Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b6054cc9-e14e-4b7d-ad98-05763c773183.roa
File:                     b6054cc9-e14e-4b7d-ad98-05763c773183.roa (raw, json)
Hash identifier:          Xb5vdNzkefO/umcRu/LOU5w5KMo1y2TfPrkp8e/LmW8=
Subject key identifier:   24:0E:88:CF:74:8E:38:0A:91:C9:F3:BD:10:D4:0B:47:CA:0F:3C:05
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       66F56CFD33C8254F35932463D1CD9771A1E97D2D
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b6054cc9-e14e-4b7d-ad98-05763c773183.roa
Signing time:             Thu 13 Apr 2023 00:00:00 +0000
ROA not before:           Thu 13 Apr 2023 00:00:00 +0000
ROA not after:            Sun 16 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f5:6c:fd:33:c8:25:4f:35:93:24:63:d1:cd:97:71:a1:e9:7d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 13 00:00:00 2023 GMT
            Not After : Apr 16 23:59:59 2023 GMT
        Subject: serialNumber=1aaffbec2567e841ac50cf9b48626e687203a601f19749275432fb2a5e43236f, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2b:bf:6d:92:9f:fe:c8:b7:a3:70:58:76:cc:
                    13:6e:67:03:ac:85:93:eb:21:87:8d:fd:64:f2:25:
                    e4:9a:60:28:71:0f:a1:a7:eb:df:cc:6c:2c:39:50:
                    b6:2a:ef:62:80:d7:ca:e1:c1:6c:e0:8e:fe:b1:0c:
                    47:f2:5c:93:81:7c:fa:b1:e2:30:8d:6e:43:7e:1e:
                    fa:a4:c3:8f:6f:1b:b9:5d:6d:7c:00:2b:48:be:89:
                    0e:37:30:dc:11:b9:fe:29:7c:39:7e:34:96:e8:13:
                    65:1f:bf:0a:89:50:ed:f9:28:d2:38:b5:f8:a1:fa:
                    1b:5b:3a:b3:80:9b:69:a7:0d:9c:65:b9:2d:cf:ee:
                    3a:4f:54:7a:6b:7c:e7:95:90:8f:be:c4:d3:3f:24:
                    3e:cd:61:eb:6c:df:88:6c:a0:39:8d:2e:76:0a:5a:
                    b4:bb:5b:3d:0c:3c:60:c2:74:31:ce:7a:5b:3d:47:
                    0f:e4:ae:03:dd:a2:18:da:b9:87:5e:ad:fa:c2:4c:
                    94:bb:43:bc:d0:eb:6a:11:f3:7e:7b:5f:5b:cd:4d:
                    58:dd:b2:a8:34:4d:a4:22:65:8b:7d:46:c6:ac:d8:
                    4b:9d:ce:5e:6d:0c:2f:81:a4:77:10:e8:79:94:e0:
                    88:59:a7:df:36:2c:af:e0:65:55:a7:7f:4a:51:eb:
                    91:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0E:88:CF:74:8E:38:0A:91:C9:F3:BD:10:D4:0B:47:CA:0F:3C:05
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b6054cc9-e14e-4b7d-ad98-05763c773183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:32:74:c9:e7:fa:02:c0:27:f3:ff:bd:51:5e:38:d4:2c:36:
         d7:84:59:2c:eb:4d:36:10:25:d1:2d:93:2a:18:20:4b:46:ba:
         ef:e9:5f:00:55:f9:d4:98:91:ac:be:7b:61:01:7f:51:33:85:
         e7:e6:02:90:ee:9c:84:97:73:e4:9d:d7:75:95:c7:c3:c5:d5:
         27:c6:a8:d3:6d:27:af:aa:6a:94:89:cb:34:0e:a4:43:da:8a:
         96:c8:93:d9:e3:49:cc:42:49:88:f2:8b:5d:5a:97:1e:69:92:
         b2:13:9b:f4:85:59:b4:7e:26:62:bd:53:4b:ae:44:6e:9f:c6:
         2e:c6:96:0c:9b:dd:96:cc:27:02:d8:a1:20:2d:5c:9c:71:6c:
         3e:13:c8:0d:25:e5:e3:3d:f3:c7:b7:f4:01:d1:81:c7:44:82:
         d1:1e:c2:b9:80:a8:58:56:e8:a9:04:ed:8c:4a:ed:08:ac:df:
         f8:0a:45:11:b2:dc:df:bf:6e:2e:8d:13:9d:67:bd:26:0b:c6:
         6c:ed:7a:84:68:37:b0:a6:36:a5:b2:20:6c:90:e2:d3:03:70:
         c8:e5:88:71:dc:73:67:62:f5:a0:73:42:05:fb:da:4a:ca:d7:
         85:c4:22:45:f4:03:18:35:13:a5:6f:26:66:f8:32:d2:df:35:
         5f:58:77:96
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUZvVs/TPIJU81kyRj0c2XcaHpfS0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNDEzMDAwMDAwWhcNMjMwNDE2MjM1OTU5
WjCBpTFJMEcGA1UEBRNAMWFhZmZiZWMyNTY3ZTg0MWFjNTBjZjliNDg2MjZlNjg3
MjAzYTYwMWYxOTc0OTI3NTQzMmZiMmE1ZTQzMjM2ZjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJorv22Sn/7It6NwWHbME25nA6yFk+shh439ZPIl5JpgKHEPoafr
38xsLDlQtirvYoDXyuHBbOCO/rEMR/Jck4F8+rHiMI1uQ34e+qTDj28buV1tfAAr
SL6JDjcw3BG5/il8OX40lugTZR+/ColQ7fko0ji1+KH6G1s6s4CbaacNnGW5Lc/u
Ok9Uemt855WQj77E0z8kPs1h62zfiGygOY0udgpatLtbPQw8YMJ0Mc56Wz1HD+Su
A92iGNq5h16t+sJMlLtDvNDrahHzfntfW81NWN2yqDRNpCJli31GxqzYS53OXm0M
L4GkdxDoeZTgiFmn3zYsr+BlVad/SlHrkUkCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQkDojPdI44CpHJ870Q1AtHyg88BTAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvYjYwNTRjYzktZTE0ZS00YjdkLWFkOTgtMDU3NjNjNzczMTgzLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGgydMnn+gLAJ/P/
vVFeONQsNteEWSzrTTYQJdEtkyoYIEtGuu/pXwBV+dSYkay+e2EBf1EzhefmApDu
nISXc+Sd13WVx8PF1SfGqNNtJ6+qapSJyzQOpEPaipbIk9njScxCSYjyi11alx5p
krITm/SFWbR+JmK9U0uuRG6fxi7Glgyb3ZbMJwLYoSAtXJxxbD4TyA0l5eM988e3
9AHRgcdEgtEewrmAqFhW6KkE7YxK7Qis3/gKRRGy3N+/bi6NE51nvSYLxmzteoRo
N7CmNqWyIGyQ4tMDcMjliHHcc2di9aBzQgX72krK14XEIkX0Axg1E6VvJmb4MtLf
NV9Yd5Y=
-----END CERTIFICATE-----