Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d137bf65-09d7-47e6-a86e-295ffdec0f49.roa
File:                     d137bf65-09d7-47e6-a86e-295ffdec0f49.roa (raw, json)
Hash identifier:          nCEY7woLC8ZAkN4/rE+xYnh5vS6L5Q59P68TSIgD8o0=
Subject key identifier:   91:5E:63:AF:4C:86:6A:0B:4A:EB:25:18:FF:02:D9:01:CC:51:4D:F7
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       369CACABADBCDCF7925C42615CADBD88574E8BD2
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d137bf65-09d7-47e6-a86e-295ffdec0f49.roa
Signing time:             Tue 28 Feb 2023 00:00:00 +0000
ROA not before:           Tue 28 Feb 2023 00:00:00 +0000
ROA not after:            Fri 03 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:9c:ac:ab:ad:bc:dc:f7:92:5c:42:61:5c:ad:bd:88:57:4e:8b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 28 00:00:00 2023 GMT
            Not After : Mar  3 23:59:59 2023 GMT
        Subject: serialNumber=1216b01caf324b462a8daa0e7303ad45e33b5a59b10bc1f2b294cc948f4f4e96, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f6:d1:b4:ff:20:d0:77:e1:d6:b2:fb:1e:2e:
                    f6:a4:ab:39:f0:ce:97:4e:a3:20:12:79:fd:c9:4f:
                    8c:cb:1a:78:b4:ec:46:4c:16:37:bf:2e:72:40:ae:
                    eb:b7:a8:9b:27:7c:da:06:57:36:ec:34:ac:e8:aa:
                    78:bb:f4:6d:2f:21:dc:84:13:61:fb:84:58:0d:0d:
                    6e:8f:2f:b2:c5:5d:ae:c0:e0:80:d0:6f:fb:f3:a0:
                    00:41:54:a5:5b:fa:e2:9e:ac:8c:e3:8b:8d:7a:d2:
                    f3:76:6f:27:c6:8e:1a:8d:e6:48:44:1a:ec:1d:8b:
                    fe:1a:6d:1c:34:31:a7:4a:bc:1b:6f:50:6f:c1:fc:
                    e4:43:c6:01:fb:f9:87:38:e9:f0:fa:ae:e2:86:63:
                    5b:e9:4e:9a:36:fa:3c:87:55:11:82:27:cb:23:a8:
                    49:38:70:c8:10:05:76:4e:e1:9b:f3:33:5c:25:c8:
                    4d:7b:54:2e:83:da:b8:62:b9:73:c2:4f:57:e0:a0:
                    fe:89:85:ac:9a:23:c6:45:a9:51:b6:db:2c:3e:de:
                    a2:12:b8:e9:2d:71:ee:f6:b5:9a:08:09:27:60:e5:
                    a7:82:5a:cb:15:f2:95:62:ee:f7:cd:90:f7:55:8e:
                    2b:c1:70:b9:60:e2:d3:03:24:c0:0a:ad:b1:8c:68:
                    bf:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5E:63:AF:4C:86:6A:0B:4A:EB:25:18:FF:02:D9:01:CC:51:4D:F7
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d137bf65-09d7-47e6-a86e-295ffdec0f49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:60:7a:2f:cf:6b:4d:5e:20:50:8a:2f:02:b1:8e:34:0f:b7:
         0b:c9:fa:77:4b:9f:18:5e:d2:b1:58:c0:2e:15:b8:df:cf:9b:
         76:88:f7:0c:46:25:07:84:3a:d6:35:a6:1d:d8:4e:3a:64:8a:
         1d:9e:fd:01:70:f1:a9:08:e7:54:a6:86:ff:cd:02:a2:7c:1b:
         15:26:92:8e:3b:28:99:93:3d:de:7f:0f:9e:31:8f:fa:84:33:
         70:44:dc:70:4a:9d:cb:9e:62:f1:9a:74:13:98:11:13:96:00:
         5d:ae:69:c2:23:99:96:cf:d9:0a:33:21:26:1a:5f:0b:3e:91:
         be:24:b9:57:c9:6f:34:68:dd:66:53:e8:55:f8:19:5b:d9:34:
         e5:85:25:70:7c:a8:af:a4:d0:e6:2b:ef:a6:5f:08:ac:68:7c:
         48:41:fa:17:b0:2f:e7:14:ff:ee:47:e6:5b:40:35:ff:b6:33:
         63:4e:78:f1:81:08:6a:44:5d:d4:ba:66:b1:da:f1:53:84:ab:
         d6:64:df:94:36:43:8b:96:a5:e4:36:82:d7:6e:2f:14:8c:03:
         f0:01:1c:9b:7e:b6:78:e8:d8:1e:d0:dc:31:a4:af:8c:c3:d5:
         34:89:82:f7:e5:1a:c6:44:8c:8c:c6:cb:28:a9:7d:a5:33:49:
         c5:59:ef:fb
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUNpysq6283PeSXEJhXK29iFdOi9IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMjI4MDAwMDAwWhcNMjMwMzAzMjM1OTU5
WjCBpTFJMEcGA1UEBRNAMTIxNmIwMWNhZjMyNGI0NjJhOGRhYTBlNzMwM2FkNDVl
MzNiNWE1OWIxMGJjMWYyYjI5NGNjOTQ4ZjRmNGU5NjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ720bT/INB34day+x4u9qSrOfDOl06jIBJ5/clPjMsaeLTsRkwW
N78uckCu67eomyd82gZXNuw0rOiqeLv0bS8h3IQTYfuEWA0Nbo8vssVdrsDggNBv
+/OgAEFUpVv64p6sjOOLjXrS83ZvJ8aOGo3mSEQa7B2L/hptHDQxp0q8G29Qb8H8
5EPGAfv5hzjp8Pqu4oZjW+lOmjb6PIdVEYInyyOoSThwyBAFdk7hm/MzXCXITXtU
LoPauGK5c8JPV+Cg/omFrJojxkWpUbbbLD7eohK46S1x7va1mggJJ2Dlp4JayxXy
lWLu982Q91WOK8FwuWDi0wMkwAqtsYxov3cCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBSRXmOvTIZqC0rrJRj/AtkBzFFN9zAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZDEzN2JmNjUtMDlkNy00N2U2LWE4NmUtMjk1ZmZkZWMwZjQ5LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAMpgei/Pa01eIFCK
LwKxjjQPtwvJ+ndLnxhe0rFYwC4VuN/Pm3aI9wxGJQeEOtY1ph3YTjpkih2e/QFw
8akI51Smhv/NAqJ8GxUmko47KJmTPd5/D54xj/qEM3BE3HBKncueYvGadBOYEROW
AF2uacIjmZbP2QozISYaXws+kb4kuVfJbzRo3WZT6FX4GVvZNOWFJXB8qK+k0OYr
76ZfCKxofEhB+hewL+cU/+5H5ltANf+2M2NOePGBCGpEXdS6ZrHa8VOEq9Zk35Q2
Q4uWpeQ2gtduLxSMA/ABHJt+tnjo2B7Q3DGkr4zD1TSJgvflGsZEjIzGyyipfaUz
ScVZ7/s=
-----END CERTIFICATE-----