Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0ac954eb-7b3b-4a19-95fb-493e99fea862.roa
File:                     0ac954eb-7b3b-4a19-95fb-493e99fea862.roa (raw, json)
Hash identifier:          MdrrtPQqXbP9b0ENJiK8cs/M4OjK8yVDAE53mx7+VK4=
Subject key identifier:   80:5E:76:29:77:4C:38:84:BE:83:41:3B:94:98:7E:9B:E2:A0:DB:FC
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1B8F3F3E866BFE2B66082F78CEB9615CEA912C80
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0ac954eb-7b3b-4a19-95fb-493e99fea862.roa
Signing time:             Fri 07 Oct 2022 00:00:00 +0000
ROA not before:           Fri 07 Oct 2022 00:00:00 +0000
ROA not after:            Mon 10 Oct 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8f:3f:3e:86:6b:fe:2b:66:08:2f:78:ce:b9:61:5c:ea:91:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct  7 00:00:00 2022 GMT
            Not After : Oct 10 23:59:59 2022 GMT
        Subject: serialNumber=f9737248c763c7f00f799f5b334f430b5259ed541732dad0813c7b1db17ff7b4, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:18:8f:a9:1d:da:33:6c:98:79:4e:f1:17:d1:
                    7e:87:e9:ea:00:54:b7:17:f9:e9:c2:11:93:86:45:
                    39:64:a0:ad:61:3a:64:66:aa:38:2b:10:f7:47:07:
                    42:94:d9:bd:fe:44:fc:10:e0:bb:c7:b6:3e:25:87:
                    10:f0:5a:05:36:47:e5:6e:ba:3c:94:6b:9d:4f:c7:
                    1d:f0:67:82:e1:84:95:75:81:74:33:5b:50:ef:0c:
                    c9:49:c8:dc:64:ed:dc:cf:91:d8:35:99:b1:4f:56:
                    d5:72:54:1f:0d:1b:28:ed:2f:40:af:00:1b:49:42:
                    c1:be:e7:66:02:06:84:cf:0f:2b:a8:5a:2e:01:6c:
                    24:4c:54:ba:6d:e2:da:ad:b8:cb:70:dd:77:c0:76:
                    32:01:44:3e:7e:f8:64:21:29:b6:6c:ac:0a:ca:3a:
                    2a:3b:56:9a:2a:ba:71:bf:2c:3a:85:2b:a8:82:72:
                    a9:ee:86:fd:db:ad:4c:ea:f3:71:78:94:6c:bd:07:
                    3e:11:73:e5:a6:66:53:c4:e4:37:2a:72:c5:ea:63:
                    db:ed:20:16:b0:9a:55:d3:52:0d:17:13:16:2d:be:
                    0a:b1:42:a9:36:c9:7a:0d:72:85:13:4d:6e:51:f2:
                    4e:9d:ca:80:a4:4b:4e:fd:c5:fd:11:85:45:2f:bd:
                    df:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5E:76:29:77:4C:38:84:BE:83:41:3B:94:98:7E:9B:E2:A0:DB:FC
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0ac954eb-7b3b-4a19-95fb-493e99fea862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:49:ba:18:09:24:66:6f:bb:66:14:93:1e:56:f1:67:8e:58:
         75:f7:05:3d:9a:ab:4c:a8:e6:b8:43:11:ff:ac:bf:f9:99:9e:
         00:e4:17:b7:fc:89:5f:61:f7:8a:81:33:f0:05:0d:b4:fd:f4:
         50:a0:9a:5a:91:53:b0:74:8a:5c:d4:f3:40:38:d7:44:ee:ff:
         be:6f:ac:2d:cd:69:61:2d:ff:f2:22:51:9f:01:98:43:65:27:
         92:36:4c:ba:0f:41:cf:7e:f0:c0:d7:54:4d:5f:24:cb:cd:fc:
         8b:5a:b0:c2:bd:84:f4:ad:1e:cd:43:75:f7:25:82:07:2e:aa:
         c5:b7:e9:eb:22:cb:ed:dc:41:63:99:1f:44:63:b1:62:82:df:
         8e:8c:a1:5f:5e:71:19:5c:32:2b:64:49:e4:99:26:a5:bb:7d:
         32:ce:de:89:93:be:b5:10:f3:26:b6:d4:ce:29:95:e7:44:a5:
         c1:82:9c:83:45:c9:c0:0a:ff:f8:ec:fb:3a:b8:da:09:c2:d9:
         09:e6:b2:20:8c:b2:9f:53:ce:2e:19:d8:97:4c:c6:c3:e1:71:
         33:de:94:7b:e5:ea:6c:66:c0:c5:af:45:cf:e2:51:75:f5:f1:
         e4:48:21:07:50:b1:68:0a:b1:7c:50:27:4f:4d:46:b8:83:23:
         55:fa:c3:d3
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUG48/PoZr/itmCC94zrlhXOqRLIAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMDA3MDAwMDAwWhcNMjIxMDEwMjM1OTU5
WjCBpTFJMEcGA1UEBRNAZjk3MzcyNDhjNzYzYzdmMDBmNzk5ZjViMzM0ZjQzMGI1
MjU5ZWQ1NDE3MzJkYWQwODEzYzdiMWRiMTdmZjdiNDEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJEYj6kd2jNsmHlO8RfRfofp6gBUtxf56cIRk4ZFOWSgrWE6ZGaq
OCsQ90cHQpTZvf5E/BDgu8e2PiWHEPBaBTZH5W66PJRrnU/HHfBnguGElXWBdDNb
UO8MyUnI3GTt3M+R2DWZsU9W1XJUHw0bKO0vQK8AG0lCwb7nZgIGhM8PK6haLgFs
JExUum3i2q24y3Ddd8B2MgFEPn74ZCEptmysCso6KjtWmiq6cb8sOoUrqIJyqe6G
/dutTOrzcXiUbL0HPhFz5aZmU8TkNypyxepj2+0gFrCaVdNSDRcTFi2+CrFCqTbJ
eg1yhRNNblHyTp3KgKRLTv3F/RGFRS+93xECAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBSAXnYpd0w4hL6DQTuUmH6b4qDb/DAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMGFjOTU0ZWItN2IzYi00YTE5LTk1ZmItNDkzZTk5ZmVhODYyLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAA5JuhgJJGZvu2YU
kx5W8WeOWHX3BT2aq0yo5rhDEf+sv/mZngDkF7f8iV9h94qBM/AFDbT99FCgmlqR
U7B0ilzU80A410Tu/75vrC3NaWEt//IiUZ8BmENlJ5I2TLoPQc9+8MDXVE1fJMvN
/ItasMK9hPStHs1DdfclggcuqsW36esiy+3cQWOZH0RjsWKC346MoV9ecRlcMitk
SeSZJqW7fTLO3omTvrUQ8ya21M4pledEpcGCnINFycAK//js+zq42gnC2QnmsiCM
sp9Tzi4Z2JdMxsPhcTPelHvl6mxmwMWvRc/iUXX18eRIIQdQsWgKsXxQJ09NRriD
I1X6w9M=
-----END CERTIFICATE-----