Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9d4e203e-50fa-483a-8f13-e044df1ea750.roa
File:                     9d4e203e-50fa-483a-8f13-e044df1ea750.roa (raw, json)
Hash identifier:          WeYp1pvgRcxU2Hw8P4OuGR71tePTNFhnXwnwDM8giFI=
Subject key identifier:   0E:41:8F:08:9C:38:5E:6F:34:87:A4:5A:8B:C2:E7:17:BD:2E:3A:51
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       170769BFB012D2859BAFA32909CB46CAA437321D
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9d4e203e-50fa-483a-8f13-e044df1ea750.roa
Signing time:             Wed 08 Feb 2023 00:00:00 +0000
ROA not before:           Wed 08 Feb 2023 00:00:00 +0000
ROA not after:            Sat 11 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:07:69:bf:b0:12:d2:85:9b:af:a3:29:09:cb:46:ca:a4:37:32:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb  8 00:00:00 2023 GMT
            Not After : Feb 11 23:59:59 2023 GMT
        Subject: serialNumber=ec900c96f09df9ee27a88323dedeaa7e207d1fed817a83dc61520e4a188b367c, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cc:d5:ca:5f:16:6f:7c:f3:02:8d:78:9a:b4:
                    92:31:61:48:2b:c9:5a:2b:f2:52:6c:35:3f:79:42:
                    03:00:27:83:e5:b9:c0:10:ee:71:d5:24:f4:66:ac:
                    a7:40:0c:86:04:4a:82:10:2d:38:c8:83:6f:b5:d1:
                    8c:a7:da:7f:d8:58:87:ee:fc:0e:26:70:15:17:88:
                    e7:10:9d:f3:a1:71:6d:57:a4:a2:67:7f:08:8c:75:
                    56:c9:da:18:7e:12:92:c0:da:69:a5:27:6e:05:6d:
                    0c:84:e7:4f:35:ef:75:93:e6:9d:42:4f:13:ba:a0:
                    ab:31:fd:67:db:22:fa:cb:6b:d2:bd:ee:3d:37:dc:
                    e6:c2:27:40:5c:5d:39:5a:71:0a:ff:43:4c:f3:9e:
                    92:50:a8:54:2d:f4:b7:25:d4:b1:19:f4:73:ba:33:
                    55:52:b9:e8:f9:22:e6:24:41:73:90:82:dc:95:82:
                    e1:a2:dc:b5:b8:6d:15:24:06:46:e9:d1:8d:06:87:
                    c6:06:90:c6:79:f8:bd:41:70:9b:d0:60:fb:66:0d:
                    bc:ff:f0:ca:a6:a1:74:69:ff:7b:1f:f5:43:6a:7e:
                    ee:20:01:7e:91:40:be:78:98:54:fe:03:d5:bc:f3:
                    bd:3d:52:59:92:d6:bb:c7:a1:d8:ef:f4:7f:ad:75:
                    90:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:41:8F:08:9C:38:5E:6F:34:87:A4:5A:8B:C2:E7:17:BD:2E:3A:51
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9d4e203e-50fa-483a-8f13-e044df1ea750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:be:49:43:8d:87:32:e0:4e:e5:ec:10:5c:48:93:b3:10:bc:
         75:42:e1:1c:3a:46:ea:a6:c3:82:a2:5c:1e:72:0c:90:fe:52:
         8e:89:b7:6c:99:13:16:f3:c1:d6:a3:d8:40:53:d6:c7:bb:a6:
         16:d2:d4:11:79:11:67:b4:a4:21:56:c6:b4:27:97:0f:1d:90:
         1d:5b:bb:1f:f0:2a:0d:95:bc:48:0f:19:c2:7c:aa:e7:d5:cb:
         51:28:68:80:ed:da:b7:43:5c:68:5b:92:dc:14:85:c6:55:6f:
         fc:95:b8:20:63:2e:c3:9a:98:7b:09:2c:3b:b4:da:ab:ad:59:
         f6:17:a8:e1:8c:a2:2d:00:37:4f:31:e4:98:f4:55:59:6f:06:
         0a:b1:a0:26:f2:65:3b:53:87:c3:79:2e:8f:ea:24:41:61:81:
         d5:c5:4a:d0:58:b4:c7:30:6d:f2:b2:80:fe:2c:87:96:e7:df:
         d4:c5:62:49:be:b4:df:d4:da:21:88:a5:f9:54:64:a3:ef:11:
         86:2e:17:cb:ba:b2:8e:54:35:c8:9d:4e:79:16:ff:e6:40:2a:
         60:5f:c2:27:f7:4d:3a:b0:8c:cd:aa:4c:bd:7a:bb:3b:7e:bc:
         04:ba:2e:75:87:57:1a:fa:22:87:d9:6c:b5:b1:7e:65:46:06:
         87:88:3e:b5
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUFwdpv7AS0oWbr6MpCctGyqQ3Mh0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMjA4MDAwMDAwWhcNMjMwMjExMjM1OTU5
WjCBpTFJMEcGA1UEBRNAZWM5MDBjOTZmMDlkZjllZTI3YTg4MzIzZGVkZWFhN2Uy
MDdkMWZlZDgxN2E4M2RjNjE1MjBlNGExODhiMzY3YzEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJHM1cpfFm988wKNeJq0kjFhSCvJWivyUmw1P3lCAwAng+W5wBDu
cdUk9Gasp0AMhgRKghAtOMiDb7XRjKfaf9hYh+78DiZwFReI5xCd86FxbVekomd/
CIx1VsnaGH4SksDaaaUnbgVtDITnTzXvdZPmnUJPE7qgqzH9Z9si+str0r3uPTfc
5sInQFxdOVpxCv9DTPOeklCoVC30tyXUsRn0c7ozVVK56Pki5iRBc5CC3JWC4aLc
tbhtFSQGRunRjQaHxgaQxnn4vUFwm9Bg+2YNvP/wyqahdGn/ex/1Q2p+7iABfpFA
vniYVP4D1bzzvT1SWZLWu8eh2O/0f611kJsCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQOQY8InDhebzSHpFqLwucXvS46UTAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvOWQ0ZTIwM2UtNTBmYS00ODNhLThmMTMtZTA0NGRmMWVhNzUwLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBALa+SUONhzLgTuXs
EFxIk7MQvHVC4Rw6Ruqmw4KiXB5yDJD+Uo6Jt2yZExbzwdaj2EBT1se7phbS1BF5
EWe0pCFWxrQnlw8dkB1bux/wKg2VvEgPGcJ8qufVy1EoaIDt2rdDXGhbktwUhcZV
b/yVuCBjLsOamHsJLDu02qutWfYXqOGMoi0AN08x5Jj0VVlvBgqxoCbyZTtTh8N5
Lo/qJEFhgdXFStBYtMcwbfKygP4sh5bn39TFYkm+tN/U2iGIpflUZKPvEYYuF8u6
so5UNcidTnkW/+ZAKmBfwif3TTqwjM2qTL16uzt+vAS6LnWHVxr6IofZbLWxfmVG
BoeIPrU=
-----END CERTIFICATE-----