Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/63abf925-acb7-4340-b299-619afb06fc48.roa
File:                     63abf925-acb7-4340-b299-619afb06fc48.roa (raw, json)
Hash identifier:          Nb0CpdVGPC2eUArHafs4dKoeo72qBT7ycBBkhGvclhQ=
Subject key identifier:   F2:E4:60:49:45:39:8D:9F:83:ED:33:45:99:2F:47:4F:95:43:45:7F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5F8569105F33F458034F2AC0B0666825F544A89B
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/63abf925-acb7-4340-b299-619afb06fc48.roa
Signing time:             Tue 09 Aug 2022 00:00:00 +0000
ROA not before:           Tue 09 Aug 2022 00:00:00 +0000
ROA not after:            Fri 12 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:85:69:10:5f:33:f4:58:03:4f:2a:c0:b0:66:68:25:f5:44:a8:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug  9 00:00:00 2022 GMT
            Not After : Aug 12 23:59:59 2022 GMT
        Subject: serialNumber=bab21e353e2574a75e71b9e95c36f783e68b835774625a016e3655d40eb5d1bc, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4b:e0:5f:cd:3b:f7:2c:e7:9f:5f:15:9d:75:
                    3c:f1:99:e9:28:e8:7e:0d:94:ef:17:7d:2c:ae:e3:
                    67:6e:b8:63:a4:2d:ff:10:d8:34:af:9f:80:dd:1c:
                    7e:8a:d5:11:ee:9d:3e:7b:d4:ff:cb:1c:35:1f:96:
                    6e:f1:6d:f9:08:a8:cf:bd:af:44:23:fa:fd:eb:62:
                    21:2b:b9:be:22:99:6d:78:de:8c:b8:5e:fe:d0:47:
                    4f:19:fc:28:c5:93:49:48:58:d6:94:a5:07:3f:92:
                    89:f5:23:27:9f:a4:1a:33:1d:ac:08:ae:05:96:a9:
                    df:cc:0b:cf:5f:68:9b:ee:1b:70:e1:e8:d3:8e:a3:
                    3e:79:1c:9f:07:4e:9a:3f:ab:e9:17:0b:03:0a:96:
                    d9:3f:55:d4:bd:54:2a:c3:7c:30:28:1d:dc:28:2f:
                    d0:e6:6b:28:4f:03:65:86:6a:0d:4b:71:6a:e6:7f:
                    2a:2f:35:b5:52:fb:a1:78:00:92:dc:86:cc:5f:3b:
                    c5:8a:dc:bd:bd:a2:37:95:62:0a:c6:bc:b5:40:5a:
                    b8:dd:93:eb:8a:25:97:8f:a6:c6:da:cd:70:15:0a:
                    4d:66:df:9d:98:d8:ca:50:79:6e:6c:39:cf:19:fb:
                    c0:69:4d:c1:da:2c:3b:36:78:49:3d:74:0a:94:c3:
                    97:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E4:60:49:45:39:8D:9F:83:ED:33:45:99:2F:47:4F:95:43:45:7F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/63abf925-acb7-4340-b299-619afb06fc48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:63:cb:8d:4f:48:1c:0d:99:4d:01:e9:01:03:05:ed:63:2d:
         4c:59:c3:41:55:85:6f:c4:07:ed:55:87:b8:38:84:e0:4c:54:
         5e:49:7d:be:69:e3:6f:db:2f:c5:92:07:be:a6:c7:54:4b:9f:
         63:ce:04:87:65:c4:32:15:46:81:5d:02:da:fa:43:e9:00:69:
         cd:49:f4:a3:69:e9:ec:5c:c1:25:5d:89:0c:f2:44:ff:53:71:
         3d:84:43:fc:a0:c9:71:54:70:eb:5c:e1:e0:88:18:e5:35:9d:
         3b:0e:27:97:48:ba:a2:96:fd:d4:28:39:6e:92:32:02:ef:ee:
         6b:f2:6c:10:df:52:db:2c:48:f5:ba:f2:ea:f8:5b:a3:8c:59:
         0e:8a:13:7d:d3:74:f2:a3:06:da:06:17:be:4e:3a:4d:18:c4:
         3e:2b:8d:e7:25:27:83:e7:78:0d:93:82:ad:9b:3a:69:43:33:
         7f:fc:83:23:7c:4e:ec:ad:59:f1:32:1d:06:40:e8:8f:db:ce:
         42:ca:39:da:29:e7:98:8b:6b:88:9b:3d:76:b8:b3:20:88:18:
         9d:3e:67:92:aa:45:70:78:41:f8:ca:62:b6:81:7c:b0:79:df:
         64:34:43:bd:55:b6:fc:86:af:41:a8:a8:4b:5d:68:c2:8c:ec:
         29:13:00:37
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUX4VpEF8z9FgDTyrAsGZoJfVEqJswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIwODA5MDAwMDAwWhcNMjIwODEyMjM1OTU5
WjCBpTFJMEcGA1UEBRNAYmFiMjFlMzUzZTI1NzRhNzVlNzFiOWU5NWMzNmY3ODNl
NjhiODM1Nzc0NjI1YTAxNmUzNjU1ZDQwZWI1ZDFiYzEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJZL4F/NO/cs559fFZ11PPGZ6Sjofg2U7xd9LK7jZ264Y6Qt/xDY
NK+fgN0cforVEe6dPnvU/8scNR+WbvFt+Qioz72vRCP6/etiISu5viKZbXjejLhe
/tBHTxn8KMWTSUhY1pSlBz+SifUjJ5+kGjMdrAiuBZap38wLz19om+4bcOHo046j
PnkcnwdOmj+r6RcLAwqW2T9V1L1UKsN8MCgd3Cgv0OZrKE8DZYZqDUtxauZ/Ki81
tVL7oXgAktyGzF87xYrcvb2iN5ViCsa8tUBauN2T64oll4+mxtrNcBUKTWbfnZjY
ylB5bmw5zxn7wGlNwdosOzZ4ST10CpTDl7sCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTy5GBJRTmNn4PtM0WZL0dPlUNFfzAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNjNhYmY5MjUtYWNiNy00MzQwLWIyOTktNjE5YWZiMDZmYzQ4LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAExjy41PSBwNmU0B
6QEDBe1jLUxZw0FVhW/EB+1Vh7g4hOBMVF5Jfb5p42/bL8WSB76mx1RLn2POBIdl
xDIVRoFdAtr6Q+kAac1J9KNp6excwSVdiQzyRP9TcT2EQ/ygyXFUcOtc4eCIGOU1
nTsOJ5dIuqKW/dQoOW6SMgLv7mvybBDfUtssSPW68ur4W6OMWQ6KE33TdPKjBtoG
F75OOk0YxD4rjeclJ4PneA2Tgq2bOmlDM3/8gyN8TuytWfEyHQZA6I/bzkLKOdop
55iLa4ibPXa4syCIGJ0+Z5KqRXB4QfjKYraBfLB532Q0Q71VtvyGr0GoqEtdaMKM
7CkTADc=
-----END CERTIFICATE-----