Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a6fac1f4-957a-4a84-a9d5-5e8e279708a0.roa
File:                     a6fac1f4-957a-4a84-a9d5-5e8e279708a0.roa (raw, json)
Hash identifier:          +Vppoi4zPDFz44mZaWMTvo/+O0GKl5RO68/n4oz4HF4=
Subject key identifier:   50:CE:FC:5B:3D:3A:DF:35:A0:CB:EA:3B:3E:8A:C9:D5:45:18:29:C1
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       31CDA53140D5BCBC856B586B7A252C09C0F4B36F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a6fac1f4-957a-4a84-a9d5-5e8e279708a0.roa
Signing time:             Thu 27 Oct 2022 00:00:00 +0000
ROA not before:           Thu 27 Oct 2022 00:00:00 +0000
ROA not after:            Sun 30 Oct 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:cd:a5:31:40:d5:bc:bc:85:6b:58:6b:7a:25:2c:09:c0:f4:b3:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct 27 00:00:00 2022 GMT
            Not After : Oct 30 23:59:59 2022 GMT
        Subject: serialNumber=9883333a0adb47ee327ffefc97d23aaf36cf1f43821cb2300ab5006080d7b2c5, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:66:23:7f:ed:33:e9:af:10:d8:3b:8e:c5:48:
                    57:4e:d1:25:a0:b4:87:40:de:49:aa:18:51:37:37:
                    c6:32:c5:85:70:3b:9a:da:76:09:a4:fe:f3:7b:c4:
                    ed:6c:f5:f9:b7:91:4e:14:9c:4e:6a:9b:76:0d:7e:
                    45:ef:ef:18:d4:cd:83:a8:16:34:7d:cb:21:22:93:
                    04:78:18:0f:de:21:9d:a6:1b:aa:ff:de:27:4c:44:
                    21:ea:3a:58:1c:64:d0:fa:aa:f3:e7:b4:5e:66:c0:
                    77:fe:b8:7c:60:e1:d2:0e:76:9a:5a:2c:0b:ca:cf:
                    53:98:6d:5e:2f:68:dc:b9:cd:d0:08:2b:dc:20:8b:
                    e5:d1:69:e9:fb:ef:b1:e6:f8:ec:a3:07:8e:91:94:
                    b8:83:3d:bb:4b:b0:bf:a8:00:a3:13:7d:a2:05:17:
                    f5:f4:e2:44:72:5f:d3:16:80:9a:d1:0a:d4:24:ee:
                    af:d2:af:f1:87:be:c0:2b:70:b9:b8:58:3f:e2:a8:
                    22:28:9f:40:33:b8:ae:4c:7c:2c:ef:58:97:d4:c6:
                    6b:46:be:cd:09:db:9a:28:04:c6:71:d9:ce:d8:dc:
                    ff:86:9c:b0:83:ac:cb:22:9a:bb:63:b5:2a:48:2b:
                    54:9b:3c:a7:9a:7a:8e:4e:c0:2c:7a:3d:82:75:53:
                    1e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CE:FC:5B:3D:3A:DF:35:A0:CB:EA:3B:3E:8A:C9:D5:45:18:29:C1
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a6fac1f4-957a-4a84-a9d5-5e8e279708a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:74:ca:ce:41:74:6c:c0:ac:5b:53:62:63:c6:e8:c7:e0:77:
         52:c1:c1:14:ea:8e:18:02:a1:ef:97:11:67:72:92:23:9f:32:
         34:5c:bb:b8:fe:b1:18:dd:8b:70:ef:00:ae:76:6f:55:18:b6:
         6d:32:1d:05:d3:79:aa:74:bc:c2:9b:43:34:8e:1c:f3:a0:69:
         f9:92:cc:43:3c:c4:0f:69:7f:09:3d:09:3d:66:34:97:6c:f7:
         34:fd:14:bf:3c:4a:df:e9:a6:56:9c:db:bc:8e:58:f7:d0:40:
         ed:02:16:23:62:50:29:00:f8:b2:9b:eb:62:fc:6a:59:b0:6c:
         ed:bc:47:33:60:fe:39:c1:2a:c6:8d:bc:4e:f9:fc:0d:82:f5:
         cb:57:cf:f7:ac:f0:f7:f1:44:e9:c2:30:f3:a9:88:aa:95:6f:
         8d:e6:79:61:5f:d3:62:e3:2b:a6:05:0e:78:f2:6d:04:24:47:
         e1:c4:e6:51:08:07:9d:f7:fe:56:8c:29:c6:43:16:dd:39:1f:
         f4:98:34:28:b4:61:3e:1f:f0:af:ef:ce:e7:90:f3:3f:44:8f:
         b6:80:d2:af:03:17:e0:9b:80:70:43:52:e4:c7:3f:6b:ee:44:
         b6:93:66:5a:8b:7e:a9:2c:87:9c:b6:b8:1d:61:75:c2:a9:20:
         b5:1d:84:51
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUMc2lMUDVvLyFa1hreiUsCcD0s28wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMDI3MDAwMDAwWhcNMjIxMDMwMjM1OTU5
WjCBpTFJMEcGA1UEBRNAOTg4MzMzM2EwYWRiNDdlZTMyN2ZmZWZjOTdkMjNhYWYz
NmNmMWY0MzgyMWNiMjMwMGFiNTAwNjA4MGQ3YjJjNTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALBmI3/tM+mvENg7jsVIV07RJaC0h0DeSaoYUTc3xjLFhXA7mtp2
CaT+83vE7Wz1+beRThScTmqbdg1+Re/vGNTNg6gWNH3LISKTBHgYD94hnaYbqv/e
J0xEIeo6WBxk0Pqq8+e0XmbAd/64fGDh0g52mlosC8rPU5htXi9o3LnN0Agr3CCL
5dFp6fvvseb47KMHjpGUuIM9u0uwv6gAoxN9ogUX9fTiRHJf0xaAmtEK1CTur9Kv
8Ye+wCtwubhYP+KoIiifQDO4rkx8LO9Yl9TGa0a+zQnbmigExnHZztjc/4acsIOs
yyKau2O1KkgrVJs8p5p6jk7ALHo9gnVTHkkCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRQzvxbPTrfNaDL6js+isnVRRgpwTAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvYTZmYWMxZjQtOTU3YS00YTg0LWE5ZDUtNWU4ZTI3OTcwOGEwLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBALR0ys5BdGzArFtT
YmPG6Mfgd1LBwRTqjhgCoe+XEWdykiOfMjRcu7j+sRjdi3DvAK52b1UYtm0yHQXT
eap0vMKbQzSOHPOgafmSzEM8xA9pfwk9CT1mNJds9zT9FL88St/pplac27yOWPfQ
QO0CFiNiUCkA+LKb62L8almwbO28RzNg/jnBKsaNvE75/A2C9ctXz/es8PfxROnC
MPOpiKqVb43meWFf02LjK6YFDnjybQQkR+HE5lEIB533/laMKcZDFt05H/SYNCi0
YT4f8K/vzueQ8z9Ej7aA0q8DF+CbgHBDUuTHP2vuRLaTZlqLfqksh5y2uB1hdcKp
ILUdhFE=
-----END CERTIFICATE-----