Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a9651c34-4d88-4740-9513-84c09cef40a7.roa
File:                     a9651c34-4d88-4740-9513-84c09cef40a7.roa (raw, json)
Hash identifier:          hbH2rhu0rTJWkDG9t9UqhAP6xDEswJqtgzjTDYT9g6o=
Subject key identifier:   92:85:05:EA:16:12:0A:7F:C2:B3:44:72:9B:81:6B:3B:7F:28:A9:EE
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       03C87F2FF5519B900E844A3E9D80B9161BE99559
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a9651c34-4d88-4740-9513-84c09cef40a7.roa
Signing time:             Mon 19 Dec 2022 00:00:00 +0000
ROA not before:           Mon 19 Dec 2022 00:00:00 +0000
ROA not after:            Thu 22 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c8:7f:2f:f5:51:9b:90:0e:84:4a:3e:9d:80:b9:16:1b:e9:95:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 19 00:00:00 2022 GMT
            Not After : Dec 22 23:59:59 2022 GMT
        Subject: serialNumber=4c8ca3e57290da71817e5b384621863f3adf8b2f9425c1cdfaac1c760d3bb821, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:07:4e:0c:ed:26:c1:e2:fc:37:a3:79:30:be:
                    ef:47:e6:e7:76:7a:9a:fe:a8:11:ad:e7:b0:cd:c4:
                    63:2f:a6:63:2a:ce:76:ab:99:60:42:91:04:7b:9a:
                    77:7f:68:db:31:0b:cb:9e:62:59:db:1f:72:46:8e:
                    35:74:a4:bb:93:04:a8:20:03:f4:73:e9:a3:e2:82:
                    16:d0:43:61:80:8e:94:cf:56:c1:44:ac:1b:61:04:
                    67:57:0f:fe:58:00:32:db:c0:60:88:e8:af:bd:f7:
                    8e:b9:aa:c5:6e:2d:fd:c2:99:b0:07:70:2d:03:d8:
                    3a:3f:0c:e5:cb:bb:fd:11:22:b3:a1:08:8b:78:df:
                    a1:7a:d8:90:fb:e5:d5:e4:7d:0a:f1:77:3b:ec:91:
                    e2:80:ae:7b:d2:01:97:46:70:53:d2:bd:80:03:12:
                    67:de:20:8c:15:86:1c:26:74:d0:50:de:69:4c:ab:
                    70:ab:2a:41:32:d2:b9:21:b1:53:88:78:4a:17:99:
                    53:ec:7b:71:c7:16:da:d3:41:0d:4f:f3:9c:71:cc:
                    4e:43:1a:4f:4d:89:d5:8a:33:28:16:8b:81:dc:53:
                    6b:7c:a3:2b:94:f9:2a:c5:91:16:17:4a:f9:5c:9a:
                    1b:aa:8c:dc:24:78:a5:b1:1c:4d:28:cc:c2:d7:16:
                    b5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:85:05:EA:16:12:0A:7F:C2:B3:44:72:9B:81:6B:3B:7F:28:A9:EE
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a9651c34-4d88-4740-9513-84c09cef40a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:cd:47:a1:20:db:7d:eb:b2:69:ad:e5:51:bd:7a:29:84:23:
         6c:2f:7d:36:b5:e5:75:2b:5d:98:33:20:f7:08:aa:21:ef:76:
         31:55:0f:81:f2:91:d7:56:04:46:e9:3c:ee:54:4b:5e:96:79:
         28:27:d6:be:b5:27:53:6e:bc:f3:c5:68:58:98:8a:5b:08:69:
         e0:8b:98:c5:15:d9:58:a5:2a:db:06:96:4f:f5:a9:85:e8:eb:
         62:38:65:aa:e0:67:b1:17:24:b7:80:d2:dc:92:ed:43:75:65:
         71:b2:7a:32:3f:6a:83:7b:13:3a:d2:a7:47:bf:ad:ad:77:f8:
         d0:46:dd:20:79:85:5e:e1:d4:52:7a:f6:cc:60:22:c9:e0:4f:
         11:91:11:76:2d:37:c4:a9:f8:5c:4c:2c:c9:56:4e:71:49:2f:
         66:65:42:ca:43:86:93:7e:ea:85:e2:cd:47:9a:39:ab:46:2a:
         cd:66:a5:0a:93:1f:1a:e4:60:56:e0:7e:9a:16:28:43:0c:82:
         c0:69:4d:9a:e8:b4:96:7a:05:ca:f8:2a:34:2f:ef:9c:a4:6d:
         aa:c4:bf:c4:02:89:b6:00:64:b8:35:83:6e:d5:8e:d7:76:90:
         37:b0:4b:fd:c0:21:39:31:88:25:78:a5:68:5e:db:27:f2:53:
         b6:ae:85:36
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUA8h/L/VRm5AOhEo+nYC5FhvplVkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMjE5MDAwMDAwWhcNMjIxMjIyMjM1OTU5
WjCBpTFJMEcGA1UEBRNANGM4Y2EzZTU3MjkwZGE3MTgxN2U1YjM4NDYyMTg2M2Yz
YWRmOGIyZjk0MjVjMWNkZmFhYzFjNzYwZDNiYjgyMTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKwHTgztJsHi/DejeTC+70fm53Z6mv6oEa3nsM3EYy+mYyrOdquZ
YEKRBHuad39o2zELy55iWdsfckaONXSku5MEqCAD9HPpo+KCFtBDYYCOlM9WwUSs
G2EEZ1cP/lgAMtvAYIjor733jrmqxW4t/cKZsAdwLQPYOj8M5cu7/REis6EIi3jf
oXrYkPvl1eR9CvF3O+yR4oCue9IBl0ZwU9K9gAMSZ94gjBWGHCZ00FDeaUyrcKsq
QTLSuSGxU4h4SheZU+x7cccW2tNBDU/znHHMTkMaT02J1YozKBaLgdxTa3yjK5T5
KsWRFhdK+VyaG6qM3CR4pbEcTSjMwtcWtQECAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBSShQXqFhIKf8KzRHKbgWs7fyip7jAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvYTk2NTFjMzQtNGQ4OC00NzQwLTk1MTMtODRjMDljZWY0MGE3LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAFvNR6Eg233rsmmt
5VG9eimEI2wvfTa15XUrXZgzIPcIqiHvdjFVD4HykddWBEbpPO5US16WeSgn1r61
J1NuvPPFaFiYilsIaeCLmMUV2VilKtsGlk/1qYXo62I4ZargZ7EXJLeA0tyS7UN1
ZXGyejI/aoN7EzrSp0e/ra13+NBG3SB5hV7h1FJ69sxgIsngTxGREXYtN8Sp+FxM
LMlWTnFJL2ZlQspDhpN+6oXizUeaOatGKs1mpQqTHxrkYFbgfpoWKEMMgsBpTZro
tJZ6Bcr4KjQv75ykbarEv8QCibYAZLg1g27Vjtd2kDewS/3AITkxiCV4pWhe2yfy
U7auhTY=
-----END CERTIFICATE-----