Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f2eb1133-c21a-47d6-b16a-aec4de23e188.roa
File:                     f2eb1133-c21a-47d6-b16a-aec4de23e188.roa (raw, json)
Hash identifier:          mdm8s75wjeIsqYT7o4OEOv9Uu498uTg/T5xC13RXC40=
Subject key identifier:   45:EB:F0:05:77:08:4C:37:3E:0F:E5:CF:BF:5B:61:A1:E6:30:E1:2C
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4ED12414FAFE4B314CC94F818652512B8FAE8718
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f2eb1133-c21a-47d6-b16a-aec4de23e188.roa
Signing time:             Mon 20 Feb 2023 00:00:00 +0000
ROA not before:           Mon 20 Feb 2023 00:00:00 +0000
ROA not after:            Thu 23 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d1:24:14:fa:fe:4b:31:4c:c9:4f:81:86:52:51:2b:8f:ae:87:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 20 00:00:00 2023 GMT
            Not After : Feb 23 23:59:59 2023 GMT
        Subject: serialNumber=f9ea11dbbb40412e6d7a6c902c4602bf0e6a7509a7afc3bd1f783331ae0921e1, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:93:a8:5b:65:13:e8:ce:ff:15:17:12:1c:70:
                    39:84:6e:5d:39:fd:87:9f:f3:f2:26:53:13:fe:d8:
                    90:b9:e5:11:b7:39:e8:bf:0c:75:84:d9:8e:30:e9:
                    57:f2:35:51:18:67:66:a8:f5:3b:b9:85:d7:e6:bb:
                    1b:a8:b5:12:38:c0:af:b0:45:96:e6:80:26:8c:25:
                    24:2e:e0:4c:5f:d2:4e:f2:68:3d:03:bd:4c:b8:5f:
                    72:fc:a3:e9:5b:34:35:87:c2:99:d1:8c:13:d8:68:
                    62:32:ac:2b:49:b9:7b:eb:12:c4:d1:9f:e9:9d:e9:
                    b3:d1:20:81:9f:bb:0b:55:5e:16:50:75:b9:96:d7:
                    bb:57:41:16:3a:a8:77:82:62:ee:33:02:85:73:64:
                    cd:93:c2:5a:9c:eb:2c:bb:1b:71:67:b5:56:5e:9e:
                    76:28:51:aa:41:76:05:c7:40:ad:45:69:80:87:6a:
                    70:21:35:cb:49:45:3c:a1:33:3d:2b:89:a0:77:7a:
                    98:89:67:79:63:ae:17:56:bd:39:17:04:b6:e6:07:
                    71:af:34:da:5a:4f:b1:c3:1f:42:74:4f:74:a0:e6:
                    aa:d3:e8:f9:7a:7d:29:ea:25:20:34:ac:70:47:3f:
                    03:8c:1d:37:02:00:2a:69:d2:ef:69:ae:fb:da:09:
                    75:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EB:F0:05:77:08:4C:37:3E:0F:E5:CF:BF:5B:61:A1:E6:30:E1:2C
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f2eb1133-c21a-47d6-b16a-aec4de23e188.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:b3:62:93:3b:69:09:85:0e:3b:bc:ff:ed:d6:c4:7f:f2:8a:
         e1:8b:4f:44:ae:e7:35:96:86:1c:15:07:13:01:ca:2a:bc:2f:
         3a:3e:2c:67:d3:81:50:e6:c1:65:ac:20:dc:50:71:6f:7f:90:
         6f:75:99:48:3e:e0:58:6d:58:08:46:d0:41:30:1c:18:e4:fc:
         f6:5a:14:e8:f2:2f:c6:3e:05:23:92:59:3f:02:09:aa:12:e6:
         07:ae:52:d6:89:e5:8a:17:96:3a:16:7e:e2:5a:6b:cd:e4:bc:
         84:49:81:7c:84:d6:01:06:50:02:06:71:3c:e1:6f:ad:b3:37:
         56:fa:c2:5f:de:3d:29:54:5d:72:e4:37:c1:df:c0:5b:cd:95:
         a3:2f:85:d7:5b:56:a5:f3:74:03:4b:e9:02:95:73:34:87:52:
         17:6e:3d:46:e2:dd:88:0a:79:9a:37:dc:03:4b:28:ea:93:65:
         13:48:9e:50:96:03:94:27:d0:06:e8:1c:d4:0b:7c:2f:c5:c9:
         15:41:87:f2:b0:8e:7f:cd:ab:32:ff:f8:2e:fe:24:3e:0a:eb:
         b4:28:94:65:63:ec:bc:32:01:dd:0e:9e:7c:66:50:60:5c:43:
         01:f0:c5:43:75:3b:06:93:dc:db:c4:b2:7e:7c:bf:9b:42:37:
         58:9b:82:c2
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUTtEkFPr+SzFMyU+BhlJRK4+uhxgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMjIwMDAwMDAwWhcNMjMwMjIzMjM1OTU5
WjCBpTFJMEcGA1UEBRNAZjllYTExZGJiYjQwNDEyZTZkN2E2YzkwMmM0NjAyYmYw
ZTZhNzUwOWE3YWZjM2JkMWY3ODMzMzFhZTA5MjFlMTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANCTqFtlE+jO/xUXEhxwOYRuXTn9h5/z8iZTE/7YkLnlEbc56L8M
dYTZjjDpV/I1URhnZqj1O7mF1+a7G6i1EjjAr7BFluaAJowlJC7gTF/STvJoPQO9
TLhfcvyj6Vs0NYfCmdGME9hoYjKsK0m5e+sSxNGf6Z3ps9EggZ+7C1VeFlB1uZbX
u1dBFjqod4Ji7jMChXNkzZPCWpzrLLsbcWe1Vl6edihRqkF2BcdArUVpgIdqcCE1
y0lFPKEzPSuJoHd6mIlneWOuF1a9ORcEtuYHca802lpPscMfQnRPdKDmqtPo+Xp9
KeolIDSscEc/A4wdNwIAKmnS72mu+9oJdcECAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRF6/AFdwhMNz4P5c+/W2Gh5jDhLDAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZjJlYjExMzMtYzIxYS00N2Q2LWIxNmEtYWVjNGRlMjNlMTg4LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBALqzYpM7aQmFDju8
/+3WxH/yiuGLT0Su5zWWhhwVBxMByiq8Lzo+LGfTgVDmwWWsINxQcW9/kG91mUg+
4FhtWAhG0EEwHBjk/PZaFOjyL8Y+BSOSWT8CCaoS5geuUtaJ5YoXljoWfuJaa83k
vIRJgXyE1gEGUAIGcTzhb62zN1b6wl/ePSlUXXLkN8HfwFvNlaMvhddbVqXzdANL
6QKVczSHUhduPUbi3YgKeZo33ANLKOqTZRNInlCWA5Qn0AboHNQLfC/FyRVBh/Kw
jn/NqzL/+C7+JD4K67QolGVj7LwyAd0OnnxmUGBcQwHwxUN1OwaT3NvEsn58v5tC
N1ibgsI=
-----END CERTIFICATE-----