Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d5c356d0-f75c-40ad-8618-c8844b0fe684.roa
File:                     d5c356d0-f75c-40ad-8618-c8844b0fe684.roa (raw, json)
Hash identifier:          do4uOqRS2ykQjCvyiy0y05P79mylez0jWmygbtVMLPs=
Subject key identifier:   73:44:0A:38:5D:D5:F1:92:C5:63:F5:D5:D9:71:FE:2F:44:F8:B7:3E
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1EB262E69BB7594189AD3891F2B1A7D2A6062DE1
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d5c356d0-f75c-40ad-8618-c8844b0fe684.roa
Signing time:             Tue 02 May 2023 00:00:00 +0000
ROA not before:           Tue 02 May 2023 00:00:00 +0000
ROA not after:            Fri 05 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b2:62:e6:9b:b7:59:41:89:ad:38:91:f2:b1:a7:d2:a6:06:2d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May  2 00:00:00 2023 GMT
            Not After : May  5 23:59:59 2023 GMT
        Subject: serialNumber=5ed11a748a77e03810697f7a65c664661d6e9cc1d22cc05473209e26148d22bb, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c5:12:e5:17:e3:61:49:c4:10:c9:8c:41:7d:
                    6a:4b:2e:18:3d:25:2f:87:7f:11:ea:7d:a2:c9:3b:
                    b0:5a:df:63:a2:cd:f1:be:da:b6:f1:79:30:ff:8c:
                    f8:8b:b9:d5:94:95:6d:a4:33:fd:97:4a:ff:a7:c2:
                    53:a6:1b:e9:c2:94:50:7a:0e:4f:69:25:38:56:ba:
                    2e:42:b2:5d:5a:36:15:4a:1d:88:7d:b7:dd:dd:50:
                    df:52:de:5e:ac:85:7e:fd:0e:73:b4:a9:d8:fe:b3:
                    e3:e4:c2:5e:73:ae:ee:93:a1:d5:5c:e5:8d:6b:bc:
                    ab:52:e2:e8:a4:85:26:e9:7d:3b:72:ac:e3:0a:f4:
                    25:41:cf:8b:41:f0:59:31:c8:30:ca:36:aa:67:16:
                    f5:72:de:4c:e7:c8:9d:81:cb:5d:ed:a9:6c:bf:49:
                    22:91:05:41:7a:ac:26:68:2d:3c:ba:c5:e2:e5:52:
                    60:cb:af:6f:3a:fc:38:e6:d4:b5:cf:91:a0:1d:0e:
                    5d:e3:84:65:4e:1c:25:90:63:b9:67:e5:11:83:97:
                    6f:2c:5f:53:a5:cc:32:fa:fe:58:8b:6a:53:ff:4b:
                    ad:d0:0a:80:16:64:46:66:fd:c1:23:c8:40:53:fc:
                    4e:35:78:9e:3d:f8:05:ce:53:9f:31:71:ff:a0:91:
                    a3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:44:0A:38:5D:D5:F1:92:C5:63:F5:D5:D9:71:FE:2F:44:F8:B7:3E
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d5c356d0-f75c-40ad-8618-c8844b0fe684.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:f2:56:3c:31:a3:d4:5f:70:f1:dc:b4:33:5c:15:88:0b:3c:
         4f:f9:76:58:8a:56:ac:2f:be:c5:ea:b5:98:e6:76:5d:58:1b:
         ff:f8:bd:d2:f1:bf:36:c9:ac:48:50:e5:c1:10:32:09:45:f5:
         10:55:75:5e:96:20:32:8b:20:ca:17:3f:cb:fc:9d:cb:cd:af:
         55:c4:91:5d:f4:2a:ec:c4:87:d5:9a:ed:38:d0:29:6a:e7:f9:
         c7:33:eb:5d:3a:94:5e:7a:bd:53:c5:f4:bd:c7:29:8d:a9:38:
         ab:ae:bf:89:6c:50:61:6f:61:c1:95:7e:8e:51:2b:07:57:85:
         c4:88:f2:bc:2f:ab:8f:b2:39:b6:90:cd:14:f7:64:49:27:19:
         a9:27:20:eb:58:2b:01:e2:d9:be:44:1f:39:12:99:4a:af:1d:
         71:1c:f7:7a:bb:12:92:b6:e9:de:6f:db:44:07:e8:a2:2d:c7:
         05:0e:dd:44:33:bd:fb:20:b9:97:8b:c8:03:80:ff:e9:a2:54:
         4c:06:25:0e:91:ad:77:3b:52:49:b2:41:10:17:d3:b1:ae:e7:
         ca:f2:13:ae:54:e6:5d:5c:e0:5c:98:80:ec:01:2a:0d:9b:c9:
         25:9f:95:b9:92:30:cd:60:2b:13:49:6d:55:cf:2a:53:16:c6:
         f7:9d:8e:e5
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUHrJi5pu3WUGJrTiR8rGn0qYGLeEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNTAyMDAwMDAwWhcNMjMwNTA1MjM1OTU5
WjCBpTFJMEcGA1UEBRNANWVkMTFhNzQ4YTc3ZTAzODEwNjk3ZjdhNjVjNjY0NjYx
ZDZlOWNjMWQyMmNjMDU0NzMyMDllMjYxNDhkMjJiYjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN/FEuUX42FJxBDJjEF9aksuGD0lL4d/Eep9osk7sFrfY6LN8b7a
tvF5MP+M+Iu51ZSVbaQz/ZdK/6fCU6Yb6cKUUHoOT2klOFa6LkKyXVo2FUodiH23
3d1Q31LeXqyFfv0Oc7Sp2P6z4+TCXnOu7pOh1VzljWu8q1Li6KSFJul9O3Ks4wr0
JUHPi0HwWTHIMMo2qmcW9XLeTOfInYHLXe2pbL9JIpEFQXqsJmgtPLrF4uVSYMuv
bzr8OObUtc+RoB0OXeOEZU4cJZBjuWflEYOXbyxfU6XMMvr+WItqU/9LrdAKgBZk
Rmb9wSPIQFP8TjV4nj34Bc5TnzFx/6CRo3ECAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRzRAo4XdXxksVj9dXZcf4vRPi3PjAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZDVjMzU2ZDAtZjc1Yy00MGFkLTg2MTgtYzg4NDRiMGZlNjg0LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADzyVjwxo9RfcPHc
tDNcFYgLPE/5dliKVqwvvsXqtZjmdl1YG//4vdLxvzbJrEhQ5cEQMglF9RBVdV6W
IDKLIMoXP8v8ncvNr1XEkV30KuzEh9Wa7TjQKWrn+ccz6106lF56vVPF9L3HKY2p
OKuuv4lsUGFvYcGVfo5RKwdXhcSI8rwvq4+yObaQzRT3ZEknGaknIOtYKwHi2b5E
HzkSmUqvHXEc93q7EpK26d5v20QH6KItxwUO3UQzvfsguZeLyAOA/+miVEwGJQ6R
rXc7UkmyQRAX07Gu58ryE65U5l1c4FyYgOwBKg2bySWflbmSMM1gKxNJbVXPKlMW
xvedjuU=
-----END CERTIFICATE-----