Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d7fc1614-2ff4-4983-bef1-36020db1fd09.roa
File:                     d7fc1614-2ff4-4983-bef1-36020db1fd09.roa (raw, json)
Hash identifier:          dKUQzA/acDAA86HCm2mVvD4vNE/b94Pi87oa7Ezg6QI=
Subject key identifier:   FD:DD:29:E0:1E:6E:AD:09:79:8F:4F:39:50:2D:95:94:CC:CE:06:0E
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       750C2D448B6EAEBB4AC7C6EA904BCB6DDECDF1F2
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d7fc1614-2ff4-4983-bef1-36020db1fd09.roa
Signing time:             Thu 20 Apr 2023 00:00:00 +0000
ROA not before:           Thu 20 Apr 2023 00:00:00 +0000
ROA not after:            Sun 23 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0c:2d:44:8b:6e:ae:bb:4a:c7:c6:ea:90:4b:cb:6d:de:cd:f1:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 20 00:00:00 2023 GMT
            Not After : Apr 23 23:59:59 2023 GMT
        Subject: serialNumber=ab2978215dfad2a7a4c7db5842af6547460679fcab02b9a12e25f297810389c7, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5b:13:c6:6e:f9:18:31:1a:b1:2d:95:de:2c:
                    9a:6b:c3:ed:ef:65:b6:1f:50:66:fe:e6:1d:b4:59:
                    9a:63:9b:d4:2e:d2:6b:23:6e:56:b7:f0:25:08:21:
                    1c:21:80:f2:be:72:06:ac:7d:fa:84:32:3f:c1:95:
                    4d:a5:b9:2a:9e:55:95:a7:89:6f:4d:42:12:5e:2d:
                    9c:c9:71:a5:bb:df:13:f7:0e:32:44:df:25:93:a3:
                    ad:ac:29:f1:c8:7d:b8:d6:ce:9f:ba:8b:80:e2:ad:
                    35:ae:16:b0:84:09:1d:ea:9b:27:b9:9e:c4:5f:35:
                    5d:c2:8f:58:09:83:6b:b9:b3:d2:7d:19:82:a5:27:
                    9c:ff:7b:1d:12:b7:bc:80:b2:0a:92:27:2a:98:d4:
                    85:e6:22:af:ba:f6:24:ce:bc:5e:6e:44:0f:0c:2e:
                    2d:01:b4:fe:b6:aa:03:85:c8:8e:dc:17:05:47:4f:
                    97:b7:87:1e:b1:3d:76:da:d1:d7:d0:b0:8e:4f:6c:
                    a9:a9:c5:9c:6d:93:77:bf:5b:70:d6:c0:fc:c6:39:
                    1d:c9:cc:e5:99:31:1f:8b:70:69:08:66:7d:a6:39:
                    ea:a5:c3:27:0a:99:81:a7:24:26:68:17:66:97:bb:
                    ab:fc:8b:cf:00:ca:8f:fb:e5:1e:cd:06:6a:4a:20:
                    e2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DD:29:E0:1E:6E:AD:09:79:8F:4F:39:50:2D:95:94:CC:CE:06:0E
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d7fc1614-2ff4-4983-bef1-36020db1fd09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:c4:4b:fb:3f:f6:75:1c:76:f2:e1:ce:8d:e0:00:74:c3:4a:
         61:8f:7e:cb:37:ff:8f:a6:d7:0e:50:06:f9:ac:31:c1:0e:70:
         55:7e:9f:a0:f4:80:30:98:ed:9d:d4:ec:65:e1:6c:f9:f1:a2:
         df:80:97:28:7d:01:3a:2e:04:58:5f:4c:37:39:2c:86:0f:9f:
         a9:45:3f:23:a1:cb:9e:18:39:3a:fe:69:1b:aa:43:83:7c:f6:
         f8:ae:7a:f4:c5:f5:03:64:1f:68:36:bb:2f:32:7c:d9:d7:ff:
         c6:40:23:8c:5e:9e:4e:21:ec:de:22:e0:88:aa:68:3a:4d:41:
         eb:0e:31:59:de:b5:d9:86:42:9c:67:8d:3c:b1:6b:6d:3b:60:
         e0:e5:07:79:41:f3:03:d9:f9:b7:3e:48:e9:bc:7d:34:69:2a:
         b0:82:a5:a5:b6:4e:44:d9:ce:ad:dd:3e:6c:be:d4:cc:52:92:
         7d:61:2a:59:3c:55:98:61:9c:18:ff:ad:df:11:3c:98:58:1d:
         09:fe:f3:86:b7:20:14:13:07:7e:32:31:50:47:0e:87:fa:d4:
         fd:29:9b:c6:65:42:21:0e:5d:1e:1a:97:95:da:84:25:45:7e:
         31:1a:43:89:a5:e7:bb:fb:e7:8a:0c:19:27:e1:ea:42:b5:14:
         55:35:33:df
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUdQwtRIturrtKx8bqkEvLbd7N8fIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNDIwMDAwMDAwWhcNMjMwNDIzMjM1OTU5
WjCBpTFJMEcGA1UEBRNAYWIyOTc4MjE1ZGZhZDJhN2E0YzdkYjU4NDJhZjY1NDc0
NjA2NzlmY2FiMDJiOWExMmUyNWYyOTc4MTAzODljNzEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJdbE8Zu+RgxGrEtld4smmvD7e9lth9QZv7mHbRZmmOb1C7SayNu
VrfwJQghHCGA8r5yBqx9+oQyP8GVTaW5Kp5VlaeJb01CEl4tnMlxpbvfE/cOMkTf
JZOjrawp8ch9uNbOn7qLgOKtNa4WsIQJHeqbJ7mexF81XcKPWAmDa7mz0n0ZgqUn
nP97HRK3vICyCpInKpjUheYir7r2JM68Xm5EDwwuLQG0/raqA4XIjtwXBUdPl7eH
HrE9dtrR19Cwjk9sqanFnG2Td79bcNbA/MY5HcnM5ZkxH4twaQhmfaY56qXDJwqZ
gackJmgXZpe7q/yLzwDKj/vlHs0Gakog4l8CAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBT93SngHm6tCXmPTzlQLZWUzM4GDjAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZDdmYzE2MTQtMmZmNC00OTgzLWJlZjEtMzYwMjBkYjFmZDA5LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAG3ES/s/9nUcdvLh
zo3gAHTDSmGPfss3/4+m1w5QBvmsMcEOcFV+n6D0gDCY7Z3U7GXhbPnxot+Alyh9
ATouBFhfTDc5LIYPn6lFPyOhy54YOTr+aRuqQ4N89viuevTF9QNkH2g2uy8yfNnX
/8ZAI4xenk4h7N4i4IiqaDpNQesOMVnetdmGQpxnjTyxa207YODlB3lB8wPZ+bc+
SOm8fTRpKrCCpaW2TkTZzq3dPmy+1MxSkn1hKlk8VZhhnBj/rd8RPJhYHQn+84a3
IBQTB34yMVBHDof61P0pm8ZlQiEOXR4al5XahCVFfjEaQ4ml57v754oMGSfh6kK1
FFU1M98=
-----END CERTIFICATE-----