Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7afe2fe6-6fb0-4f59-bf47-180abfed2470.roa
File:                     7afe2fe6-6fb0-4f59-bf47-180abfed2470.roa (raw, json)
Hash identifier:          PdJlolFPBF93rNC2SzQ3eSnfN6ZdPnxKIq+FwZkso70=
Subject key identifier:   82:01:62:F9:B2:C4:96:67:C4:94:C6:DF:D1:EC:92:11:93:73:26:F8
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3E5E23B6D4F41D5722D19F91FBB3CFB1148B9AB7
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7afe2fe6-6fb0-4f59-bf47-180abfed2470.roa
Signing time:             Mon 26 Sep 2022 00:00:00 +0000
ROA not before:           Mon 26 Sep 2022 00:00:00 +0000
ROA not after:            Thu 29 Sep 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:5e:23:b6:d4:f4:1d:57:22:d1:9f:91:fb:b3:cf:b1:14:8b:9a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Sep 26 00:00:00 2022 GMT
            Not After : Sep 29 23:59:59 2022 GMT
        Subject: serialNumber=579a5f6c32fc3853c1948355d40908f49c005b1b40ccf986e84cde3b36917af0, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:52:1d:2c:85:8d:dc:26:85:cd:a4:5a:fc:06:
                    88:81:8d:94:1c:55:df:44:25:89:53:fe:ad:71:af:
                    08:1e:9c:17:3b:ce:46:6f:c4:e9:6e:f5:02:8a:ca:
                    50:59:5b:42:8b:d4:8f:38:42:32:0b:7e:80:f2:49:
                    b2:8c:75:ed:8e:71:c8:b0:9b:23:47:97:72:43:2e:
                    87:82:74:05:fa:ea:30:33:6c:5e:a6:9b:da:9b:48:
                    b9:58:c1:09:3e:75:7d:ec:7c:c9:d2:6c:59:bb:da:
                    1d:ac:35:bc:d5:a8:df:49:8f:40:b6:c5:b5:03:5d:
                    08:94:75:e7:55:7d:f2:26:44:9c:a3:dc:cb:1e:16:
                    d0:93:ce:9c:b5:10:92:d0:33:77:7c:49:fd:4d:4e:
                    07:41:06:d5:45:a7:5b:84:25:79:0c:f9:b1:ed:67:
                    61:6c:08:77:d4:97:74:57:00:37:50:db:26:99:16:
                    42:cb:35:7e:f3:ec:40:69:15:75:85:46:27:af:e3:
                    21:bc:c7:5e:79:86:d6:17:84:cc:2c:e3:cf:c6:32:
                    24:3c:db:cf:ab:3c:f6:d7:3e:b6:95:15:82:bd:2a:
                    21:70:53:84:47:6e:ba:aa:3c:35:c6:e9:fe:9d:3f:
                    92:6d:12:14:18:30:04:3c:5d:3f:57:d0:7b:d7:07:
                    b1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:01:62:F9:B2:C4:96:67:C4:94:C6:DF:D1:EC:92:11:93:73:26:F8
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7afe2fe6-6fb0-4f59-bf47-180abfed2470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:fe:82:4b:b7:3b:16:19:f9:c8:08:46:d5:66:bb:09:35:02:
         96:19:e1:68:02:56:a0:03:52:2d:62:ce:fb:cb:94:69:c2:94:
         5d:35:e8:ff:5a:f9:39:3a:af:a8:71:a6:47:c8:09:b4:6d:2d:
         cc:11:2c:a1:de:73:cb:b4:28:86:6f:27:0f:c8:fe:3d:f5:6a:
         ab:88:dd:37:72:cb:f9:93:52:96:fb:fa:3b:cc:f9:6d:d9:b8:
         b2:03:66:84:06:1c:7f:a0:84:92:fc:1c:05:ef:d2:16:96:52:
         04:ee:97:b4:d1:09:0c:8b:7b:b3:d9:ad:e2:c3:b0:83:50:ab:
         bc:e7:2e:7d:58:61:0e:a1:91:c8:20:73:34:00:2e:6f:e8:ef:
         cc:9b:b8:f7:11:48:be:b7:2e:79:c2:d4:cf:20:70:02:a5:60:
         b4:b4:52:df:db:e1:5d:8f:c4:c1:01:28:4b:83:57:39:b2:99:
         46:9c:a5:72:9a:02:e8:e4:b7:bf:1b:55:87:ba:f6:de:f3:6e:
         2d:bf:f8:0e:24:54:da:42:f5:66:a1:5e:2f:ec:17:05:d1:29:
         e5:2f:ac:85:7a:48:0f:94:c4:02:96:1c:86:cf:23:15:5e:5f:
         56:75:6a:49:84:62:9e:ad:56:49:98:ec:a9:d0:fc:0b:0a:dc:
         68:9d:e9:8d
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUPl4jttT0HVci0Z+R+7PPsRSLmrcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIwOTI2MDAwMDAwWhcNMjIwOTI5MjM1OTU5
WjCBpTFJMEcGA1UEBRNANTc5YTVmNmMzMmZjMzg1M2MxOTQ4MzU1ZDQwOTA4ZjQ5
YzAwNWIxYjQwY2NmOTg2ZTg0Y2RlM2IzNjkxN2FmMDEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMtSHSyFjdwmhc2kWvwGiIGNlBxV30QliVP+rXGvCB6cFzvORm/E
6W71AorKUFlbQovUjzhCMgt+gPJJsox17Y5xyLCbI0eXckMuh4J0BfrqMDNsXqab
2ptIuVjBCT51fex8ydJsWbvaHaw1vNWo30mPQLbFtQNdCJR151V98iZEnKPcyx4W
0JPOnLUQktAzd3xJ/U1OB0EG1UWnW4QleQz5se1nYWwId9SXdFcAN1DbJpkWQss1
fvPsQGkVdYVGJ6/jIbzHXnmG1heEzCzjz8YyJDzbz6s89tc+tpUVgr0qIXBThEdu
uqo8Ncbp/p0/km0SFBgwBDxdP1fQe9cHsU0CAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBSCAWL5ssSWZ8SUxt/R7JIRk3Mm+DAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvN2FmZTJmZTYtNmZiMC00ZjU5LWJmNDctMTgwYWJmZWQyNDcwLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAFX+gku3OxYZ+cgI
RtVmuwk1ApYZ4WgCVqADUi1izvvLlGnClF016P9a+Tk6r6hxpkfICbRtLcwRLKHe
c8u0KIZvJw/I/j31aquI3Tdyy/mTUpb7+jvM+W3ZuLIDZoQGHH+ghJL8HAXv0haW
UgTul7TRCQyLe7PZreLDsINQq7znLn1YYQ6hkcggczQALm/o78ybuPcRSL63LnnC
1M8gcAKlYLS0Ut/b4V2PxMEBKEuDVzmymUacpXKaAujkt78bVYe69t7zbi2/+A4k
VNpC9WahXi/sFwXRKeUvrIV6SA+UxAKWHIbPIxVeX1Z1akmEYp6tVkmY7KnQ/AsK
3Gid6Y0=
-----END CERTIFICATE-----