Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9f140f3b-ab9e-4de6-a164-c00d98f80d73.roa
File:                     9f140f3b-ab9e-4de6-a164-c00d98f80d73.roa (raw, json)
Hash identifier:          ZOAMVLjgZ20wSUH8RKc5NJNVCJKUxDqvofkD4dEg6oY=
Subject key identifier:   46:CE:E1:3A:8C:04:A5:7C:45:BA:36:ED:87:0A:41:20:8A:D3:83:AF
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2A2DD50A358D30C9B3FE165134C66B63C6D1C013
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9f140f3b-ab9e-4de6-a164-c00d98f80d73.roa
Signing time:             Sat 18 Feb 2023 00:00:00 +0000
ROA not before:           Sat 18 Feb 2023 00:00:00 +0000
ROA not after:            Tue 21 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:2d:d5:0a:35:8d:30:c9:b3:fe:16:51:34:c6:6b:63:c6:d1:c0:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 18 00:00:00 2023 GMT
            Not After : Feb 21 23:59:59 2023 GMT
        Subject: serialNumber=1a293583dc8b589be12b1bb20e6cd34e3789059acc0eecda20a33da8a7e60b02, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fc:4d:a2:0d:ea:89:0c:af:28:4c:f9:65:8f:
                    71:35:30:a7:b3:71:2e:ad:47:44:d9:ef:61:13:46:
                    03:7b:c0:93:01:b7:16:9c:8a:90:b9:fd:35:ad:c2:
                    23:ac:74:9d:68:48:25:18:af:0c:c0:f0:74:a4:0e:
                    0b:b7:cc:bb:be:aa:4c:18:86:d9:15:fc:92:16:ed:
                    8c:5f:a7:f7:d7:a5:11:df:61:f4:35:ce:d1:a9:d8:
                    4d:61:7b:e2:06:b6:54:a6:c5:09:c5:20:8a:78:a6:
                    b8:e1:44:9f:7a:08:6d:62:bd:71:41:1c:de:8f:d4:
                    a3:18:8b:bc:1e:94:c0:da:b2:d7:26:73:1e:a9:cd:
                    d3:e9:92:6b:5b:56:c2:83:dd:d3:23:5b:47:67:25:
                    ae:c3:0a:b8:62:b8:1e:a5:5f:f7:42:9d:63:30:af:
                    8b:b7:fa:02:4b:bd:fd:48:43:91:77:37:67:ed:b0:
                    99:d3:ea:ac:19:09:50:ea:85:bc:de:e6:05:3a:ca:
                    76:2c:93:12:6a:38:c1:e9:3d:7b:91:0c:e2:b4:6a:
                    77:41:e8:4c:0d:89:7e:24:24:f6:77:7c:da:2c:04:
                    55:8c:4d:4c:01:3e:b9:c5:50:a0:70:a5:0c:48:5b:
                    42:12:95:ba:e8:8a:94:16:85:90:50:58:6e:e0:33:
                    9d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CE:E1:3A:8C:04:A5:7C:45:BA:36:ED:87:0A:41:20:8A:D3:83:AF
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9f140f3b-ab9e-4de6-a164-c00d98f80d73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:e6:19:c6:07:76:46:ed:37:26:d1:99:aa:3d:a6:ac:74:a1:
         da:bf:24:6b:55:1a:56:f7:97:fd:f2:32:d2:00:8d:3a:c3:97:
         c9:14:f0:ec:7b:bb:86:1d:70:dc:3a:43:14:f4:9a:72:97:64:
         bd:7b:14:06:b6:29:fa:0b:e0:4e:f3:92:d4:fe:aa:5b:22:c0:
         5d:4d:fa:3a:5f:53:2f:29:32:f5:f9:c6:8b:d0:1c:f2:fc:50:
         41:bb:eb:a5:17:1c:91:b1:2b:6f:38:db:91:36:8e:9e:ac:a0:
         af:de:a5:3f:3e:f1:75:0b:8f:15:dc:a0:0d:21:6f:ed:b8:17:
         68:f6:19:44:62:07:e1:e1:93:c8:3b:dc:99:da:63:10:a9:ff:
         e9:39:de:2f:43:28:2c:c4:85:3c:37:bf:90:58:e2:08:b6:04:
         17:58:eb:fc:f3:e2:55:1a:93:5a:1d:6b:b6:fd:8a:ea:f3:9d:
         38:16:e9:ce:e5:31:19:35:04:2a:b5:99:9e:db:14:4a:57:8e:
         9c:11:d3:51:ef:e5:b3:b1:87:85:e1:02:dd:5c:0c:cf:a2:68:
         15:9b:4b:ee:f3:75:64:87:f1:e4:66:2c:c2:34:24:38:e4:0e:
         2c:82:6c:fd:bf:0b:03:df:63:ea:4f:5c:33:44:df:75:2c:48:
         54:88:89:e9
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUKi3VCjWNMMmz/hZRNMZrY8bRwBMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMjE4MDAwMDAwWhcNMjMwMjIxMjM1OTU5
WjCBpTFJMEcGA1UEBRNAMWEyOTM1ODNkYzhiNTg5YmUxMmIxYmIyMGU2Y2QzNGUz
Nzg5MDU5YWNjMGVlY2RhMjBhMzNkYThhN2U2MGIwMjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALj8TaIN6okMryhM+WWPcTUwp7NxLq1HRNnvYRNGA3vAkwG3FpyK
kLn9Na3CI6x0nWhIJRivDMDwdKQOC7fMu76qTBiG2RX8khbtjF+n99elEd9h9DXO
0anYTWF74ga2VKbFCcUginimuOFEn3oIbWK9cUEc3o/UoxiLvB6UwNqy1yZzHqnN
0+mSa1tWwoPd0yNbR2clrsMKuGK4HqVf90KdYzCvi7f6Aku9/UhDkXc3Z+2wmdPq
rBkJUOqFvN7mBTrKdiyTEmo4wek9e5EM4rRqd0HoTA2JfiQk9nd82iwEVYxNTAE+
ucVQoHClDEhbQhKVuuiKlBaFkFBYbuAznSsCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRGzuE6jASlfEW6Nu2HCkEgitODrzAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvOWYxNDBmM2ItYWI5ZS00ZGU2LWExNjQtYzAwZDk4ZjgwZDczLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIbmGcYHdkbtNybR
mao9pqx0odq/JGtVGlb3l/3yMtIAjTrDl8kU8Ox7u4YdcNw6QxT0mnKXZL17FAa2
KfoL4E7zktT+qlsiwF1N+jpfUy8pMvX5xovQHPL8UEG766UXHJGxK28425E2jp6s
oK/epT8+8XULjxXcoA0hb+24F2j2GURiB+Hhk8g73JnaYxCp/+k53i9DKCzEhTw3
v5BY4gi2BBdY6/zz4lUak1oda7b9iurznTgW6c7lMRk1BCq1mZ7bFEpXjpwR01Hv
5bOxh4XhAt1cDM+iaBWbS+7zdWSH8eRmLMI0JDjkDiyCbP2/CwPfY+pPXDNE33Us
SFSIiek=
-----END CERTIFICATE-----