Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6d1788dc-bbfb-4182-987f-b9ef7e24f3b6.roa
File:                     6d1788dc-bbfb-4182-987f-b9ef7e24f3b6.roa (raw, json)
Hash identifier:          1oKyf2Isb36Mg3i1Hbpv/Z/Km2AkseDGE5Gy2d53smo=
Subject key identifier:   76:A9:DD:AE:8A:E0:51:A4:C8:8F:69:4A:BF:9E:2C:7C:83:7F:3E:F6
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       2D759BE15B9803E9C0BD46F55CCCC17C8BA85A6A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6d1788dc-bbfb-4182-987f-b9ef7e24f3b6.roa
Signing time:             Sat 12 Nov 2022 00:00:00 +0000
ROA not before:           Sat 12 Nov 2022 00:00:00 +0000
ROA not after:            Tue 15 Nov 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:75:9b:e1:5b:98:03:e9:c0:bd:46:f5:5c:cc:c1:7c:8b:a8:5a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Nov 12 00:00:00 2022 GMT
            Not After : Nov 15 23:59:59 2022 GMT
        Subject: serialNumber=19d9e6b328e0ea68c73342911a3dc537800868112f201681a21d8af1b3e6f589, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f5:1a:af:84:f4:ad:93:53:1b:57:de:35:93:
                    2d:6f:19:f2:6e:11:50:38:48:4e:11:0b:83:91:e0:
                    90:97:48:13:fd:e1:d9:76:4e:13:12:74:4a:14:39:
                    fa:2e:6b:f2:19:55:ed:4a:d0:1c:61:f2:90:e1:9e:
                    6c:c4:ac:4e:44:25:9b:71:50:fd:5a:63:6d:44:c6:
                    ec:26:c9:fa:17:5f:a4:99:ec:1c:94:e1:ba:d4:42:
                    36:ca:e3:1d:23:95:12:0d:e1:07:f1:0a:46:48:67:
                    de:96:c6:34:dc:65:7f:14:41:cf:42:d8:de:60:d9:
                    04:ce:64:84:13:e7:ff:2e:dc:a9:ba:b6:8c:6c:8e:
                    4c:be:83:94:33:44:50:c4:0f:8f:b9:aa:f7:d1:66:
                    7e:20:d5:d8:49:53:ff:fd:b1:76:c9:a8:ee:38:da:
                    0c:14:70:14:c7:83:dd:72:07:b0:48:3c:e7:f6:aa:
                    24:74:4c:d2:0a:c0:bf:3a:36:9b:e5:3e:d1:ff:3a:
                    22:01:2f:49:9f:16:21:ee:94:1c:59:85:d6:8e:18:
                    40:01:5f:ab:e8:bb:2f:cd:b5:96:73:23:64:95:27:
                    7b:66:d9:7c:9d:57:56:8e:a0:27:1a:69:c1:9b:b9:
                    d4:25:0a:22:13:28:09:4a:a6:34:56:c9:4d:8e:42:
                    1c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A9:DD:AE:8A:E0:51:A4:C8:8F:69:4A:BF:9E:2C:7C:83:7F:3E:F6
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6d1788dc-bbfb-4182-987f-b9ef7e24f3b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:26:54:f5:24:53:1f:07:a5:8b:b2:43:26:e9:30:d9:df:cc:
         63:33:c2:f9:a4:d2:4a:a1:07:c9:35:dc:01:8e:e6:b3:6e:34:
         69:0f:1d:2a:2d:6f:81:c2:55:34:f0:a0:1c:9a:5a:bc:e3:8c:
         d6:5f:c2:f8:33:83:16:36:9f:e0:ef:e4:b9:f0:90:2e:13:27:
         34:09:9e:57:d7:8e:1e:61:46:59:a7:3e:cc:ab:e6:be:f4:04:
         99:18:d4:8d:8f:d9:a0:d6:08:f3:ec:ed:b4:36:89:28:2e:c3:
         31:b5:f8:21:e4:c3:a2:b2:41:b2:74:71:09:10:75:0d:00:2d:
         fa:52:f2:89:89:21:ec:a3:9f:85:f9:5b:16:c7:ed:f0:26:24:
         c7:56:3c:3c:dd:eb:e0:84:6d:f0:af:38:b4:33:1b:a3:9e:66:
         e3:2f:18:83:75:3a:62:4e:89:ac:b5:1a:15:1c:01:8f:1e:9b:
         69:c5:9c:b8:82:27:2c:71:cf:6c:81:eb:6e:2b:49:77:33:ef:
         6c:7c:20:b3:cf:db:d3:26:27:a0:b1:b8:d3:6e:18:fb:80:49:
         bb:9c:4d:cc:71:b4:d2:19:33:36:ed:2b:a8:27:ad:dc:56:13:
         dd:9c:f3:16:f7:f5:10:28:6f:60:95:f5:10:78:25:17:e9:9e:
         c3:37:8f:dc
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIULXWb4VuYA+nAvUb1XMzBfIuoWmowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMTEyMDAwMDAwWhcNMjIxMTE1MjM1OTU5
WjCBpTFJMEcGA1UEBRNAMTlkOWU2YjMyOGUwZWE2OGM3MzM0MjkxMWEzZGM1Mzc4
MDA4NjgxMTJmMjAxNjgxYTIxZDhhZjFiM2U2ZjU4OTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJn1Gq+E9K2TUxtX3jWTLW8Z8m4RUDhIThELg5HgkJdIE/3h2XZO
ExJ0ShQ5+i5r8hlV7UrQHGHykOGebMSsTkQlm3FQ/VpjbUTG7CbJ+hdfpJnsHJTh
utRCNsrjHSOVEg3hB/EKRkhn3pbGNNxlfxRBz0LY3mDZBM5khBPn/y7cqbq2jGyO
TL6DlDNEUMQPj7mq99FmfiDV2ElT//2xdsmo7jjaDBRwFMeD3XIHsEg85/aqJHRM
0grAvzo2m+U+0f86IgEvSZ8WIe6UHFmF1o4YQAFfq+i7L821lnMjZJUne2bZfJ1X
Vo6gJxppwZu51CUKIhMoCUqmNFbJTY5CHCUCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBR2qd2uiuBRpMiPaUq/nix8g38+9jAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNmQxNzg4ZGMtYmJmYi00MTgyLTk4N2YtYjllZjdlMjRmM2I2LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABYmVPUkUx8HpYuy
QybpMNnfzGMzwvmk0kqhB8k13AGO5rNuNGkPHSotb4HCVTTwoByaWrzjjNZfwvgz
gxY2n+Dv5LnwkC4TJzQJnlfXjh5hRlmnPsyr5r70BJkY1I2P2aDWCPPs7bQ2iSgu
wzG1+CHkw6KyQbJ0cQkQdQ0ALfpS8omJIeyjn4X5WxbH7fAmJMdWPDzd6+CEbfCv
OLQzG6OeZuMvGIN1OmJOiay1GhUcAY8em2nFnLiCJyxxz2yB624rSXcz72x8ILPP
29MmJ6CxuNNuGPuASbucTcxxtNIZMzbtK6gnrdxWE92c8xb39RAob2CV9RB4JRfp
nsM3j9w=
-----END CERTIFICATE-----