Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/af8003c3-e40c-4234-953e-cb78199df559.roa
File:                     af8003c3-e40c-4234-953e-cb78199df559.roa (raw, json)
Hash identifier:          W+yhXJRQg+nNT7xkCsC76GwkUrpXIcVxe1YTZcliNpE=
Subject key identifier:   5C:8B:B7:C4:E9:C2:CB:AA:E0:01:AF:4A:FE:E7:22:9D:D6:8F:3C:3F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       228277E50625C8DC2B410C78F104E58D5A46008B
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/af8003c3-e40c-4234-953e-cb78199df559.roa
Signing time:             Wed 07 Jun 2023 00:00:00 +0000
ROA not before:           Wed 07 Jun 2023 00:00:00 +0000
ROA not after:            Sat 10 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:82:77:e5:06:25:c8:dc:2b:41:0c:78:f1:04:e5:8d:5a:46:00:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun  7 00:00:00 2023 GMT
            Not After : Jun 10 23:59:59 2023 GMT
        Subject: serialNumber=36de534adbade9c40a3a7171a1c167dbad0d27ea72a681b668f771bf54103ea2, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ca:a9:9d:a6:e3:2c:2a:63:35:e2:3a:23:13:
                    55:c6:bb:11:8a:9b:b6:af:8b:dd:54:d4:c6:2e:7d:
                    90:58:09:e7:ee:d5:54:74:48:77:8d:55:ae:2d:1d:
                    c8:43:39:25:cd:ba:21:d0:f1:18:d8:2c:23:c9:c3:
                    10:34:81:84:9b:50:c0:ce:26:e3:84:55:c5:d0:fb:
                    66:66:e5:3d:ef:56:9d:53:ac:16:73:2c:3b:0b:30:
                    46:08:a3:00:25:a7:2f:1b:3d:80:dc:7e:f0:69:11:
                    e5:eb:f2:a0:67:6f:f5:d2:7c:83:6b:0e:e0:b0:62:
                    82:d2:46:3a:76:86:27:90:9f:0e:3f:24:ea:5e:bf:
                    1f:ea:a6:48:78:3d:44:45:25:70:ac:7e:d6:8a:bf:
                    ef:02:8e:30:81:d4:59:2f:69:ef:89:bf:8c:4c:1b:
                    2b:37:9e:ac:c6:04:7d:a3:3b:c8:49:75:ff:0f:b7:
                    b4:8f:d6:9f:fb:4b:60:9f:53:c9:32:64:4a:96:67:
                    db:14:e1:21:44:a7:c4:80:39:87:59:74:4f:f8:cc:
                    46:f7:1b:79:fa:39:52:78:bb:2e:14:4f:b0:f6:d5:
                    9e:0b:d5:cd:a2:5d:bf:3a:d7:57:57:01:5a:1c:85:
                    52:0c:7c:e1:2e:6c:e2:dc:ae:7f:bb:34:db:16:98:
                    0a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8B:B7:C4:E9:C2:CB:AA:E0:01:AF:4A:FE:E7:22:9D:D6:8F:3C:3F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/af8003c3-e40c-4234-953e-cb78199df559.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:04:15:32:ab:04:52:de:cc:c8:00:23:ce:af:87:91:02:cf:
         73:69:aa:c5:b7:81:48:f6:08:bd:7f:c7:75:82:3a:db:8d:3f:
         59:c4:c3:21:93:3e:3a:66:41:d5:b8:f3:df:76:33:3a:b1:88:
         7f:46:ad:c5:7c:5c:59:45:59:39:34:36:ec:7c:c4:cd:14:58:
         4e:a5:bb:2b:1c:d8:38:e8:67:6d:ae:a6:96:19:a1:27:a4:35:
         1f:44:c1:13:b0:ea:e4:6d:49:c9:ae:05:75:1b:a2:22:b0:bc:
         11:9e:6d:99:0a:4a:51:9b:7e:4a:71:1b:a6:5d:f2:cf:7b:3f:
         cc:e1:fe:21:f5:2d:ea:d3:a3:f3:06:2e:16:ef:3e:cc:02:2a:
         a9:75:c5:8a:4e:da:d7:b2:2b:e5:5c:73:76:da:7f:e9:0c:36:
         2f:2f:c0:d4:18:e6:25:38:1b:30:48:0b:d6:7f:d6:f9:e1:fd:
         e3:3f:6e:80:f5:a1:9a:ca:27:64:07:a6:93:6e:cc:2e:d1:0e:
         25:85:a8:79:e1:34:0d:85:e7:ec:fe:48:4b:2e:15:74:2f:7d:
         43:77:fe:d1:82:25:22:d5:10:bd:5c:ef:ee:dc:f2:e5:39:84:
         27:de:02:9e:6b:63:98:38:f1:02:02:59:f5:5d:61:a0:9e:09:
         44:5e:8c:43
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUIoJ35QYlyNwrQQx48QTljVpGAIswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNjA3MDAwMDAwWhcNMjMwNjEwMjM1OTU5
WjCBpTFJMEcGA1UEBRNAMzZkZTUzNGFkYmFkZTljNDBhM2E3MTcxYTFjMTY3ZGJh
ZDBkMjdlYTcyYTY4MWI2NjhmNzcxYmY1NDEwM2VhMjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANjKqZ2m4ywqYzXiOiMTVca7EYqbtq+L3VTUxi59kFgJ5+7VVHRI
d41Vri0dyEM5Jc26IdDxGNgsI8nDEDSBhJtQwM4m44RVxdD7ZmblPe9WnVOsFnMs
OwswRgijACWnLxs9gNx+8GkR5evyoGdv9dJ8g2sO4LBigtJGOnaGJ5CfDj8k6l6/
H+qmSHg9REUlcKx+1oq/7wKOMIHUWS9p74m/jEwbKzeerMYEfaM7yEl1/w+3tI/W
n/tLYJ9TyTJkSpZn2xThIUSnxIA5h1l0T/jMRvcbefo5Uni7LhRPsPbVngvVzaJd
vzrXV1cBWhyFUgx84S5s4tyuf7s02xaYCtcCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRci7fE6cLLquABr0r+5yKd1o88PzAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvYWY4MDAzYzMtZTQwYy00MjM0LTk1M2UtY2I3ODE5OWRmNTU5LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKoEFTKrBFLezMgA
I86vh5ECz3NpqsW3gUj2CL1/x3WCOtuNP1nEwyGTPjpmQdW48992MzqxiH9GrcV8
XFlFWTk0Nux8xM0UWE6luysc2DjoZ22uppYZoSekNR9EwROw6uRtScmuBXUboiKw
vBGebZkKSlGbfkpxG6Zd8s97P8zh/iH1LerTo/MGLhbvPswCKql1xYpO2teyK+Vc
c3baf+kMNi8vwNQY5iU4GzBIC9Z/1vnh/eM/boD1oZrKJ2QHppNuzC7RDiWFqHnh
NA2F5+z+SEsuFXQvfUN3/tGCJSLVEL1c7+7c8uU5hCfeAp5rY5g48QICWfVdYaCe
CURejEM=
-----END CERTIFICATE-----