Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6b4a54ee-bf19-476b-8f20-0f086d29f8e3.roa
File:                     6b4a54ee-bf19-476b-8f20-0f086d29f8e3.roa (raw, json)
Hash identifier:          OM9vtuQMix4s6Q2L+FuBCL18qMw8XM5pb5Nx4sEuVuQ=
Subject key identifier:   AE:98:AE:B1:5A:FD:50:60:D1:8B:FA:D1:23:8F:19:FE:43:FE:AE:2E
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2E7914935A911891FECEE3A66159123E3AA0785C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6b4a54ee-bf19-476b-8f20-0f086d29f8e3.roa
Signing time:             Fri 03 Feb 2023 00:00:00 +0000
ROA not before:           Fri 03 Feb 2023 00:00:00 +0000
ROA not after:            Mon 06 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:79:14:93:5a:91:18:91:fe:ce:e3:a6:61:59:12:3e:3a:a0:78:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb  3 00:00:00 2023 GMT
            Not After : Feb  6 23:59:59 2023 GMT
        Subject: serialNumber=1e16d7bdca942c6e467181e50c9b00da17709125e90a1355c60e5eba64b5a36b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c1:01:54:19:7e:c7:75:a5:fd:a4:11:dc:b2:
                    28:ec:ad:41:81:a4:80:52:0b:36:97:cf:97:d1:df:
                    6b:b0:f5:2f:6a:5b:b6:7f:c7:da:d9:f2:eb:ea:53:
                    ba:39:53:e0:cd:4c:34:e6:5b:1e:d6:46:e7:1e:ce:
                    59:fa:07:3d:d4:0e:18:38:c2:e5:27:37:f5:96:78:
                    e5:89:c1:fa:d9:d2:22:6a:23:26:0a:66:e0:97:c3:
                    b9:9c:27:24:7c:29:99:eb:65:03:aa:a5:2c:cf:ba:
                    3c:7e:be:6a:2b:ac:a8:e6:8c:42:79:d9:dd:16:f0:
                    53:d6:ff:ca:fc:04:ae:d5:cc:9b:94:0f:06:16:86:
                    c8:88:85:cb:b9:a8:f9:c7:a8:90:e1:b8:9c:b3:37:
                    d3:41:80:9f:b9:85:20:e6:a7:50:48:81:b8:5d:fa:
                    c2:7a:e3:6e:35:9f:27:35:46:ca:f1:d3:c5:a1:01:
                    1b:89:ba:a0:df:8b:be:23:8b:4f:21:0f:98:9d:53:
                    c6:d2:77:e0:6b:0e:3c:04:72:c0:b4:4a:40:05:f7:
                    79:95:ad:b2:43:57:fe:1c:63:cd:46:16:fa:e4:ed:
                    fa:ca:93:97:27:43:75:de:43:17:2e:ea:64:88:fc:
                    70:0f:c4:c9:97:89:22:38:e0:be:4d:e7:b2:e1:87:
                    fa:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:98:AE:B1:5A:FD:50:60:D1:8B:FA:D1:23:8F:19:FE:43:FE:AE:2E
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6b4a54ee-bf19-476b-8f20-0f086d29f8e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:86:a6:88:c6:a5:53:98:55:43:75:e8:5c:12:7e:cd:64:8f:
         99:97:94:fd:1f:f5:7d:be:9f:79:9f:cd:26:bf:37:0f:ec:60:
         97:be:87:0f:d7:4a:e2:5a:c5:bf:07:40:5a:e1:f4:af:f8:9d:
         02:9d:5a:f0:44:5f:80:ee:5a:22:da:fd:4e:85:9c:5f:6b:7a:
         12:00:1e:06:8a:fb:b8:af:19:44:8a:0e:91:10:39:f1:1c:03:
         77:63:28:a2:51:fd:13:2b:84:60:6d:b9:78:ab:13:30:39:d8:
         d6:9d:48:5c:aa:6f:71:50:3d:52:db:dd:1c:93:49:00:a9:7e:
         6c:04:58:41:13:b7:77:ba:de:46:74:a8:9c:80:87:b3:de:1e:
         c4:47:96:b4:68:8c:c4:87:55:b0:18:85:dd:30:1a:84:3b:14:
         73:84:f9:b8:5b:0e:cb:52:12:b5:e7:98:37:36:7c:11:eb:b9:
         93:1f:1a:f9:7b:d3:20:61:f3:61:ac:ae:b9:b9:96:8e:a3:d7:
         81:68:03:3b:49:76:05:ee:4f:d4:c8:63:d2:a2:62:a8:73:4b:
         7b:8f:48:83:19:32:a3:aa:54:1a:e5:b0:5a:55:be:85:4d:e1:
         41:c7:1b:a2:fe:b2:98:3f:85:bf:3b:2b:25:e5:c8:1f:d3:bd:
         70:20:f3:76
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIULnkUk1qRGJH+zuOmYVkSPjqgeFwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMjAzMDAwMDAwWhcNMjMwMjA2MjM1OTU5
WjCBpTFJMEcGA1UEBRNAMWUxNmQ3YmRjYTk0MmM2ZTQ2NzE4MWU1MGM5YjAwZGEx
NzcwOTEyNWU5MGExMzU1YzYwZTVlYmE2NGI1YTM2YjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMPBAVQZfsd1pf2kEdyyKOytQYGkgFILNpfPl9Hfa7D1L2pbtn/H
2tny6+pTujlT4M1MNOZbHtZG5x7OWfoHPdQOGDjC5Sc39ZZ45YnB+tnSImojJgpm
4JfDuZwnJHwpmetlA6qlLM+6PH6+aiusqOaMQnnZ3RbwU9b/yvwErtXMm5QPBhaG
yIiFy7mo+ceokOG4nLM300GAn7mFIOanUEiBuF36wnrjbjWfJzVGyvHTxaEBG4m6
oN+LviOLTyEPmJ1TxtJ34GsOPARywLRKQAX3eZWtskNX/hxjzUYW+uTt+sqTlydD
dd5DFy7qZIj8cA/EyZeJIjjgvk3nsuGH+hsCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBSumK6xWv1QYNGL+tEjjxn+Q/6uLjAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNmI0YTU0ZWUtYmYxOS00NzZiLThmMjAtMGYwODZkMjlmOGUzLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGWGpojGpVOYVUN1
6FwSfs1kj5mXlP0f9X2+n3mfzSa/Nw/sYJe+hw/XSuJaxb8HQFrh9K/4nQKdWvBE
X4DuWiLa/U6FnF9rehIAHgaK+7ivGUSKDpEQOfEcA3djKKJR/RMrhGBtuXirEzA5
2NadSFyqb3FQPVLb3RyTSQCpfmwEWEETt3e63kZ0qJyAh7PeHsRHlrRojMSHVbAY
hd0wGoQ7FHOE+bhbDstSErXnmDc2fBHruZMfGvl70yBh82Gsrrm5lo6j14FoAztJ
dgXuT9TIY9KiYqhzS3uPSIMZMqOqVBrlsFpVvoVN4UHHG6L+spg/hb87KyXlyB/T
vXAg83Y=
-----END CERTIFICATE-----