Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2f3da3ec-f80b-4381-b5a2-944046ff2f0e.roa
File:                     2f3da3ec-f80b-4381-b5a2-944046ff2f0e.roa (raw, json)
Hash identifier:          zHinDQ2dA4qWO/QM0gEKysz8nqZbWS9wudIfzXpv5X8=
Subject key identifier:   F4:84:3C:C6:8B:DC:A0:8D:A4:69:B7:BE:53:6A:F5:EF:0D:17:F2:F1
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       20B1F4EDDDD4F9A515E9F9C1581BB565BA49138F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2f3da3ec-f80b-4381-b5a2-944046ff2f0e.roa
Signing time:             Wed 07 Dec 2022 00:00:00 +0000
ROA not before:           Wed 07 Dec 2022 00:00:00 +0000
ROA not after:            Sat 10 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b1:f4:ed:dd:d4:f9:a5:15:e9:f9:c1:58:1b:b5:65:ba:49:13:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec  7 00:00:00 2022 GMT
            Not After : Dec 10 23:59:59 2022 GMT
        Subject: serialNumber=6ea9674989253d3254453f6fa77d1d40668eebf48db93bd647a02f9d8067fe3f, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:27:e7:6c:39:b2:df:cc:c6:4b:17:83:6d:b8:
                    46:17:b3:c1:a3:12:7b:89:06:5e:70:c5:e3:19:61:
                    e1:97:8d:2a:74:06:49:55:70:2d:2e:20:79:00:7d:
                    2e:41:a3:a7:54:c6:72:57:81:2c:3d:80:50:dd:b9:
                    9b:2f:77:bf:3d:96:28:3c:85:e8:ba:b8:65:83:62:
                    18:52:dd:12:a3:3c:c4:39:7b:b7:fd:18:a3:82:56:
                    dd:87:b6:e8:48:cb:2c:77:3f:a0:d0:8c:77:82:8d:
                    a2:9a:7c:69:8a:f6:8b:ed:c1:33:11:05:51:0e:5a:
                    41:ac:2e:4e:27:c7:33:9d:6c:89:db:9a:e5:33:c0:
                    9e:9d:d9:36:ae:64:d2:84:fd:9f:8e:be:07:7d:9c:
                    f1:98:ac:7c:5e:d8:b8:c8:9b:99:c1:a2:90:6a:37:
                    80:5a:9c:c2:ca:36:6e:97:92:d3:73:81:11:c9:18:
                    a3:fb:1c:42:5e:8e:c7:38:c2:09:66:a8:f9:23:c9:
                    9c:ff:2f:88:70:f2:97:ef:3f:92:c2:b6:6e:f6:e2:
                    8b:80:bd:97:25:69:df:15:6e:6f:3d:ae:9d:e9:61:
                    3a:b3:3d:09:b7:fa:04:12:a1:33:44:79:10:fb:25:
                    f8:4a:18:75:b1:75:5c:b6:f3:96:94:34:9f:60:15:
                    05:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:84:3C:C6:8B:DC:A0:8D:A4:69:B7:BE:53:6A:F5:EF:0D:17:F2:F1
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2f3da3ec-f80b-4381-b5a2-944046ff2f0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:de:4b:e5:62:85:ba:f9:bb:32:cc:43:fb:a1:02:b8:8b:f0:
         b6:4f:48:e3:9d:90:51:db:33:23:54:88:29:f7:89:58:8c:71:
         47:f3:c6:e0:8a:cc:43:0b:e1:ff:9f:f4:d2:da:08:64:08:ed:
         b7:97:be:d7:64:26:2e:f0:7c:70:97:12:05:ff:f9:b1:f5:c3:
         a7:bd:c0:c7:6c:d7:08:cd:81:08:18:c8:0a:a0:e0:b4:33:2c:
         a5:38:c7:b1:f1:b7:81:1e:56:f8:cf:63:24:9e:e2:fa:35:f5:
         4d:d4:95:33:79:2f:9c:77:67:e2:d0:48:34:fb:fc:4e:82:2f:
         57:d2:e6:01:6a:4d:b3:34:48:a1:72:5a:3d:d6:ce:6d:44:66:
         64:2d:63:d2:41:bd:8b:e8:e9:ed:84:c7:77:32:d6:33:24:6c:
         0a:3b:b9:79:1a:14:92:e1:40:02:58:58:49:17:a0:9b:37:fe:
         49:48:8b:6b:86:06:79:3c:0c:0d:c5:d4:22:79:d9:df:6e:59:
         3a:25:c7:bd:2c:38:11:56:f2:29:30:46:44:e2:d6:1c:4b:36:
         1e:0f:45:ac:6e:0b:ef:f8:47:ea:fa:97:5f:e9:ce:34:8e:22:
         b4:de:4e:7e:1e:e9:11:40:68:31:2a:f3:d2:ef:33:00:08:f7:
         72:63:0e:a4
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUILH07d3U+aUV6fnBWBu1ZbpJE48wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMjA3MDAwMDAwWhcNMjIxMjEwMjM1OTU5
WjCBpTFJMEcGA1UEBRNANmVhOTY3NDk4OTI1M2QzMjU0NDUzZjZmYTc3ZDFkNDA2
NjhlZWJmNDhkYjkzYmQ2NDdhMDJmOWQ4MDY3ZmUzZjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALQn52w5st/MxksXg224RhezwaMSe4kGXnDF4xlh4ZeNKnQGSVVw
LS4geQB9LkGjp1TGcleBLD2AUN25my93vz2WKDyF6Lq4ZYNiGFLdEqM8xDl7t/0Y
o4JW3Ye26EjLLHc/oNCMd4KNopp8aYr2i+3BMxEFUQ5aQawuTifHM51sidua5TPA
np3ZNq5k0oT9n46+B32c8ZisfF7YuMibmcGikGo3gFqcwso2bpeS03OBEckYo/sc
Ql6OxzjCCWao+SPJnP8viHDyl+8/ksK2bvbii4C9lyVp3xVubz2unelhOrM9Cbf6
BBKhM0R5EPsl+EoYdbF1XLbzlpQ0n2AVBbsCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBT0hDzGi9ygjaRpt75TavXvDRfy8TAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMmYzZGEzZWMtZjgwYi00MzgxLWI1YTItOTQ0MDQ2ZmYyZjBlLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEfeS+Vihbr5uzLM
Q/uhAriL8LZPSOOdkFHbMyNUiCn3iViMcUfzxuCKzEML4f+f9NLaCGQI7beXvtdk
Ji7wfHCXEgX/+bH1w6e9wMds1wjNgQgYyAqg4LQzLKU4x7Hxt4EeVvjPYySe4vo1
9U3UlTN5L5x3Z+LQSDT7/E6CL1fS5gFqTbM0SKFyWj3Wzm1EZmQtY9JBvYvo6e2E
x3cy1jMkbAo7uXkaFJLhQAJYWEkXoJs3/klIi2uGBnk8DA3F1CJ52d9uWTolx70s
OBFW8ikwRkTi1hxLNh4PRaxuC+/4R+r6l1/pzjSOIrTeTn4e6RFAaDEq89LvMwAI
93JjDqQ=
-----END CERTIFICATE-----