Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b6ea714f-32e2-4ac4-beeb-14a77a308d41.roa
File:                     b6ea714f-32e2-4ac4-beeb-14a77a308d41.roa (raw, json)
Hash identifier:          R5SVPK0soWcOWklSCuj2vtoKrSDAxMC9zUvO3KC3M7E=
Subject key identifier:   4F:C9:9D:0B:45:DD:67:4F:48:05:D5:3F:88:67:7A:B8:65:2C:DB:3E
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       44467538FFB3BA32E8E061BF1D1E2F1429C89B18
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b6ea714f-32e2-4ac4-beeb-14a77a308d41.roa
Signing time:             Thu 06 Apr 2023 00:00:00 +0000
ROA not before:           Thu 06 Apr 2023 00:00:00 +0000
ROA not after:            Sun 09 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:46:75:38:ff:b3:ba:32:e8:e0:61:bf:1d:1e:2f:14:29:c8:9b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr  6 00:00:00 2023 GMT
            Not After : Apr  9 23:59:59 2023 GMT
        Subject: serialNumber=00c7ad9dd96a42cc2f6c33149a6a7c9170cc1205dfcedfbca6b15d57d5ea8acc, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c6:db:b4:bd:d4:31:37:54:b8:f2:e8:19:75:
                    cf:58:3e:9d:2f:2b:af:f0:24:a6:ba:fa:1f:d5:0d:
                    c8:53:58:82:64:1b:13:5b:37:9b:e0:65:5c:51:80:
                    02:b6:92:15:b0:25:65:46:ab:c4:de:e6:92:8c:8a:
                    e7:e2:17:e6:76:5f:f2:ff:da:78:2d:87:41:ae:86:
                    91:89:da:29:ba:f6:e3:31:df:2a:40:a7:59:03:10:
                    a2:3f:0a:81:c7:5b:8d:67:ab:b5:6a:42:98:00:64:
                    ec:df:ae:de:76:04:cf:b1:f9:c7:cf:20:b0:c6:e2:
                    62:5c:b3:d7:3d:32:57:42:40:72:0b:1a:b1:58:e7:
                    79:c5:67:f7:e4:8e:a9:bc:a0:5b:47:8b:e2:69:51:
                    14:8c:72:26:65:5b:b3:75:52:11:04:ea:13:dd:5a:
                    a5:6b:e3:57:5a:72:66:f1:c9:da:25:6a:a8:97:d3:
                    6b:3b:dc:bd:a5:fd:8a:39:e9:be:9f:bd:88:ab:94:
                    e7:3f:77:9a:c6:ea:ec:91:ad:e3:27:25:1d:be:6c:
                    75:6f:80:22:b5:20:6c:dd:df:cd:bf:50:78:af:15:
                    94:7f:44:11:3b:4f:8e:c1:4b:b5:f7:af:a8:26:ec:
                    48:58:69:80:6f:c3:b2:eb:51:ab:8b:c6:9b:1a:7d:
                    66:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C9:9D:0B:45:DD:67:4F:48:05:D5:3F:88:67:7A:B8:65:2C:DB:3E
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b6ea714f-32e2-4ac4-beeb-14a77a308d41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:b8:86:22:cd:ae:3c:bb:0a:85:9f:4b:b1:46:7d:9c:8e:90:
         cd:d4:5a:4b:48:6d:75:b8:27:2f:ba:04:81:fa:e9:b6:45:17:
         2a:ed:ec:ff:6a:96:ac:19:1a:79:36:7f:ce:20:1d:d3:0d:4d:
         89:84:60:38:9c:a0:11:3d:83:d6:28:c6:1d:d0:59:0b:32:74:
         1b:8c:10:a9:7b:a8:2a:1e:e3:d9:fa:24:bc:81:00:45:a3:36:
         69:88:6e:a9:ed:4d:8f:d6:c4:fa:19:bc:be:fd:06:b0:62:69:
         d8:40:c4:b1:1a:ed:f8:04:d4:ee:4e:5e:66:f6:82:5e:40:c8:
         ca:b2:ef:89:d6:48:bb:07:0e:3c:05:36:a4:76:4a:14:33:f7:
         ab:a5:23:89:fe:8b:9d:4a:4d:63:6f:a2:1d:23:7b:34:7c:92:
         a4:ad:f4:fa:43:fd:4d:ac:93:85:f4:0a:eb:18:ca:8d:9e:9a:
         56:7a:4f:45:b7:36:cf:5a:9d:05:d3:b7:5b:2b:ab:31:b4:47:
         05:f2:a1:88:c0:de:62:1d:41:5f:db:1f:fd:ff:be:c6:96:3a:
         f8:e3:62:31:d0:f9:89:d4:5e:63:87:d3:12:61:dc:8f:0b:54:
         cb:64:6a:cf:61:06:15:89:96:2d:92:b6:5f:f7:30:68:01:0f:
         07:db:9c:55
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUREZ1OP+zujLo4GG/HR4vFCnImxgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNDA2MDAwMDAwWhcNMjMwNDA5MjM1OTU5
WjCBpTFJMEcGA1UEBRNAMDBjN2FkOWRkOTZhNDJjYzJmNmMzMzE0OWE2YTdjOTE3
MGNjMTIwNWRmY2VkZmJjYTZiMTVkNTdkNWVhOGFjYzEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK3G27S91DE3VLjy6Bl1z1g+nS8rr/Akprr6H9UNyFNYgmQbE1s3
m+BlXFGAAraSFbAlZUarxN7mkoyK5+IX5nZf8v/aeC2HQa6GkYnaKbr24zHfKkCn
WQMQoj8KgcdbjWertWpCmABk7N+u3nYEz7H5x88gsMbiYlyz1z0yV0JAcgsasVjn
ecVn9+SOqbygW0eL4mlRFIxyJmVbs3VSEQTqE91apWvjV1pyZvHJ2iVqqJfTazvc
vaX9ijnpvp+9iKuU5z93msbq7JGt4yclHb5sdW+AIrUgbN3fzb9QeK8VlH9EETtP
jsFLtfevqCbsSFhpgG/DsutRq4vGmxp9ZmcCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRPyZ0LRd1nT0gF1T+IZ3q4ZSzbPjAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvYjZlYTcxNGYtMzJlMi00YWM0LWJlZWItMTRhNzdhMzA4ZDQxLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAMK4hiLNrjy7CoWf
S7FGfZyOkM3UWktIbXW4Jy+6BIH66bZFFyrt7P9qlqwZGnk2f84gHdMNTYmEYDic
oBE9g9Yoxh3QWQsydBuMEKl7qCoe49n6JLyBAEWjNmmIbqntTY/WxPoZvL79BrBi
adhAxLEa7fgE1O5OXmb2gl5AyMqy74nWSLsHDjwFNqR2ShQz96ulI4n+i51KTWNv
oh0jezR8kqSt9PpD/U2sk4X0CusYyo2emlZ6T0W3Ns9anQXTt1srqzG0RwXyoYjA
3mIdQV/bH/3/vsaWOvjjYjHQ+YnUXmOH0xJh3I8LVMtkas9hBhWJli2Stl/3MGgB
DwfbnFU=
-----END CERTIFICATE-----