Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/62be0cb1-67e8-48e5-b62f-d72c77b89f16.roa
File:                     62be0cb1-67e8-48e5-b62f-d72c77b89f16.roa (raw, json)
Hash identifier:          jadNYcqEGrMHP3mucLKuUBPzUNgmvhINJD7XTjwGiWg=
Subject key identifier:   8F:A9:EB:E7:BB:A3:A1:15:6D:FB:51:A0:14:2F:02:7D:95:1C:5F:D2
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       66DD02C0AC3C5B9CA147D3DEBDF23F02E14BECFD
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/62be0cb1-67e8-48e5-b62f-d72c77b89f16.roa
Signing time:             Sun 26 Feb 2023 00:00:00 +0000
ROA not before:           Sun 26 Feb 2023 00:00:00 +0000
ROA not after:            Wed 01 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:dd:02:c0:ac:3c:5b:9c:a1:47:d3:de:bd:f2:3f:02:e1:4b:ec:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 26 00:00:00 2023 GMT
            Not After : Mar  1 23:59:59 2023 GMT
        Subject: serialNumber=2eb1efdca4603da74c1eddf37ca7449f2b509cda535c3cd3d4008dd407dd3b42, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c0:f2:50:50:51:99:37:14:83:a5:4f:ed:1c:
                    aa:89:ae:d3:1e:71:11:9f:da:09:0f:1f:c7:bc:6e:
                    07:73:33:67:31:4e:2c:f1:3f:39:b4:a4:30:9a:d4:
                    59:3a:02:7b:e5:7b:61:98:88:f0:f9:35:d2:98:01:
                    b0:96:e8:1e:dc:94:6f:8d:90:71:52:2b:db:f4:96:
                    b4:35:09:6a:93:55:79:a1:ac:0c:83:45:bd:0b:6d:
                    5b:ab:e9:7d:8f:62:40:dc:8c:96:28:87:93:ba:e2:
                    31:68:05:9e:c6:0e:79:88:62:2d:9c:ec:11:8d:ed:
                    f5:1a:cc:ca:ad:4d:85:65:7a:2b:6b:87:4a:61:b3:
                    3e:c2:19:5e:da:0b:11:19:f7:af:e1:46:53:22:8e:
                    04:c2:cb:53:72:78:80:17:f6:d0:ba:43:5d:52:e3:
                    54:77:f9:74:ff:b0:a1:09:67:2a:cc:c3:1c:96:03:
                    58:8b:87:55:c4:38:d5:9f:e0:02:7b:ab:c5:15:56:
                    06:93:cc:c0:6b:11:41:b9:15:f3:1b:44:a1:2a:56:
                    7a:3d:c5:ed:6d:79:d2:8b:cf:9b:50:bc:49:73:56:
                    78:fb:81:dd:0b:1c:1c:22:78:06:ba:9c:a2:16:6d:
                    16:ac:ae:1a:24:2a:4c:8f:20:78:81:14:95:a4:72:
                    7c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A9:EB:E7:BB:A3:A1:15:6D:FB:51:A0:14:2F:02:7D:95:1C:5F:D2
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/62be0cb1-67e8-48e5-b62f-d72c77b89f16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:e9:41:4d:b4:e0:6b:99:3a:5b:71:16:ab:96:4f:1d:f1:60:
         a8:1c:3d:88:86:b3:86:ed:02:31:5b:7c:bc:ab:96:08:63:38:
         73:cb:ef:9b:f4:5e:67:25:75:f4:dd:1f:03:67:85:32:4f:b6:
         08:d9:2c:b3:ec:82:b8:99:82:50:19:05:c9:1c:30:12:9f:cd:
         d0:ba:e2:37:97:87:df:5a:91:8a:df:fa:a7:09:15:cc:75:64:
         87:9b:c7:1f:10:7c:3e:02:e5:93:07:ac:39:f3:62:6f:ac:26:
         ad:44:bd:66:a6:8a:3a:f9:d4:ae:cc:69:55:7b:aa:09:ff:41:
         9f:29:71:7c:71:cb:7b:63:17:e8:6f:6f:4d:81:76:21:e7:98:
         af:20:e1:c5:4a:79:cb:3a:c6:4f:46:01:bb:c8:48:eb:12:a1:
         7b:bb:2e:ac:32:87:ac:3a:36:2d:44:2f:b0:50:47:d3:fb:62:
         54:f0:9b:ec:b6:f8:44:71:c9:e0:d0:a5:dd:ec:f6:d7:9d:df:
         5f:08:cf:c4:6a:7a:41:96:c3:a8:96:04:6c:31:d9:e7:85:83:
         56:1b:1e:7c:59:3a:d6:cc:82:48:9b:5f:4a:78:39:f1:43:0a:
         b2:fd:ab:23:a4:15:e1:fc:0c:4a:78:a5:8c:64:e5:20:cd:3f:
         02:03:3c:18
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUZt0CwKw8W5yhR9PevfI/AuFL7P0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMjI2MDAwMDAwWhcNMjMwMzAxMjM1OTU5
WjCBpTFJMEcGA1UEBRNAMmViMWVmZGNhNDYwM2RhNzRjMWVkZGYzN2NhNzQ0OWYy
YjUwOWNkYTUzNWMzY2QzZDQwMDhkZDQwN2RkM2I0MjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALvA8lBQUZk3FIOlT+0cqomu0x5xEZ/aCQ8fx7xuB3MzZzFOLPE/
ObSkMJrUWToCe+V7YZiI8Pk10pgBsJboHtyUb42QcVIr2/SWtDUJapNVeaGsDINF
vQttW6vpfY9iQNyMliiHk7riMWgFnsYOeYhiLZzsEY3t9RrMyq1NhWV6K2uHSmGz
PsIZXtoLERn3r+FGUyKOBMLLU3J4gBf20LpDXVLjVHf5dP+woQlnKszDHJYDWIuH
VcQ41Z/gAnurxRVWBpPMwGsRQbkV8xtEoSpWej3F7W150ovPm1C8SXNWePuB3Qsc
HCJ4BrqcohZtFqyuGiQqTI8geIEUlaRyfEUCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBSPqevnu6OhFW37UaAULwJ9lRxf0jAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNjJiZTBjYjEtNjdlOC00OGU1LWI2MmYtZDcyYzc3Yjg5ZjE2LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAF7pQU204GuZOltx
FquWTx3xYKgcPYiGs4btAjFbfLyrlghjOHPL75v0XmcldfTdHwNnhTJPtgjZLLPs
griZglAZBckcMBKfzdC64jeXh99akYrf+qcJFcx1ZIebxx8QfD4C5ZMHrDnzYm+s
Jq1EvWamijr51K7MaVV7qgn/QZ8pcXxxy3tjF+hvb02BdiHnmK8g4cVKecs6xk9G
AbvISOsSoXu7Lqwyh6w6Ni1EL7BQR9P7YlTwm+y2+ERxyeDQpd3s9ted318Iz8Rq
ekGWw6iWBGwx2eeFg1YbHnxZOtbMgkibX0p4OfFDCrL9qyOkFeH8DEp4pYxk5SDN
PwIDPBg=
-----END CERTIFICATE-----