Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2fd915c1-6a29-4d8a-97dd-b76575e9b112.roa
File:                     2fd915c1-6a29-4d8a-97dd-b76575e9b112.roa (raw, json)
Hash identifier:          Np8fgsu2BBUjO3HrxX8ZH/Fx2c67KQCGok8hqV3CSxY=
Subject key identifier:   CE:F2:FC:4F:A2:C5:AC:0B:5B:EE:A6:CB:41:F3:D8:49:5C:6A:84:03
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2F4ABC67DE6733C3005A990ED27E812F25B47842
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2fd915c1-6a29-4d8a-97dd-b76575e9b112.roa
Signing time:             Mon 26 Dec 2022 00:00:00 +0000
ROA not before:           Mon 26 Dec 2022 00:00:00 +0000
ROA not after:            Thu 29 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:4a:bc:67:de:67:33:c3:00:5a:99:0e:d2:7e:81:2f:25:b4:78:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 26 00:00:00 2022 GMT
            Not After : Dec 29 23:59:59 2022 GMT
        Subject: serialNumber=18bfdc3561189a0d25ba60e3b2568a18fe3db49eb4f8fe044801cf9cd79ef1b9, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bb:03:27:14:fe:69:a3:f0:27:d4:be:ad:36:
                    6c:dd:46:ff:4e:3a:be:0e:e4:13:61:48:6c:e8:dd:
                    e5:1b:4d:b0:20:5e:d1:f0:21:a2:8a:8f:c8:8c:32:
                    ac:06:c1:02:03:81:ab:16:03:e0:eb:91:ea:87:63:
                    f3:5e:7c:b4:fc:3d:e0:52:0e:58:2e:18:d6:3c:32:
                    ed:bd:cf:e9:92:0d:37:77:24:1e:1f:d0:6d:82:73:
                    59:eb:75:37:38:76:5f:f8:a8:de:1d:7f:64:ae:33:
                    72:4e:81:18:8e:df:f9:55:1b:c0:6c:16:9c:1a:98:
                    4d:4c:a2:19:5a:b4:4c:26:ca:8b:ab:63:40:81:ad:
                    d5:e8:06:4f:7c:1b:97:1b:db:ff:0c:2d:1f:e9:d9:
                    69:af:d4:35:0a:b9:8a:82:66:9c:7a:36:7d:7d:4f:
                    86:56:7e:47:3c:1b:36:57:12:d1:e8:4d:af:53:52:
                    6a:cb:05:45:ce:06:b2:b1:b5:e7:4d:98:d1:10:f1:
                    ac:bd:73:4f:9e:7f:b3:32:8a:c3:a7:cd:18:da:7f:
                    d8:de:30:a2:2d:d9:53:25:a6:60:17:b1:51:c1:b7:
                    b0:e5:d2:e4:32:59:3b:26:09:dc:56:44:2c:f4:30:
                    b8:9d:ba:df:80:6c:a2:b2:c0:21:f6:08:ef:1e:c9:
                    6e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F2:FC:4F:A2:C5:AC:0B:5B:EE:A6:CB:41:F3:D8:49:5C:6A:84:03
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2fd915c1-6a29-4d8a-97dd-b76575e9b112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:f1:39:c3:af:51:08:df:93:8f:72:df:34:a0:9c:4e:54:15:
         bf:9b:58:07:4c:12:56:3c:cf:9d:a6:25:a7:0b:03:d7:91:fb:
         a9:39:96:aa:0c:97:39:68:b5:b3:8f:82:90:e1:d1:31:8b:f0:
         c9:ab:bd:30:56:a0:3d:08:64:84:8e:9c:ba:87:65:a7:46:71:
         1e:78:3c:ae:91:03:a7:da:2d:e5:7a:46:0a:cc:d9:ec:ee:36:
         5e:0d:a8:a3:48:31:44:0f:5a:f2:d7:94:55:f3:a7:2c:a0:e7:
         88:d9:3e:ab:cf:6c:b4:5d:13:31:c4:c2:0e:fc:88:eb:1f:ff:
         78:68:2b:a0:73:23:f7:3d:78:76:6c:bc:96:83:a6:37:a5:8b:
         46:b2:03:a0:68:76:73:5d:dc:da:85:6a:be:71:5e:61:8c:1f:
         f0:5a:18:93:27:26:a8:3c:8f:15:8a:09:91:a4:3e:8a:19:15:
         30:26:a4:d2:43:9d:53:aa:4c:36:00:0d:d8:b6:17:88:5f:b3:
         8d:c2:c0:0c:11:fb:59:2f:d1:af:05:a7:13:5b:17:5c:e7:07:
         48:58:12:f1:7d:51:cb:31:bd:04:a0:49:38:79:c1:91:83:a6:
         8d:81:7e:09:61:63:2a:39:95:9b:59:29:ad:2c:ad:bb:0b:8b:
         e2:42:76:8f
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUL0q8Z95nM8MAWpkO0n6BLyW0eEIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMjI2MDAwMDAwWhcNMjIxMjI5MjM1OTU5
WjCBpTFJMEcGA1UEBRNAMThiZmRjMzU2MTE4OWEwZDI1YmE2MGUzYjI1NjhhMThm
ZTNkYjQ5ZWI0ZjhmZTA0NDgwMWNmOWNkNzllZjFiOTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJi7AycU/mmj8CfUvq02bN1G/046vg7kE2FIbOjd5RtNsCBe0fAh
ooqPyIwyrAbBAgOBqxYD4OuR6odj8158tPw94FIOWC4Y1jwy7b3P6ZINN3ckHh/Q
bYJzWet1Nzh2X/io3h1/ZK4zck6BGI7f+VUbwGwWnBqYTUyiGVq0TCbKi6tjQIGt
1egGT3wblxvb/wwtH+nZaa/UNQq5ioJmnHo2fX1PhlZ+RzwbNlcS0ehNr1NSassF
Rc4GsrG1502Y0RDxrL1zT55/szKKw6fNGNp/2N4woi3ZUyWmYBexUcG3sOXS5DJZ
OyYJ3FZELPQwuJ2634BsorLAIfYI7x7JbhECAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTO8vxPosWsC1vupstB89hJXGqEAzAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMmZkOTE1YzEtNmEyOS00ZDhhLTk3ZGQtYjc2NTc1ZTliMTEyLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIvxOcOvUQjfk49y
3zSgnE5UFb+bWAdMElY8z52mJacLA9eR+6k5lqoMlzlotbOPgpDh0TGL8MmrvTBW
oD0IZISOnLqHZadGcR54PK6RA6faLeV6RgrM2ezuNl4NqKNIMUQPWvLXlFXzpyyg
54jZPqvPbLRdEzHEwg78iOsf/3hoK6BzI/c9eHZsvJaDpjeli0ayA6BodnNd3NqF
ar5xXmGMH/BaGJMnJqg8jxWKCZGkPooZFTAmpNJDnVOqTDYADdi2F4hfs43CwAwR
+1kv0a8FpxNbF1znB0hYEvF9UcsxvQSgSTh5wZGDpo2BfglhYyo5lZtZKa0srbsL
i+JCdo8=
-----END CERTIFICATE-----