOSkgEt4ZIfOYJoyHcMR1zZtQrUfl52WokoL2FR2l0XNgV
uhihqbA=
-----END CERTIFICATE-----