Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f1f729f5-9caf-4655-a462-67b0e68ecf0e.roa
File:                     f1f729f5-9caf-4655-a462-67b0e68ecf0e.roa (raw, json)
Hash identifier:          j7zq2U7kqHPcQR8VHKp92T6hFieCg1UzPya9oBvrN5k=
Subject key identifier:   CD:C6:1E:C5:86:E9:48:0D:EE:33:1C:08:B3:0D:28:41:E2:41:54:F2
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1ACB037732D3D6D3A15583E223CC3C59C2C83586
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f1f729f5-9caf-4655-a462-67b0e68ecf0e.roa
Signing time:             Tue 07 Mar 2023 00:00:00 +0000
ROA not before:           Tue 07 Mar 2023 00:00:00 +0000
ROA not after:            Fri 10 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:cb:03:77:32:d3:d6:d3:a1:55:83:e2:23:cc:3c:59:c2:c8:35:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Mar  7 00:00:00 2023 GMT
            Not After : Mar 10 23:59:59 2023 GMT
        Subject: serialNumber=34e6315aba7fa136dbcb5ff06a438383ec06d4cc4ef3768a23b4c16ba6af8ae6, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:23:ed:48:75:99:3a:43:95:a8:fd:46:f6:40:
                    c4:02:4a:9f:d2:4f:e7:2c:9c:ea:7f:0d:88:a0:21:
                    01:1f:a3:bf:12:25:56:3f:70:24:dd:27:da:93:48:
                    59:af:3e:a7:7f:67:0d:9d:26:5c:bc:0c:6e:a7:c2:
                    d6:ef:ae:82:a2:83:a2:01:75:cf:d5:3c:81:dd:2a:
                    67:6c:82:84:fc:1d:14:44:19:2c:47:7c:f3:45:f4:
                    27:5e:aa:30:99:3c:e1:3a:a8:18:4b:53:00:5b:35:
                    e9:6c:91:17:f7:17:2a:82:87:37:7d:e8:4e:6e:88:
                    10:58:f4:13:46:ca:0f:87:71:75:8e:ce:59:5c:fc:
                    fe:54:b5:85:f0:9c:06:fb:77:24:52:11:8c:db:0c:
                    a7:17:2e:75:f4:36:55:59:7f:22:ca:29:4f:02:f2:
                    e7:7c:bf:6e:5f:5d:3a:03:3d:15:fc:fc:01:e7:eb:
                    f8:5f:fb:29:5d:1f:fe:01:3e:24:1a:9f:27:6c:17:
                    38:d8:8a:24:81:ff:47:e4:9f:35:fd:14:c3:14:f5:
                    ae:a3:a6:d8:70:d3:40:46:6a:7e:8d:fe:63:5c:fb:
                    99:c7:37:f7:a7:84:ad:9e:63:72:1e:82:c9:e6:8a:
                    e7:6e:b6:ef:d1:65:1a:5a:d7:30:01:91:a6:bd:ee:
                    ea:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C6:1E:C5:86:E9:48:0D:EE:33:1C:08:B3:0D:28:41:E2:41:54:F2
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f1f729f5-9caf-4655-a462-67b0e68ecf0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:ab:8a:e4:0b:26:43:3c:8d:cc:8e:ee:a9:3b:f7:29:b4:05:
         74:5b:87:9b:94:47:09:f9:dc:6b:73:30:01:53:d4:1b:19:67:
         68:eb:28:d8:40:a3:66:87:d7:f7:e9:8d:54:cf:d8:2c:8e:c8:
         7c:ba:25:db:ab:ff:39:cf:eb:02:5e:1a:c1:5e:4c:cc:8a:9a:
         38:c1:6b:f1:95:55:ba:35:18:49:c3:45:9b:c7:6b:12:d1:0f:
         22:1a:a3:1a:33:71:af:32:1c:78:cb:25:32:51:a8:b6:0c:74:
         84:2a:0a:6e:59:c0:62:4a:c0:3c:89:e9:d8:31:63:b5:c3:6f:
         c6:5b:55:24:50:22:03:4d:f0:57:66:5d:77:13:8d:ea:2a:19:
         b8:01:10:d8:61:c5:ec:c7:19:32:55:62:31:c4:a7:66:ff:d8:
         77:69:26:6c:09:f3:6f:8b:6e:1a:8b:27:7d:41:2a:0f:cf:b3:
         8e:f6:7d:81:60:ae:a4:c9:53:99:4d:4a:66:5a:7b:0e:13:b3:
         db:2b:c4:91:b5:04:35:68:5d:f7:51:6e:c5:40:6b:0d:68:6d:
         f6:8f:5f:fc:27:33:b3:2c:14:cb:52:ef:b2:e1:c6:2d:90:ef:
         8f:a5:fc:ea:c0:a2:8d:0e:5f:0d:81:2d:8a:08:80:35:3c:e0:
         07:96:ff:64
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUGssDdzLT1tOhVYPiI8w8WcLINYYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMzA3MDAwMDAwWhcNMjMwMzEwMjM1OTU5
WjCBpTFJMEcGA1UEBRNAMzRlNjMxNWFiYTdmYTEzNmRiY2I1ZmYwNmE0MzgzODNl
YzA2ZDRjYzRlZjM3NjhhMjNiNGMxNmJhNmFmOGFlNjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANoj7Uh1mTpDlaj9RvZAxAJKn9JP5yyc6n8NiKAhAR+jvxIlVj9w
JN0n2pNIWa8+p39nDZ0mXLwMbqfC1u+ugqKDogF1z9U8gd0qZ2yChPwdFEQZLEd8
80X0J16qMJk84TqoGEtTAFs16WyRF/cXKoKHN33oTm6IEFj0E0bKD4dxdY7OWVz8
/lS1hfCcBvt3JFIRjNsMpxcudfQ2VVl/IsopTwLy53y/bl9dOgM9Ffz8Aefr+F/7
KV0f/gE+JBqfJ2wXONiKJIH/R+SfNf0UwxT1rqOm2HDTQEZqfo3+Y1z7mcc396eE
rZ5jch6CyeaK526279FlGlrXMAGRpr3u6lMCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTNxh7FhulIDe4zHAizDShB4kFU8jAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZjFmNzI5ZjUtOWNhZi00NjU1LWE0NjItNjdiMGU2OGVjZjBlLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKGriuQLJkM8jcyO
7qk79ym0BXRbh5uURwn53GtzMAFT1BsZZ2jrKNhAo2aH1/fpjVTP2CyOyHy6Jdur
/znP6wJeGsFeTMyKmjjBa/GVVbo1GEnDRZvHaxLRDyIaoxozca8yHHjLJTJRqLYM
dIQqCm5ZwGJKwDyJ6dgxY7XDb8ZbVSRQIgNN8FdmXXcTjeoqGbgBENhhxezHGTJV
YjHEp2b/2HdpJmwJ82+LbhqLJ31BKg/Ps472fYFgrqTJU5lNSmZaew4Ts9srxJG1
BDVoXfdRbsVAaw1obfaPX/wnM7MsFMtS77Lhxi2Q74+l/OrAoo0OXw2BLYoIgDU8
4AeW/2Q=
-----END CERTIFICATE-----