Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9f8427f3-c3c1-422e-874d-547b18d9de65.roa
File:                     9f8427f3-c3c1-422e-874d-547b18d9de65.roa (raw, json)
Hash identifier:          2Epe129kcKMNtBbuBzsreeMdhFMjz3nduwlLtHTgow0=
Subject key identifier:   01:CB:15:8E:6D:48:C4:E7:5F:F1:75:05:76:29:97:FB:A8:6A:1B:15
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       695A7FF3C0CF10965384B47A84EE22D0DED4A1A0
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9f8427f3-c3c1-422e-874d-547b18d9de65.roa
Signing time:             Thu 04 Aug 2022 00:00:00 +0000
ROA not before:           Thu 04 Aug 2022 00:00:00 +0000
ROA not after:            Sun 07 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5a:7f:f3:c0:cf:10:96:53:84:b4:7a:84:ee:22:d0:de:d4:a1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug  4 00:00:00 2022 GMT
            Not After : Aug  7 23:59:59 2022 GMT
        Subject: serialNumber=4faa1ff20ecbea24b241e1d1044ebdd5e9d313176fe175f433a2fd645368f7dc, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:be:f2:f0:6a:2b:64:1b:59:06:1d:d5:2a:2e:
                    42:d5:49:f6:3f:d6:b4:b3:e8:d1:ea:20:01:a7:c5:
                    7e:ff:ad:5b:ca:e8:61:45:5c:74:ff:20:16:bd:c9:
                    53:09:5e:e2:ea:2b:49:b9:78:84:8f:1e:2b:93:28:
                    b8:db:03:08:30:55:7d:21:27:49:1a:ea:1d:b2:7e:
                    ce:c4:ef:f6:cb:6b:f8:b4:a9:a0:dd:99:3a:e9:55:
                    33:23:13:e7:8d:60:b4:49:56:6a:45:5a:39:c6:c2:
                    d9:d3:2e:9a:86:62:12:87:47:31:f6:89:48:1d:6d:
                    89:d0:e0:7b:e9:e3:7f:7c:8d:17:1a:cc:ea:b5:61:
                    0b:43:10:e1:29:ef:c0:34:92:b1:91:d4:ad:e6:d1:
                    cc:44:f9:8a:65:73:e3:b9:89:bc:71:58:27:88:cc:
                    b8:f9:a7:b1:5d:b3:80:45:a6:73:40:bb:9e:6d:be:
                    e2:b9:cb:f2:ea:75:fe:75:68:14:42:0d:d2:88:f5:
                    49:12:18:2c:0d:96:bb:5e:ac:c2:bb:0d:aa:ab:7b:
                    d0:b7:5d:f5:5f:11:46:66:5e:6d:58:1a:3d:30:2c:
                    df:2c:fd:40:8a:7b:98:be:36:12:43:c9:1d:f3:ab:
                    dc:d3:f2:a4:83:fc:20:1b:8a:3a:dc:f7:d4:e6:e1:
                    41:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CB:15:8E:6D:48:C4:E7:5F:F1:75:05:76:29:97:FB:A8:6A:1B:15
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9f8427f3-c3c1-422e-874d-547b18d9de65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:0e:66:c4:37:bd:8d:7e:6a:8f:ee:dd:e2:e9:58:61:f9:03:
         ec:0b:43:e8:31:e0:47:3e:14:d3:73:f7:31:88:69:d1:75:1b:
         05:0f:c3:e4:0c:36:d0:f5:c4:0f:99:43:c2:7b:cf:33:92:c4:
         d6:aa:f8:32:52:29:dc:fc:6e:af:62:84:0c:25:e0:f2:af:60:
         e8:fa:71:c5:c7:11:35:e7:3f:20:f0:03:ad:51:bc:af:3b:76:
         93:99:ce:d3:59:46:81:72:a0:04:af:06:89:c8:02:e4:49:ea:
         9d:14:80:31:dc:69:87:2e:6e:d3:7c:27:17:a9:67:0f:54:ed:
         56:fc:c9:a6:c0:ba:8d:0e:51:33:6d:6f:dd:56:4d:db:80:ab:
         bf:8d:76:30:af:fc:88:0c:48:1d:74:81:80:9f:72:b9:7e:13:
         36:e0:6e:29:b9:e3:bb:d0:02:bf:38:9e:96:36:e9:35:3a:49:
         a5:8a:61:87:d9:54:b0:5b:70:c0:ed:c4:60:c1:6b:ff:03:ee:
         29:67:5e:39:74:6b:98:a1:a1:b6:77:16:34:82:e9:05:29:ad:
         ee:9a:5c:dc:5c:68:a1:89:0b:2b:64:38:79:42:0d:f4:f5:d6:
         f0:d4:9c:73:6f:8b:81:76:3a:ca:c6:bc:8f:23:7b:c0:a1:72:
         b5:9e:21:8d
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUaVp/88DPEJZThLR6hO4i0N7UoaAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIwODA0MDAwMDAwWhcNMjIwODA3MjM1OTU5
WjCBpTFJMEcGA1UEBRNANGZhYTFmZjIwZWNiZWEyNGIyNDFlMWQxMDQ0ZWJkZDVl
OWQzMTMxNzZmZTE3NWY0MzNhMmZkNjQ1MzY4ZjdkYzEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJm+8vBqK2QbWQYd1SouQtVJ9j/WtLPo0eogAafFfv+tW8roYUVc
dP8gFr3JUwle4uorSbl4hI8eK5MouNsDCDBVfSEnSRrqHbJ+zsTv9str+LSpoN2Z
OulVMyMT541gtElWakVaOcbC2dMumoZiEodHMfaJSB1tidDge+njf3yNFxrM6rVh
C0MQ4SnvwDSSsZHUrebRzET5imVz47mJvHFYJ4jMuPmnsV2zgEWmc0C7nm2+4rnL
8up1/nVoFEIN0oj1SRIYLA2Wu16swrsNqqt70Ldd9V8RRmZebVgaPTAs3yz9QIp7
mL42EkPJHfOr3NPypIP8IBuKOtz31ObhQZkCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQByxWObUjE51/xdQV2KZf7qGobFTAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvOWY4NDI3ZjMtYzNjMS00MjJlLTg3NGQtNTQ3YjE4ZDlkZTY1LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHoOZsQ3vY1+ao/u
3eLpWGH5A+wLQ+gx4Ec+FNNz9zGIadF1GwUPw+QMNtD1xA+ZQ8J7zzOSxNaq+DJS
Kdz8bq9ihAwl4PKvYOj6ccXHETXnPyDwA61RvK87dpOZztNZRoFyoASvBonIAuRJ
6p0UgDHcaYcubtN8JxepZw9U7Vb8yabAuo0OUTNtb91WTduAq7+NdjCv/IgMSB10
gYCfcrl+Ezbgbim547vQAr84npY26TU6SaWKYYfZVLBbcMDtxGDBa/8D7ilnXjl0
a5ihobZ3FjSC6QUpre6aXNxcaKGJCytkOHlCDfT11vDUnHNvi4F2OsrGvI8je8Ch
crWeIY0=
-----END CERTIFICATE-----