Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f2699c1a-969d-45b3-837b-a24b1e09fd79.roa
File:                     f2699c1a-969d-45b3-837b-a24b1e09fd79.roa (raw, json)
Hash identifier:          iaeuhcYJzBAxdAHA/bk/zav4rfZz1pkkiuHthqO+al4=
Subject key identifier:   21:9F:DE:A9:C9:E8:FF:39:1D:54:47:B3:0E:99:7B:37:7E:5C:D3:09
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       638128680E699EFAE54DF04373700FF1608DE332
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f2699c1a-969d-45b3-837b-a24b1e09fd79.roa
Signing time:             Sat 14 Jan 2023 00:00:00 +0000
ROA not before:           Sat 14 Jan 2023 00:00:00 +0000
ROA not after:            Tue 17 Jan 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:81:28:68:0e:69:9e:fa:e5:4d:f0:43:73:70:0f:f1:60:8d:e3:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jan 14 00:00:00 2023 GMT
            Not After : Jan 17 23:59:59 2023 GMT
        Subject: serialNumber=04caa8e163d98022ea2e289972f6a97e92c076107f456b9f49ac7153a73d72e4, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f2:e5:a3:60:06:6f:d1:3b:24:c4:9d:02:a6:
                    2a:79:dd:47:43:e0:c6:7d:c9:a3:fe:e7:ee:ad:e3:
                    90:7d:c8:86:0f:2b:08:00:79:cc:a8:0b:0c:1d:68:
                    04:4e:f5:b2:55:16:ae:38:29:42:27:a9:89:ae:18:
                    b4:23:dc:03:bd:d0:32:cb:01:f9:3c:e7:9b:33:6a:
                    5b:39:51:af:d3:af:2f:b5:1b:3b:8b:ab:a5:d0:6a:
                    64:72:2c:50:d5:aa:41:88:e4:18:0b:50:9d:3b:f9:
                    59:31:52:ee:16:f6:da:a3:96:41:90:81:bb:c9:7e:
                    d6:8d:5c:71:f6:d6:16:1d:c8:f3:ed:4c:01:8f:a2:
                    b2:af:8e:fb:81:b1:49:91:71:9d:7e:14:ca:c1:68:
                    16:93:4c:f5:75:77:5f:c7:b3:75:55:92:1c:51:b3:
                    2c:2b:5b:89:75:a8:e5:7c:6b:e0:5d:38:b3:95:c3:
                    ca:88:41:b3:f3:6c:9f:3d:f1:10:65:25:f0:9b:d1:
                    06:c2:28:01:74:36:58:66:66:d3:d5:27:30:bc:38:
                    07:75:3e:a3:bc:ea:da:16:f9:88:ed:a0:55:03:14:
                    c6:d0:ab:2b:e2:fe:30:3d:0c:f6:e8:64:99:85:18:
                    ec:54:65:25:36:3e:0a:95:75:74:35:b5:ab:40:20:
                    a3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9F:DE:A9:C9:E8:FF:39:1D:54:47:B3:0E:99:7B:37:7E:5C:D3:09
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f2699c1a-969d-45b3-837b-a24b1e09fd79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:7d:a7:9e:8a:b0:db:d9:1e:a5:2a:37:d3:f1:37:c8:ef:c3:
         8a:a3:ba:59:78:a0:f0:32:c0:84:4f:99:1f:35:09:81:0f:e6:
         3c:f4:cb:c6:2d:4b:db:49:b6:75:43:39:74:82:39:97:77:3a:
         02:0e:a1:50:bc:f4:01:c3:07:ff:1f:11:58:db:87:6c:9b:b6:
         6f:69:65:4d:68:4d:92:7a:4a:f2:93:99:5a:48:ce:a8:99:72:
         a1:41:33:0c:e3:63:cb:d2:c2:18:39:7d:32:09:54:7b:b1:98:
         a8:c0:35:0f:41:32:0f:04:e6:76:9d:44:c5:a9:a5:80:b9:d1:
         ae:c0:a0:f1:18:c3:6c:df:44:eb:a0:48:21:66:d1:82:d8:54:
         70:e4:65:d9:26:0a:bf:af:09:9b:c5:0f:c9:8f:3a:dd:b1:ca:
         df:c4:02:60:04:6a:6f:61:c5:9b:28:77:b8:80:21:03:54:79:
         a8:5c:9e:d7:15:d4:8a:cb:32:c1:af:98:73:e5:cb:1b:85:3b:
         94:e2:b6:4c:9f:fa:96:e3:8c:e2:b2:be:78:a5:52:96:fe:f3:
         a0:cb:6b:ef:76:98:03:07:5c:97:37:98:1a:92:ef:d8:01:94:
         32:e8:d1:fc:ae:f3:ef:38:c7:f4:58:a4:79:82:24:7a:fc:ab:
         c3:0d:51:53
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUY4EoaA5pnvrlTfBDc3AP8WCN4zIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMTE0MDAwMDAwWhcNMjMwMTE3MjM1OTU5
WjCBpTFJMEcGA1UEBRNAMDRjYWE4ZTE2M2Q5ODAyMmVhMmUyODk5NzJmNmE5N2U5
MmMwNzYxMDdmNDU2YjlmNDlhYzcxNTNhNzNkNzJlNDEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJHy5aNgBm/ROyTEnQKmKnndR0Pgxn3Jo/7n7q3jkH3Ihg8rCAB5
zKgLDB1oBE71slUWrjgpQiepia4YtCPcA73QMssB+TznmzNqWzlRr9OvL7UbO4ur
pdBqZHIsUNWqQYjkGAtQnTv5WTFS7hb22qOWQZCBu8l+1o1ccfbWFh3I8+1MAY+i
sq+O+4GxSZFxnX4UysFoFpNM9XV3X8ezdVWSHFGzLCtbiXWo5Xxr4F04s5XDyohB
s/Nsnz3xEGUl8JvRBsIoAXQ2WGZm09UnMLw4B3U+o7zq2hb5iO2gVQMUxtCrK+L+
MD0M9uhkmYUY7FRlJTY+CpV1dDW1q0Ago+cCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQhn96pyej/OR1UR7MOmXs3flzTCTAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZjI2OTljMWEtOTY5ZC00NWIzLTgzN2ItYTI0YjFlMDlmZDc5LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAM19p56KsNvZHqUq
N9PxN8jvw4qjull4oPAywIRPmR81CYEP5jz0y8YtS9tJtnVDOXSCOZd3OgIOoVC8
9AHDB/8fEVjbh2ybtm9pZU1oTZJ6SvKTmVpIzqiZcqFBMwzjY8vSwhg5fTIJVHux
mKjANQ9BMg8E5nadRMWppYC50a7AoPEYw2zfROugSCFm0YLYVHDkZdkmCr+vCZvF
D8mPOt2xyt/EAmAEam9hxZsod7iAIQNUeahcntcV1IrLMsGvmHPlyxuFO5Titkyf
+pbjjOKyvnilUpb+86DLa+92mAMHXJc3mBqS79gBlDLo0fyu8+84x/RYpHmCJHr8
q8MNUVM=
-----END CERTIFICATE-----