Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7fd18654-e8e7-43b3-b183-ded4b484ba05.roa
File:                     7fd18654-e8e7-43b3-b183-ded4b484ba05.roa (raw, json)
Hash identifier:          sEZoPGqALYYNMwNnFxhyJt8um6xZ8cuKUfcoDgmfUJ0=
Subject key identifier:   EF:08:A5:70:EC:DD:A3:2F:92:5D:C8:7D:0A:2C:9B:5B:FF:EE:9D:37
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       771723755766E8F34BC3E23EAB3E23CE1BDC93DE
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7fd18654-e8e7-43b3-b183-ded4b484ba05.roa
Signing time:             Tue 27 Dec 2022 00:00:00 +0000
ROA not before:           Tue 27 Dec 2022 00:00:00 +0000
ROA not after:            Fri 30 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:17:23:75:57:66:e8:f3:4b:c3:e2:3e:ab:3e:23:ce:1b:dc:93:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 27 00:00:00 2022 GMT
            Not After : Dec 30 23:59:59 2022 GMT
        Subject: serialNumber=85f6472324436366976e6853bd673797869b44652494299e0647ce5294aadbde, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8b:33:33:2b:77:ed:cf:f4:39:ff:4b:1a:bd:
                    2c:76:8f:64:9b:91:3b:62:01:3a:a9:f7:0d:95:cd:
                    d2:77:78:ac:84:76:ff:6a:69:8a:38:2f:bd:98:e1:
                    45:37:1b:8f:c9:72:b3:b7:fb:9d:d8:4f:38:5b:d1:
                    00:80:94:86:12:b2:79:48:00:9e:39:0e:ff:57:6b:
                    69:33:85:87:a7:8c:00:2e:7d:ac:cd:c1:f4:73:57:
                    05:d3:32:17:4d:69:45:94:04:40:6e:1a:f5:96:47:
                    08:6a:ed:df:99:38:98:73:7c:2c:b3:46:34:71:be:
                    8a:ac:d1:18:44:f9:8a:76:ad:e1:da:18:59:79:4d:
                    0b:a9:7f:4f:dd:c1:4b:47:f6:ee:62:f9:e9:fa:3a:
                    1d:5b:7e:39:a0:62:c8:18:f7:72:42:05:3b:77:e9:
                    45:c0:75:0f:ba:a5:a1:ec:26:71:7a:55:6d:a3:d2:
                    94:56:ae:df:37:d7:04:ff:d1:8a:e7:63:12:69:ed:
                    29:e2:1f:1f:47:7f:bd:53:36:27:bc:7c:47:6e:76:
                    9d:2b:58:5f:4c:98:2a:bd:06:c4:61:6a:5a:dd:44:
                    a8:79:b9:be:8d:82:fa:f9:63:0a:42:5a:db:0e:45:
                    a4:14:a9:61:d5:81:1d:6c:f9:bb:97:9b:9b:6d:c3:
                    c6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:08:A5:70:EC:DD:A3:2F:92:5D:C8:7D:0A:2C:9B:5B:FF:EE:9D:37
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7fd18654-e8e7-43b3-b183-ded4b484ba05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:7e:3e:a2:a4:7d:f0:97:b4:af:1a:47:9f:b1:b9:e0:8d:a8:
         e0:a0:88:a9:72:e5:e6:ba:8c:1a:a9:14:10:e3:06:bf:4f:47:
         21:99:00:04:d1:1a:f4:18:43:51:55:b7:b1:33:6d:da:af:56:
         bb:8c:10:5c:8b:86:2c:6e:ec:bc:f3:ef:84:77:d6:27:3f:fc:
         50:e8:30:84:1d:4d:df:07:ed:cd:94:54:96:67:b5:ed:a9:9b:
         65:23:ca:08:df:c6:f5:f9:d8:1b:90:b6:10:c6:7d:e0:44:36:
         16:14:a1:18:93:4d:f8:6e:37:6c:3e:53:27:6c:2f:25:c7:b0:
         81:e9:08:1f:b8:a7:37:cb:e8:44:f3:18:37:f7:84:9b:5f:cf:
         9d:c5:09:f0:a6:d0:d6:97:a1:95:3c:13:ce:86:5a:0e:d7:04:
         87:08:f9:34:09:2b:ef:50:85:55:a5:39:7c:01:87:40:97:25:
         cf:7e:dc:7b:4a:7d:34:b6:22:e7:69:61:d3:ee:70:ec:79:41:
         3f:77:69:97:10:91:36:c3:16:67:45:78:5a:5e:e2:0e:03:cf:
         5f:12:4b:14:60:a3:88:b2:b5:44:df:b7:b2:01:5f:c3:34:c4:
         50:cb:ec:ef:2e:2b:12:61:af:0e:c0:b9:55:f3:b5:20:f9:01:
         70:56:32:f0
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUdxcjdVdm6PNLw+I+qz4jzhvck94wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMjI3MDAwMDAwWhcNMjIxMjMwMjM1OTU5
WjCBpTFJMEcGA1UEBRNAODVmNjQ3MjMyNDQzNjM2Njk3NmU2ODUzYmQ2NzM3OTc4
NjliNDQ2NTI0OTQyOTllMDY0N2NlNTI5NGFhZGJkZTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALmLMzMrd+3P9Dn/Sxq9LHaPZJuRO2IBOqn3DZXN0nd4rIR2/2pp
ijgvvZjhRTcbj8lys7f7ndhPOFvRAICUhhKyeUgAnjkO/1draTOFh6eMAC59rM3B
9HNXBdMyF01pRZQEQG4a9ZZHCGrt35k4mHN8LLNGNHG+iqzRGET5inat4doYWXlN
C6l/T93BS0f27mL56fo6HVt+OaBiyBj3ckIFO3fpRcB1D7qloewmcXpVbaPSlFau
3zfXBP/RiudjEmntKeIfH0d/vVM2J7x8R252nStYX0yYKr0GxGFqWt1EqHm5vo2C
+vljCkJa2w5FpBSpYdWBHWz5u5ebm23DxtcCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTvCKVw7N2jL5JdyH0KLJtb/+6dNzAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvN2ZkMTg2NTQtZThlNy00M2IzLWIxODMtZGVkNGI0ODRiYTA1LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKF+PqKkffCXtK8a
R5+xueCNqOCgiKly5ea6jBqpFBDjBr9PRyGZAATRGvQYQ1FVt7EzbdqvVruMEFyL
hixu7Lzz74R31ic//FDoMIQdTd8H7c2UVJZnte2pm2UjygjfxvX52BuQthDGfeBE
NhYUoRiTTfhuN2w+UydsLyXHsIHpCB+4pzfL6ETzGDf3hJtfz53FCfCm0NaXoZU8
E86GWg7XBIcI+TQJK+9QhVWlOXwBh0CXJc9+3HtKfTS2IudpYdPucOx5QT93aZcQ
kTbDFmdFeFpe4g4Dz18SSxRgo4iytUTft7IBX8M0xFDL7O8uKxJhrw7AuVXztSD5
AXBWMvA=
-----END CERTIFICATE-----