Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f72896ae-20c7-4541-85f0-7cc2b96c986e.roa
File:                     f72896ae-20c7-4541-85f0-7cc2b96c986e.roa (raw, json)
Hash identifier:          lrfnTEu4dOQJaLCjcr84ppRP2vbXRmAKfX1rnFjYcdo=
Subject key identifier:   1C:94:D4:0A:67:99:7F:0A:B2:B1:B7:5D:F8:27:FC:60:A5:85:6A:4B
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       17EFC4B96E4FC7964472E555D7718DBB25F7C7D8
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f72896ae-20c7-4541-85f0-7cc2b96c986e.roa
Signing time:             Sun 30 Apr 2023 00:00:00 +0000
ROA not before:           Sun 30 Apr 2023 00:00:00 +0000
ROA not after:            Wed 03 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ef:c4:b9:6e:4f:c7:96:44:72:e5:55:d7:71:8d:bb:25:f7:c7:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 30 00:00:00 2023 GMT
            Not After : May  3 23:59:59 2023 GMT
        Subject: serialNumber=465b28fa83731156002402102099a4e76d5e988a9023240f2b77cfb20f80d0c9, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:82:50:4f:0f:46:f7:c1:d5:37:50:a8:2f:52:
                    b0:49:62:b5:f1:eb:2c:a4:01:c8:f5:87:f0:0a:5e:
                    9d:1e:3f:3d:38:fb:32:7a:29:5f:97:a0:e9:a1:71:
                    e3:c5:57:e6:db:21:e7:62:03:1b:d2:ff:8c:42:c2:
                    74:fa:61:7b:81:01:4b:f6:a8:a8:84:99:86:e1:76:
                    3f:d3:77:db:f5:58:78:01:00:aa:fc:c3:bb:48:74:
                    31:e4:e8:f2:a4:9e:3a:ee:1a:e4:3c:70:39:31:87:
                    fc:24:4d:ba:02:31:94:7f:05:e1:75:b5:4e:76:4e:
                    d8:73:5c:75:70:b7:28:1c:fe:6b:c9:e7:69:bf:a6:
                    a2:5a:5b:d0:a9:01:d4:f1:5a:f0:83:2e:a7:ab:5b:
                    b0:b1:41:86:fe:f8:e9:c0:a2:60:4a:2c:70:d4:de:
                    a7:40:2a:89:f5:cc:9e:96:ff:54:d8:09:e8:27:6e:
                    0a:9b:07:26:93:f5:b2:c0:62:9c:0f:f2:65:d6:c8:
                    53:fc:65:c5:3e:42:c1:68:79:0d:d2:e0:96:96:20:
                    ee:40:c0:9b:d9:b5:77:42:4c:32:0b:54:b5:18:fc:
                    2a:d1:df:0f:b5:fc:74:4b:90:df:e4:1b:53:e3:78:
                    7d:0d:fe:f6:76:d4:c7:80:f4:2f:b2:c3:ea:e0:0a:
                    96:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:94:D4:0A:67:99:7F:0A:B2:B1:B7:5D:F8:27:FC:60:A5:85:6A:4B
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f72896ae-20c7-4541-85f0-7cc2b96c986e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:1a:c1:7f:92:05:9c:fb:7b:f2:d0:2a:8f:b9:ef:92:16:87:
         8f:d9:71:2e:7a:eb:93:e4:71:1b:e1:09:34:0d:4a:03:b1:1f:
         f2:62:f7:24:d8:f0:92:fa:bf:10:d8:e3:ef:07:76:43:e7:fd:
         1d:b9:81:74:3f:9c:5a:4c:c8:3f:7c:0a:65:fd:53:14:3e:cf:
         25:36:8e:ac:63:78:d3:fc:11:45:2c:8c:05:ce:ac:98:ec:4c:
         55:04:81:1a:8f:c7:97:bf:2c:92:0c:14:33:34:8f:71:f6:1b:
         34:11:b7:42:b3:27:96:af:a4:81:1c:db:90:97:4b:82:3d:99:
         38:1c:0f:90:d8:a4:ff:f8:a5:8b:9b:5b:34:41:fb:dd:1b:1a:
         72:30:9e:d5:1d:b4:b0:dd:61:3e:58:ef:a5:e9:13:29:4d:cf:
         08:38:e6:22:48:41:85:7f:c4:58:ce:34:c5:ab:72:2a:85:7b:
         5b:1d:c0:aa:b6:2b:21:9d:5e:af:ab:cc:5e:34:68:27:43:aa:
         d3:a8:85:73:83:e7:66:51:ef:65:7f:da:ec:f9:38:f6:60:1f:
         7a:98:fd:c8:55:60:bc:3c:f3:52:bb:88:10:12:50:77:fd:e3:
         42:91:17:04:39:9a:f7:39:9d:c3:0f:04:b2:d8:04:73:57:14:
         0b:1c:5e:26
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUF+/EuW5Px5ZEcuVV13GNuyX3x9gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNDMwMDAwMDAwWhcNMjMwNTAzMjM1OTU5
WjCBpTFJMEcGA1UEBRNANDY1YjI4ZmE4MzczMTE1NjAwMjQwMjEwMjA5OWE0ZTc2
ZDVlOTg4YTkwMjMyNDBmMmI3N2NmYjIwZjgwZDBjOTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMCCUE8PRvfB1TdQqC9SsElitfHrLKQByPWH8ApenR4/PTj7Mnop
X5eg6aFx48VX5tsh52IDG9L/jELCdPphe4EBS/aoqISZhuF2P9N32/VYeAEAqvzD
u0h0MeTo8qSeOu4a5DxwOTGH/CRNugIxlH8F4XW1TnZO2HNcdXC3KBz+a8nnab+m
olpb0KkB1PFa8IMup6tbsLFBhv746cCiYEoscNTep0AqifXMnpb/VNgJ6CduCpsH
JpP1ssBinA/yZdbIU/xlxT5CwWh5DdLglpYg7kDAm9m1d0JMMgtUtRj8KtHfD7X8
dEuQ3+QbU+N4fQ3+9nbUx4D0L7LD6uAKlmECAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQclNQKZ5l/CrKxt134J/xgpYVqSzAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZjcyODk2YWUtMjBjNy00NTQxLTg1ZjAtN2NjMmI5NmM5ODZlLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHUawX+SBZz7e/LQ
Ko+575IWh4/ZcS5665PkcRvhCTQNSgOxH/Ji9yTY8JL6vxDY4+8HdkPn/R25gXQ/
nFpMyD98CmX9UxQ+zyU2jqxjeNP8EUUsjAXOrJjsTFUEgRqPx5e/LJIMFDM0j3H2
GzQRt0KzJ5avpIEc25CXS4I9mTgcD5DYpP/4pYubWzRB+90bGnIwntUdtLDdYT5Y
76XpEylNzwg45iJIQYV/xFjONMWrciqFe1sdwKq2KyGdXq+rzF40aCdDqtOohXOD
52ZR72V/2uz5OPZgH3qY/chVYLw881K7iBASUHf940KRFwQ5mvc5ncMPBLLYBHNX
FAscXiY=
-----END CERTIFICATE-----