Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6d284a47-c0fd-4670-9fce-5ffdac7f8024.roa
File:                     6d284a47-c0fd-4670-9fce-5ffdac7f8024.roa (raw, json)
Hash identifier:          tvoBytdZzGMEKb7oCUo4wfoGLlGr93lG1b5EhxafDTk=
Subject key identifier:   02:16:7A:79:35:80:AF:62:FA:5F:31:39:8F:B1:27:CC:C4:98:02:C6
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       4DCEB8257146B193DBF853B6FB29FCEEA3682114
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6d284a47-c0fd-4670-9fce-5ffdac7f8024.roa
Signing time:             Wed 14 Dec 2022 00:00:00 +0000
ROA not before:           Wed 14 Dec 2022 00:00:00 +0000
ROA not after:            Sat 17 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ce:b8:25:71:46:b1:93:db:f8:53:b6:fb:29:fc:ee:a3:68:21:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 14 00:00:00 2022 GMT
            Not After : Dec 17 23:59:59 2022 GMT
        Subject: serialNumber=323b4b255c5f3654d8b3f2cbe2a62f69644761384a4b85758836bba0c261c540, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:84:76:01:01:33:cd:51:68:82:66:25:c2:a8:
                    9f:2b:22:74:1b:ce:27:17:89:67:41:2a:8a:8d:a1:
                    57:40:7b:7b:75:af:6f:dc:d1:dd:b6:94:b9:63:62:
                    b0:db:fc:b0:2e:c8:67:60:04:d3:88:99:8b:f0:a8:
                    1c:40:e9:8e:fe:95:ab:df:94:18:8b:9b:7e:5f:42:
                    e8:18:e3:69:f7:2d:87:ed:a9:5c:5a:1d:f3:92:29:
                    62:d0:94:47:0c:27:68:13:34:0f:9a:2b:7a:73:57:
                    01:88:7d:1c:51:01:66:b8:a4:da:27:fe:3d:ad:3a:
                    fb:d3:78:66:6a:d9:d5:be:f0:29:5a:cf:a9:6d:6a:
                    0f:18:b9:35:1d:50:4f:e5:72:17:8c:27:d0:4c:db:
                    ad:0a:a7:61:b6:3f:da:12:d1:bd:b1:b8:84:90:5a:
                    f9:57:ed:17:e3:c7:f8:ee:61:b3:be:43:73:0e:6b:
                    a8:67:d6:e0:79:19:42:bd:4c:15:b2:6d:86:e4:59:
                    3f:36:a8:86:88:5e:cd:21:a3:96:51:15:cd:fc:56:
                    02:78:40:19:6b:79:8f:1f:59:03:14:0b:db:04:ab:
                    91:a1:86:9b:80:a7:76:64:9e:41:eb:6d:1f:e7:da:
                    26:fd:cf:b7:57:c5:c6:36:95:0b:08:ae:54:20:e1:
                    11:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:16:7A:79:35:80:AF:62:FA:5F:31:39:8F:B1:27:CC:C4:98:02:C6
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6d284a47-c0fd-4670-9fce-5ffdac7f8024.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:34:b6:79:35:aa:72:71:09:3a:d7:ba:9d:76:00:d3:a7:fb:
         26:bf:9d:0f:e7:54:82:b3:98:cb:df:30:81:13:73:7a:42:40:
         b6:e8:1f:8d:a5:8f:93:64:61:3b:51:c9:0f:4e:8e:76:55:9b:
         cb:e1:3f:cc:e0:56:c8:16:72:5f:09:f8:ba:fe:fd:17:7a:94:
         72:cc:0f:27:f2:d9:de:c9:55:a2:1f:e0:96:7c:0b:7b:4b:34:
         85:05:68:87:b6:0c:9b:6e:e6:a9:6b:2e:56:fa:43:40:7d:4c:
         bc:b8:2f:60:d1:9b:fa:94:ab:37:c7:26:b2:0b:3c:e8:30:99:
         e5:60:96:e6:5c:fb:ef:1f:26:ae:f6:27:70:f1:56:f5:d2:72:
         b6:62:5d:16:59:48:09:7a:14:e5:36:78:c1:6f:41:26:e5:c0:
         82:75:b6:c0:7f:ca:2b:e3:5f:78:0f:86:7d:37:ea:ef:b1:8b:
         a4:ad:eb:bc:b7:f2:85:5c:97:90:55:a1:60:62:97:06:b2:a4:
         f7:31:04:b8:b9:08:56:5f:29:6f:e8:03:9c:3c:57:34:46:f6:
         8f:ee:9a:5f:ea:16:d7:01:ee:88:b9:38:d0:30:fb:c3:4f:25:
         e1:6e:02:f4:64:95:7b:97:41:46:ae:ca:8d:c5:d2:ff:a4:64:
         ac:4e:c5:5a
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUTc64JXFGsZPb+FO2+yn87qNoIRQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMjE0MDAwMDAwWhcNMjIxMjE3MjM1OTU5
WjCBpTFJMEcGA1UEBRNAMzIzYjRiMjU1YzVmMzY1NGQ4YjNmMmNiZTJhNjJmNjk2
NDQ3NjEzODRhNGI4NTc1ODgzNmJiYTBjMjYxYzU0MDEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJOEdgEBM81RaIJmJcKonysidBvOJxeJZ0Eqio2hV0B7e3Wvb9zR
3baUuWNisNv8sC7IZ2AE04iZi/CoHEDpjv6Vq9+UGIubfl9C6Bjjafcth+2pXFod
85IpYtCURwwnaBM0D5orenNXAYh9HFEBZrik2if+Pa06+9N4ZmrZ1b7wKVrPqW1q
Dxi5NR1QT+VyF4wn0EzbrQqnYbY/2hLRvbG4hJBa+VftF+PH+O5hs75Dcw5rqGfW
4HkZQr1MFbJthuRZPzaohohezSGjllEVzfxWAnhAGWt5jx9ZAxQL2wSrkaGGm4Cn
dmSeQettH+faJv3Pt1fFxjaVCwiuVCDhEUkCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQCFnp5NYCvYvpfMTmPsSfMxJgCxjAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNmQyODRhNDctYzBmZC00NjcwLTlmY2UtNWZmZGFjN2Y4MDI0LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBALg0tnk1qnJxCTrX
up12ANOn+ya/nQ/nVIKzmMvfMIETc3pCQLboH42lj5NkYTtRyQ9OjnZVm8vhP8zg
VsgWcl8J+Lr+/Rd6lHLMDyfy2d7JVaIf4JZ8C3tLNIUFaIe2DJtu5qlrLlb6Q0B9
TLy4L2DRm/qUqzfHJrILPOgwmeVgluZc++8fJq72J3DxVvXScrZiXRZZSAl6FOU2
eMFvQSblwIJ1tsB/yivjX3gPhn036u+xi6St67y38oVcl5BVoWBilwaypPcxBLi5
CFZfKW/oA5w8VzRG9o/uml/qFtcB7oi5ONAw+8NPJeFuAvRklXuXQUauyo3F0v+k
ZKxOxVo=
-----END CERTIFICATE-----