Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b12e47a7-7dbf-4827-b6da-c9804ae4eb48.roa
File:                     b12e47a7-7dbf-4827-b6da-c9804ae4eb48.roa (raw, json)
Hash identifier:          LerE/bZ5VfqMOYJjfpyixBMpnEpOTbgu3OazGPHBuk4=
Subject key identifier:   71:E4:D3:83:95:E1:E4:2A:3D:E1:D0:46:2F:5A:DF:9A:AC:73:E2:27
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7DD9485C6370F072CE2BEE11F13B776E33499DE0
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b12e47a7-7dbf-4827-b6da-c9804ae4eb48.roa
Signing time:             Sun 16 Apr 2023 00:00:00 +0000
ROA not before:           Sun 16 Apr 2023 00:00:00 +0000
ROA not after:            Wed 19 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d9:48:5c:63:70:f0:72:ce:2b:ee:11:f1:3b:77:6e:33:49:9d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 16 00:00:00 2023 GMT
            Not After : Apr 19 23:59:59 2023 GMT
        Subject: serialNumber=e0c635674c2def3f5886349b0149d253814418c0bf41976190e11001d4354d31, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3c:02:a0:1f:31:5b:f8:7e:fb:30:f6:28:d6:
                    b9:3b:01:e0:b4:2d:b9:7b:72:be:ab:a8:76:58:8f:
                    f6:5a:26:4b:8e:24:86:fd:06:88:3f:30:cc:bc:a1:
                    9a:fb:0e:e1:76:b1:5d:7b:d1:e7:65:f4:cc:e1:f8:
                    cb:8c:64:d2:cf:bc:5a:df:a5:ec:b1:88:84:04:10:
                    73:e3:00:86:ea:10:a2:90:5b:0b:35:20:50:8b:83:
                    ec:ad:45:61:56:be:d5:7b:dc:2f:81:72:11:f6:43:
                    e5:4d:0f:1b:59:3a:fa:60:26:50:92:02:41:0a:dc:
                    12:ee:d4:2e:bc:66:9b:c2:e7:f9:19:7f:56:db:53:
                    50:ef:af:4d:41:f5:23:9f:0b:bf:3f:f0:8e:98:f3:
                    e7:cf:d8:68:d4:af:95:dc:da:e9:26:c2:24:f5:06:
                    71:01:1a:0f:2b:90:5b:1d:bc:0a:b4:c6:7a:9e:c4:
                    a6:4d:2a:0f:f7:25:db:1a:d6:83:bb:53:04:cf:0d:
                    dc:ef:34:1c:3a:36:a2:ab:9f:bf:aa:e3:b5:83:0e:
                    56:63:6d:95:6a:5a:60:d4:9a:d1:2b:73:8d:96:58:
                    5e:b1:ce:39:b5:2e:9f:4a:17:5b:7a:1f:24:60:0c:
                    8a:e5:07:ab:aa:2a:5a:4e:00:34:a5:cc:54:85:4b:
                    4b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E4:D3:83:95:E1:E4:2A:3D:E1:D0:46:2F:5A:DF:9A:AC:73:E2:27
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b12e47a7-7dbf-4827-b6da-c9804ae4eb48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:50:c5:1f:8d:ce:37:8a:31:49:93:61:0c:bb:51:97:76:e7:
         0c:9d:62:fe:54:4f:43:45:15:04:00:25:11:d8:0b:67:71:fc:
         12:36:29:6e:34:87:5d:7a:cf:86:46:b4:84:d9:ca:71:b3:69:
         84:99:c3:1f:a8:76:10:87:45:93:46:a7:dc:d4:eb:da:39:11:
         cc:c5:0d:1b:8a:a4:1e:11:f3:8d:76:ca:6f:d2:6e:bf:0b:cf:
         fe:55:1a:74:f4:dd:9b:52:6a:ca:cc:d9:f3:e9:76:53:1b:4b:
         3e:b6:42:e2:3f:6a:27:5c:21:78:dd:f5:78:d6:31:15:52:b6:
         73:0e:80:27:7d:11:9e:5d:36:34:f6:81:f1:e9:f8:39:f6:46:
         35:10:04:bf:cb:d3:2e:ec:60:74:fa:1e:67:25:f3:f6:6a:af:
         a8:e6:c7:04:79:37:b2:61:60:51:33:94:8e:15:32:9a:6f:94:
         d5:a4:93:0b:d4:10:f3:88:ed:7e:ca:da:cb:1e:2b:b8:51:26:
         b8:89:17:12:b0:a0:0f:34:0f:c9:a1:94:9c:18:02:7a:03:13:
         21:6a:bd:92:8c:2b:3f:09:91:d8:6a:d2:c1:aa:17:65:ff:a6:
         cb:29:fe:46:2a:61:2e:9b:d7:12:d9:ee:15:67:bb:3f:d5:fc:
         c5:aa:79:b3
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUfdlIXGNw8HLOK+4R8Tt3bjNJneAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNDE2MDAwMDAwWhcNMjMwNDE5MjM1OTU5
WjCBpTFJMEcGA1UEBRNAZTBjNjM1Njc0YzJkZWYzZjU4ODYzNDliMDE0OWQyNTM4
MTQ0MThjMGJmNDE5NzYxOTBlMTEwMDFkNDM1NGQzMTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALs8AqAfMVv4fvsw9ijWuTsB4LQtuXtyvquodliP9lomS44khv0G
iD8wzLyhmvsO4XaxXXvR52X0zOH4y4xk0s+8Wt+l7LGIhAQQc+MAhuoQopBbCzUg
UIuD7K1FYVa+1XvcL4FyEfZD5U0PG1k6+mAmUJICQQrcEu7ULrxmm8Ln+Rl/VttT
UO+vTUH1I58Lvz/wjpjz58/YaNSvldza6SbCJPUGcQEaDyuQWx28CrTGep7Epk0q
D/cl2xrWg7tTBM8N3O80HDo2oqufv6rjtYMOVmNtlWpaYNSa0StzjZZYXrHOObUu
n0oXW3ofJGAMiuUHq6oqWk4ANKXMVIVLSy8CAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRx5NODleHkKj3h0EYvWt+arHPiJzAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvYjEyZTQ3YTctN2RiZi00ODI3LWI2ZGEtYzk4MDRhZTRlYjQ4LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBALJQxR+NzjeKMUmT
YQy7UZd25wydYv5UT0NFFQQAJRHYC2dx/BI2KW40h116z4ZGtITZynGzaYSZwx+o
dhCHRZNGp9zU69o5EczFDRuKpB4R8412ym/Sbr8Lz/5VGnT03ZtSasrM2fPpdlMb
Sz62QuI/aidcIXjd9XjWMRVStnMOgCd9EZ5dNjT2gfHp+Dn2RjUQBL/L0y7sYHT6
Hmcl8/Zqr6jmxwR5N7JhYFEzlI4VMppvlNWkkwvUEPOI7X7K2sseK7hRJriJFxKw
oA80D8mhlJwYAnoDEyFqvZKMKz8Jkdhq0sGqF2X/pssp/kYqYS6b1xLZ7hVnuz/V
/MWqebM=
-----END CERTIFICATE-----