Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5481b023-e038-4e0f-a84e-7734dbb5cf2d.roa
File:                     5481b023-e038-4e0f-a84e-7734dbb5cf2d.roa (raw, json)
Hash identifier:          3QiryAzyMgNN4fBLDaxubX15REqAxA11w149a+U/UH0=
Subject key identifier:   83:55:10:32:E6:65:05:1B:0C:0F:D0:5D:A4:EF:2A:8C:C1:D3:9C:01
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       203365195E2229E01BB6666869F858E8E9F5A69F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5481b023-e038-4e0f-a84e-7734dbb5cf2d.roa
Signing time:             Sun 25 Dec 2022 00:00:00 +0000
ROA not before:           Sun 25 Dec 2022 00:00:00 +0000
ROA not after:            Wed 28 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:33:65:19:5e:22:29:e0:1b:b6:66:68:69:f8:58:e8:e9:f5:a6:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 25 00:00:00 2022 GMT
            Not After : Dec 28 23:59:59 2022 GMT
        Subject: serialNumber=9ac321a47b356d8dcd476064b0a22e1e700346222c04c919d4d2993808f6126d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b7:7f:50:ec:5e:7d:66:6b:48:dc:c5:18:81:
                    5a:0d:f7:a9:62:e9:bb:f4:5f:e7:a1:93:1b:4e:df:
                    d5:cc:03:6c:94:aa:cb:95:6f:f5:0c:7a:90:9f:ef:
                    9a:fd:90:9c:14:aa:ba:0b:2e:5a:ee:c5:ea:20:5d:
                    2c:f9:95:1c:ac:56:91:05:20:c2:ce:39:ac:07:cb:
                    db:f2:93:6d:7f:7b:95:2c:a7:82:db:a4:96:58:cc:
                    78:d0:70:48:0b:b4:18:34:69:fe:96:b3:f3:f8:46:
                    c5:96:c1:97:85:3e:71:ee:b6:48:cd:b8:df:cc:8c:
                    70:fb:66:e9:5d:ef:2c:e8:6a:aa:e5:ea:01:29:f2:
                    8f:86:13:91:2a:50:42:ff:6d:16:68:45:7b:9a:e9:
                    ab:39:0c:9f:3e:ef:9c:24:a7:88:19:f6:e1:57:69:
                    d4:c3:0d:8c:1b:bf:ef:2a:b3:66:e7:d3:23:35:d7:
                    e4:93:cd:7a:03:3c:9a:39:ba:c1:75:4b:c5:f1:33:
                    67:f9:19:67:16:97:bd:48:cf:88:bf:e5:0c:77:cd:
                    22:53:c2:4e:19:b2:a8:4d:62:e5:7d:94:01:4a:08:
                    4c:80:39:8e:1b:31:45:38:f5:12:93:b7:d9:ad:09:
                    45:71:cb:f1:dd:87:3e:e6:24:2f:61:dc:16:cd:0d:
                    e2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:55:10:32:E6:65:05:1B:0C:0F:D0:5D:A4:EF:2A:8C:C1:D3:9C:01
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5481b023-e038-4e0f-a84e-7734dbb5cf2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:8f:46:e3:75:af:17:68:56:b9:9b:2b:2b:04:a7:af:c9:69:
         4b:b2:a4:41:47:a4:3a:f8:ad:78:95:df:c5:5b:fb:8f:9f:d7:
         2f:b6:36:05:d6:d2:7b:d3:46:7b:12:0d:32:b4:6a:90:28:f9:
         84:90:8d:89:d8:e1:da:86:45:f7:cb:66:99:16:c1:7f:81:11:
         e0:a9:24:bf:0f:27:2c:40:2a:ff:91:0e:dc:ed:3f:dc:17:1d:
         de:29:6e:4d:cd:16:52:c9:4c:c7:b8:8d:6c:7b:5e:ee:88:5d:
         76:f8:31:25:09:f6:ff:9f:1d:5f:5f:85:9c:16:ca:74:59:f0:
         36:c8:dc:09:b3:7d:71:3c:21:95:51:7f:2c:46:aa:f2:88:a2:
         d4:3d:f4:ea:e4:20:f6:b0:f8:dc:8b:f3:87:98:0d:2e:38:4c:
         1c:0f:58:d2:79:e7:94:ec:18:06:e1:2d:26:5c:00:3c:ad:8f:
         dc:a1:cf:30:b0:64:0b:3a:8f:56:18:69:77:ca:6e:7f:67:68:
         40:ad:d8:ea:7c:ba:2a:54:6a:8e:a3:49:60:8c:78:fb:57:95:
         52:5e:e4:26:8c:42:15:53:98:9d:66:f6:31:5c:e7:7e:49:20:
         25:84:ba:01:a8:a3:37:cb:e8:b2:19:8c:a1:bf:41:a7:43:89:
         85:2f:84:f9
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUIDNlGV4iKeAbtmZoafhY6On1pp8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMjI1MDAwMDAwWhcNMjIxMjI4MjM1OTU5
WjCBpTFJMEcGA1UEBRNAOWFjMzIxYTQ3YjM1NmQ4ZGNkNDc2MDY0YjBhMjJlMWU3
MDAzNDYyMjJjMDRjOTE5ZDRkMjk5MzgwOGY2MTI2ZDEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAIi3f1DsXn1ma0jcxRiBWg33qWLpu/Rf56GTG07f1cwDbJSqy5Vv
9Qx6kJ/vmv2QnBSqugsuWu7F6iBdLPmVHKxWkQUgws45rAfL2/KTbX97lSyngtuk
lljMeNBwSAu0GDRp/paz8/hGxZbBl4U+ce62SM2438yMcPtm6V3vLOhqquXqASny
j4YTkSpQQv9tFmhFe5rpqzkMnz7vnCSniBn24Vdp1MMNjBu/7yqzZufTIzXX5JPN
egM8mjm6wXVLxfEzZ/kZZxaXvUjPiL/lDHfNIlPCThmyqE1i5X2UAUoITIA5jhsx
RTj1EpO32a0JRXHL8d2HPuYkL2HcFs0N4iECAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBSDVRAy5mUFGwwP0F2k7yqMwdOcATAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNTQ4MWIwMjMtZTAzOC00ZTBmLWE4NGUtNzczNGRiYjVjZjJkLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKmPRuN1rxdoVrmb
KysEp6/JaUuypEFHpDr4rXiV38Vb+4+f1y+2NgXW0nvTRnsSDTK0apAo+YSQjYnY
4dqGRffLZpkWwX+BEeCpJL8PJyxAKv+RDtztP9wXHd4pbk3NFlLJTMe4jWx7Xu6I
XXb4MSUJ9v+fHV9fhZwWynRZ8DbI3AmzfXE8IZVRfyxGqvKIotQ99OrkIPaw+NyL
84eYDS44TBwPWNJ555TsGAbhLSZcADytj9yhzzCwZAs6j1YYaXfKbn9naECt2Op8
uipUao6jSWCMePtXlVJe5CaMQhVTmJ1m9jFc535JICWEugGoozfL6LIZjKG/QadD
iYUvhPk=
-----END CERTIFICATE-----