Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/97aeacaa-83d9-45a2-a5d0-4103d0f015cb.roa
File:                     97aeacaa-83d9-45a2-a5d0-4103d0f015cb.roa (raw, json)
Hash identifier:          pts/OFU1cWXG1uBhuJttfOivX9mrdCBF2WdPqVoFghI=
Subject key identifier:   F7:69:FD:F4:99:94:C1:BC:6A:D9:97:0C:C4:01:2D:E2:9D:A3:DB:97
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0D7E2E89B3F7836C4516475662C233374BC8E03B
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/97aeacaa-83d9-45a2-a5d0-4103d0f015cb.roa
Signing time:             Tue 06 Dec 2022 00:00:00 +0000
ROA not before:           Tue 06 Dec 2022 00:00:00 +0000
ROA not after:            Fri 09 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:7e:2e:89:b3:f7:83:6c:45:16:47:56:62:c2:33:37:4b:c8:e0:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec  6 00:00:00 2022 GMT
            Not After : Dec  9 23:59:59 2022 GMT
        Subject: serialNumber=25354edfad50f8257ed3a50ec4414311d558667ddfba4913dfaa4b6ed4109f29, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:84:c6:c7:f0:10:ad:a3:82:9d:95:a6:e1:2e:
                    7a:ca:4e:a2:26:79:77:ea:85:5e:92:c2:94:8e:56:
                    66:04:90:69:0f:ed:91:8f:8e:d3:5c:a2:eb:d6:78:
                    03:19:86:be:2c:8d:0a:01:a9:be:32:e5:64:11:b5:
                    cb:cb:2f:06:fa:99:79:9b:fe:f8:41:b7:f8:0d:8e:
                    91:b4:ec:08:2d:e3:43:a9:60:5c:42:3b:44:62:47:
                    2e:e0:62:e7:82:23:40:68:c8:32:a6:f7:14:d2:bd:
                    e8:26:22:ea:3e:9e:b6:26:d1:d7:d4:b8:88:6f:4f:
                    4d:72:08:11:76:8a:55:a2:01:10:84:e3:6b:7e:cc:
                    72:26:b2:92:77:86:d7:39:c7:ec:7e:b1:9f:8a:73:
                    32:e1:91:b0:92:fa:72:69:83:df:fc:b6:dd:67:b3:
                    8d:81:05:a7:d1:7a:db:d5:b3:93:a6:64:af:90:c2:
                    89:0d:83:07:85:96:2a:94:a9:13:3c:5b:ae:83:cd:
                    12:45:5e:ad:df:b0:88:fe:58:41:fd:7f:ab:51:fb:
                    ff:4e:6d:1e:a1:43:0b:66:2f:8b:3d:84:ae:0a:63:
                    54:dc:00:06:82:29:df:f5:5a:96:38:02:34:91:51:
                    0d:58:5b:18:dd:da:4c:c2:c1:61:db:49:a8:2a:8c:
                    b8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:69:FD:F4:99:94:C1:BC:6A:D9:97:0C:C4:01:2D:E2:9D:A3:DB:97
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/97aeacaa-83d9-45a2-a5d0-4103d0f015cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:d7:ca:8c:41:25:9b:19:2c:f3:a3:c1:fc:a5:ef:fb:41:27:
         ca:eb:f9:26:42:f8:fc:d9:b8:e4:b1:c0:2d:09:a5:80:15:02:
         b2:f5:c3:b7:1c:ab:82:55:75:9c:0f:f3:1c:a2:7f:a0:b3:b2:
         58:50:1a:22:db:e8:ac:dd:ec:f9:c6:f1:0f:ed:7d:25:a3:9a:
         70:f3:9b:b7:84:f0:b1:87:1e:5b:84:12:2a:72:65:2f:18:57:
         d3:c7:85:12:42:a2:4a:ab:3f:04:82:6d:bb:9e:ca:6d:7d:5d:
         4e:0a:ff:f9:84:5d:b8:bd:83:1c:e9:cf:61:01:87:aa:df:35:
         ef:03:37:90:14:9f:3b:3d:c0:66:81:de:2e:7a:eb:a7:56:84:
         40:19:94:ed:78:63:78:16:49:47:b4:cb:e1:f9:b3:cd:19:70:
         e8:91:e9:b5:c6:3e:f8:49:52:41:14:28:d7:0e:36:58:60:dd:
         dc:64:d2:48:69:98:8d:6e:7b:f1:82:3b:e6:4a:d1:6a:56:99:
         3a:ee:be:b9:37:8b:99:02:95:df:7d:90:1c:d6:31:0f:c4:4f:
         38:ac:54:a1:0c:ab:40:61:98:89:9b:cc:17:57:53:cf:32:d0:
         7d:40:32:81:43:30:2c:0c:87:b6:df:8c:8f:6c:dc:64:b2:ad:
         59:cf:eb:bd
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUDX4uibP3g2xFFkdWYsIzN0vI4DswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMjA2MDAwMDAwWhcNMjIxMjA5MjM1OTU5
WjCBpTFJMEcGA1UEBRNAMjUzNTRlZGZhZDUwZjgyNTdlZDNhNTBlYzQ0MTQzMTFk
NTU4NjY3ZGRmYmE0OTEzZGZhYTRiNmVkNDEwOWYyOTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMWExsfwEK2jgp2VpuEuespOoiZ5d+qFXpLClI5WZgSQaQ/tkY+O
01yi69Z4AxmGviyNCgGpvjLlZBG1y8svBvqZeZv++EG3+A2OkbTsCC3jQ6lgXEI7
RGJHLuBi54IjQGjIMqb3FNK96CYi6j6etibR19S4iG9PTXIIEXaKVaIBEITja37M
ciaykneG1znH7H6xn4pzMuGRsJL6cmmD3/y23WezjYEFp9F629Wzk6Zkr5DCiQ2D
B4WWKpSpEzxbroPNEkVerd+wiP5YQf1/q1H7/05tHqFDC2Yviz2ErgpjVNwABoIp
3/ValjgCNJFRDVhbGN3aTMLBYdtJqCqMuJMCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBT3af30mZTBvGrZlwzEAS3inaPblzAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvOTdhZWFjYWEtODNkOS00NWEyLWE1ZDAtNDEwM2QwZjAxNWNiLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABTXyoxBJZsZLPOj
wfyl7/tBJ8rr+SZC+PzZuOSxwC0JpYAVArL1w7ccq4JVdZwP8xyif6CzslhQGiLb
6Kzd7PnG8Q/tfSWjmnDzm7eE8LGHHluEEipyZS8YV9PHhRJCokqrPwSCbbueym19
XU4K//mEXbi9gxzpz2EBh6rfNe8DN5AUnzs9wGaB3i5666dWhEAZlO14Y3gWSUe0
y+H5s80ZcOiR6bXGPvhJUkEUKNcONlhg3dxk0khpmI1ue/GCO+ZK0WpWmTruvrk3
i5kCld99kBzWMQ/ETzisVKEMq0BhmImbzBdXU88y0H1AMoFDMCwMh7bfjI9s3GSy
rVnP670=
-----END CERTIFICATE-----