Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e8ab041a-0f3d-4714-be76-48ec29bc28a7.roa
File:                     e8ab041a-0f3d-4714-be76-48ec29bc28a7.roa (raw, json)
Hash identifier:          ocw8fBocRYPUtvUVIJ08Yw9n1JcR67KslagT5QG7GoA=
Subject key identifier:   BA:84:4C:E7:0C:17:7F:63:72:D2:B9:A3:5B:8A:7F:01:A6:1F:23:D3
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1AF8B060CC033F6425E22E0A4F83ACE1DF04A4DB
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e8ab041a-0f3d-4714-be76-48ec29bc28a7.roa
Signing time:             Thu 01 Jun 2023 00:00:00 +0000
ROA not before:           Thu 01 Jun 2023 00:00:00 +0000
ROA not after:            Sun 04 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f8:b0:60:cc:03:3f:64:25:e2:2e:0a:4f:83:ac:e1:df:04:a4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun  1 00:00:00 2023 GMT
            Not After : Jun  4 23:59:59 2023 GMT
        Subject: serialNumber=1662b8342ecc2b36a551653aaaf8baae1b3287634661979db1f9d87b3c80d75b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:82:9b:e0:a3:d4:eb:8c:3d:34:b8:90:7c:db:
                    1a:ae:f7:59:6a:26:5b:0b:ef:99:35:f1:eb:6f:a1:
                    bd:44:b5:69:7c:33:43:97:c5:8e:ef:83:4d:00:0d:
                    9b:aa:f1:5b:65:41:91:00:ed:f7:40:37:d5:81:04:
                    74:6d:e4:81:85:8d:1a:49:cb:62:d9:a6:45:a9:39:
                    74:d1:18:53:c1:cc:e1:c6:64:05:aa:82:d7:b7:0d:
                    db:5e:ba:6b:65:d1:dc:2c:dc:db:23:ec:15:4c:94:
                    c8:df:25:b2:64:ad:8a:34:88:24:f4:79:d1:d4:b5:
                    a7:01:8e:76:91:b9:78:8c:a0:f1:26:fd:96:d8:dd:
                    52:89:a8:d9:c5:4b:7a:e2:b1:91:1d:45:d4:60:74:
                    d9:cb:3c:9b:c9:92:68:28:93:d9:70:cd:86:0d:33:
                    05:a7:5e:f8:4a:e3:70:4f:c9:96:2a:fb:64:7d:ee:
                    a0:97:01:0a:d5:ca:05:de:fe:5c:06:d3:ad:fc:72:
                    ea:57:02:18:0d:7b:d4:e9:56:45:b1:eb:35:31:1d:
                    11:11:f0:bb:2a:8d:4c:d8:ac:8e:e9:21:7e:25:ad:
                    f9:4f:b4:71:94:bb:2f:7f:4e:b8:c5:55:8c:1a:1d:
                    67:6c:23:ae:48:c4:eb:da:4c:ea:70:11:a3:1a:02:
                    ba:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:84:4C:E7:0C:17:7F:63:72:D2:B9:A3:5B:8A:7F:01:A6:1F:23:D3
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e8ab041a-0f3d-4714-be76-48ec29bc28a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:4c:13:32:cf:15:03:75:36:5e:bd:95:5a:68:b1:65:04:a0:
         c6:ce:3e:da:a4:c1:56:3c:70:27:ad:b8:0e:fe:9a:38:9c:57:
         07:5c:ea:5e:97:3e:e2:4e:5d:b6:5c:f9:1d:57:c7:7a:b0:3c:
         a1:62:e3:7e:7d:8f:60:4d:51:fc:d5:04:76:38:9b:55:1a:53:
         c9:de:93:ab:96:b4:d5:47:ed:fb:17:6d:fb:5a:87:3a:86:83:
         e5:e3:ef:df:05:0f:de:1d:0f:32:8f:fd:b1:94:b6:37:10:18:
         ac:80:17:c0:8d:33:f3:19:6d:4c:3f:b8:fe:0c:d2:b5:a6:68:
         c0:ae:01:40:f5:65:96:8f:49:16:12:0b:34:9d:8a:cc:30:76:
         f3:a3:15:f9:e4:d7:14:7d:89:b9:29:e6:b7:e8:92:e1:34:e5:
         a9:18:4e:b3:f9:8b:09:48:a6:f3:31:2f:f2:f6:2d:a3:cd:a1:
         1c:38:2f:0f:9b:3a:3e:91:ca:68:f5:cc:e0:13:65:0d:04:bf:
         3e:7f:f8:51:19:fc:4c:09:58:82:75:78:de:46:13:27:e8:20:
         a8:0b:b1:f0:6b:56:5e:06:53:b6:a0:4f:6e:fa:1c:f1:44:4c:
         4b:84:e2:34:b0:05:7c:0d:f4:1a:24:c7:09:4e:7a:bc:4f:7f:
         43:aa:11:43
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUGviwYMwDP2Ql4i4KT4Os4d8EpNswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNjAxMDAwMDAwWhcNMjMwNjA0MjM1OTU5
WjCBpTFJMEcGA1UEBRNAMTY2MmI4MzQyZWNjMmIzNmE1NTE2NTNhYWFmOGJhYWUx
YjMyODc2MzQ2NjE5NzlkYjFmOWQ4N2IzYzgwZDc1YjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJmCm+Cj1OuMPTS4kHzbGq73WWomWwvvmTXx62+hvUS1aXwzQ5fF
ju+DTQANm6rxW2VBkQDt90A31YEEdG3kgYWNGknLYtmmRak5dNEYU8HM4cZkBaqC
17cN2166a2XR3Czc2yPsFUyUyN8lsmStijSIJPR50dS1pwGOdpG5eIyg8Sb9ltjd
Uomo2cVLeuKxkR1F1GB02cs8m8mSaCiT2XDNhg0zBade+ErjcE/Jlir7ZH3uoJcB
CtXKBd7+XAbTrfxy6lcCGA171OlWRbHrNTEdERHwuyqNTNisjukhfiWt+U+0cZS7
L39OuMVVjBodZ2wjrkjE69pM6nARoxoCuk8CAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBS6hEznDBd/Y3LSuaNbin8Bph8j0zAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZThhYjA0MWEtMGYzZC00NzE0LWJlNzYtNDhlYzI5YmMyOGE3LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGtMEzLPFQN1Nl69
lVposWUEoMbOPtqkwVY8cCetuA7+mjicVwdc6l6XPuJOXbZc+R1Xx3qwPKFi4359
j2BNUfzVBHY4m1UaU8nek6uWtNVH7fsXbftahzqGg+Xj798FD94dDzKP/bGUtjcQ
GKyAF8CNM/MZbUw/uP4M0rWmaMCuAUD1ZZaPSRYSCzSdiswwdvOjFfnk1xR9ibkp
5rfokuE05akYTrP5iwlIpvMxL/L2LaPNoRw4Lw+bOj6Rymj1zOATZQ0Evz5/+FEZ
/EwJWIJ1eN5GEyfoIKgLsfBrVl4GU7agT276HPFETEuE4jSwBXwN9BokxwlOerxP
f0OqEUM=
-----END CERTIFICATE-----