Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/37683f5a-9ab0-4609-95e8-3353c09ccc3d.roa
File:                     37683f5a-9ab0-4609-95e8-3353c09ccc3d.roa (raw, json)
Hash identifier:          OasvMMqdu5o0p3Nw/IqxEB8vxRNa6+v0KswQmw7ursg=
Subject key identifier:   17:C7:1B:4A:89:B7:2C:69:BA:35:AC:F7:9B:D1:B0:1A:5C:90:5A:3F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5DCFF4A48D9714EE4282A4E57B5661503E4B362F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/37683f5a-9ab0-4609-95e8-3353c09ccc3d.roa
Signing time:             Wed 21 Sep 2022 00:00:00 +0000
ROA not before:           Wed 21 Sep 2022 00:00:00 +0000
ROA not after:            Sat 24 Sep 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:cf:f4:a4:8d:97:14:ee:42:82:a4:e5:7b:56:61:50:3e:4b:36:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Sep 21 00:00:00 2022 GMT
            Not After : Sep 24 23:59:59 2022 GMT
        Subject: serialNumber=35bf0fccad639c53528c148b66b09dc54ab09c3308874a9dd610057a4c5fb450, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b4:ec:1e:b9:f9:59:29:44:d8:fc:97:ae:1f:
                    b6:0b:1c:77:52:b5:76:fe:0c:a8:07:f7:ac:20:a6:
                    5c:7c:bb:9d:64:7e:0b:61:87:70:96:0c:8c:1e:81:
                    c3:5a:2a:f6:4b:12:fc:15:e8:fd:78:05:75:00:40:
                    95:d7:e7:0a:ee:c4:87:c5:9d:ed:e8:47:14:c4:f5:
                    a7:2d:e3:d2:f4:dd:4f:51:f9:5b:f0:f8:ea:5b:e3:
                    ad:f9:69:ba:97:55:9a:95:e6:fd:46:68:00:94:32:
                    00:7b:a0:f9:f6:4b:1f:2a:87:bc:24:5d:a5:c1:55:
                    0f:c5:d2:0d:22:97:96:07:8d:44:58:eb:64:60:2b:
                    17:21:3d:83:c5:bd:63:54:f2:ff:d9:03:c7:36:47:
                    7d:11:99:d7:4e:dc:66:db:eb:1a:48:fe:cc:58:26:
                    ce:85:eb:d5:74:bb:8b:16:25:57:36:7a:2a:d3:f9:
                    99:83:82:62:8f:6a:1f:65:72:cf:ed:92:61:57:9b:
                    66:66:dd:ce:fc:01:d0:f3:39:96:9f:f2:23:f9:93:
                    23:28:10:fd:7b:16:5f:8b:00:93:c3:99:33:13:f5:
                    9e:8c:ad:87:d5:57:47:3a:37:e1:f3:a6:b9:a9:4e:
                    1e:aa:cc:4e:0e:09:dd:9d:61:08:36:ce:41:f4:5f:
                    e1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C7:1B:4A:89:B7:2C:69:BA:35:AC:F7:9B:D1:B0:1A:5C:90:5A:3F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/37683f5a-9ab0-4609-95e8-3353c09ccc3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:33:b0:76:a7:ce:52:ee:71:a8:a7:12:d8:11:2d:b2:d2:db:
         62:fc:7d:04:45:81:7b:65:b1:49:fa:da:19:83:ca:c2:6e:aa:
         13:1a:f0:0e:fa:d9:f7:d5:86:8f:1f:c6:d1:94:ec:ec:5e:fe:
         34:c9:9a:c6:c0:e3:02:fe:41:68:7b:15:61:12:15:28:df:33:
         55:4a:83:f7:e8:d6:52:c4:7f:b2:90:0b:f1:a2:8c:01:31:46:
         d5:89:23:17:e7:16:47:d7:5c:06:70:84:81:54:e3:b2:30:96:
         b5:2b:2d:21:7c:9f:fa:bc:f4:f3:d6:3c:62:9c:75:f9:c7:31:
         48:30:20:c1:70:c1:04:99:a5:be:95:ad:2b:c7:e8:4f:d7:f3:
         73:3c:19:79:eb:d6:c0:6b:fe:ec:42:5d:ed:b9:2e:9d:4c:13:
         f6:78:55:96:cd:22:3f:3e:81:cb:b4:3f:13:25:0f:97:fc:33:
         85:b8:0d:44:c8:e9:bc:7d:11:3a:41:00:22:0b:60:3e:4c:fa:
         0a:54:14:63:da:83:ff:af:77:dd:af:2a:57:48:45:7c:e6:77:
         04:48:9e:dc:a8:7d:28:5c:f5:98:a5:a1:01:9f:6f:76:64:01:
         de:6a:b9:ad:44:34:0b:fc:87:d2:08:b7:99:88:65:23:47:00:
         d0:17:dd:1f
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUXc/0pI2XFO5CgqTle1ZhUD5LNi8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIwOTIxMDAwMDAwWhcNMjIwOTI0MjM1OTU5
WjCBpTFJMEcGA1UEBRNAMzViZjBmY2NhZDYzOWM1MzUyOGMxNDhiNjZiMDlkYzU0
YWIwOWMzMzA4ODc0YTlkZDYxMDA1N2E0YzVmYjQ1MDEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJC07B65+VkpRNj8l64ftgscd1K1dv4MqAf3rCCmXHy7nWR+C2GH
cJYMjB6Bw1oq9ksS/BXo/XgFdQBAldfnCu7Eh8Wd7ehHFMT1py3j0vTdT1H5W/D4
6lvjrflpupdVmpXm/UZoAJQyAHug+fZLHyqHvCRdpcFVD8XSDSKXlgeNRFjrZGAr
FyE9g8W9Y1Ty/9kDxzZHfRGZ107cZtvrGkj+zFgmzoXr1XS7ixYlVzZ6KtP5mYOC
Yo9qH2Vyz+2SYVebZmbdzvwB0PM5lp/yI/mTIygQ/XsWX4sAk8OZMxP1noyth9VX
Rzo34fOmualOHqrMTg4J3Z1hCDbOQfRf4UsCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQXxxtKibcsabo1rPeb0bAaXJBaPzAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMzc2ODNmNWEtOWFiMC00NjA5LTk1ZTgtMzM1M2MwOWNjYzNkLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABkzsHanzlLucain
EtgRLbLS22L8fQRFgXtlsUn62hmDysJuqhMa8A762ffVho8fxtGU7Oxe/jTJmsbA
4wL+QWh7FWESFSjfM1VKg/fo1lLEf7KQC/GijAExRtWJIxfnFkfXXAZwhIFU47Iw
lrUrLSF8n/q89PPWPGKcdfnHMUgwIMFwwQSZpb6VrSvH6E/X83M8GXnr1sBr/uxC
Xe25Lp1ME/Z4VZbNIj8+gcu0PxMlD5f8M4W4DUTI6bx9ETpBACILYD5M+gpUFGPa
g/+vd92vKldIRXzmdwRIntyofShc9ZiloQGfb3ZkAd5qua1ENAv8h9IIt5mIZSNH
ANAX3R8=
-----END CERTIFICATE-----