Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b207e47a-4e19-47f9-ae56-a52462c32023.roa
File:                     b207e47a-4e19-47f9-ae56-a52462c32023.roa (raw, json)
Hash identifier:          GAtfC3a8lMdKu1NErbyQg3xHSs+jKMXhxqfQiv/V+AY=
Subject key identifier:   C5:7B:F5:44:BE:7E:BE:D2:44:F1:2F:51:BB:D7:A1:44:8B:4D:85:6D
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5C01F1840B5FBA98601A25510FD1884FF2E896CE
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b207e47a-4e19-47f9-ae56-a52462c32023.roa
Signing time:             Thu 08 Dec 2022 00:00:00 +0000
ROA not before:           Thu 08 Dec 2022 00:00:00 +0000
ROA not after:            Sun 11 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:01:f1:84:0b:5f:ba:98:60:1a:25:51:0f:d1:88:4f:f2:e8:96:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec  8 00:00:00 2022 GMT
            Not After : Dec 11 23:59:59 2022 GMT
        Subject: serialNumber=fb19b990ba333c7d4258f7b6485346b73797ff8c6703d176c1b3d7f677a575ec, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2e:83:97:11:3f:24:52:60:21:9b:ca:42:f5:
                    70:fb:fa:5d:40:67:30:83:80:6f:b4:54:d9:05:44:
                    2b:90:98:03:ad:73:ea:30:ca:50:43:96:9d:bd:d9:
                    79:0a:14:8b:49:84:8a:4c:93:c2:8b:e3:cf:5f:a9:
                    55:8d:83:3a:78:83:be:8b:6a:d5:41:93:45:7c:17:
                    70:5f:ea:81:bc:ff:ca:a2:2e:39:48:c5:44:68:33:
                    da:71:c2:40:82:24:22:ac:e5:40:af:47:b1:98:92:
                    0e:94:59:3a:87:37:38:4e:13:80:fb:17:a4:42:f6:
                    a6:be:d1:b1:50:2a:94:bb:12:6f:25:6d:60:19:49:
                    c9:a7:4a:c9:3a:15:04:07:7b:24:3b:c5:c8:33:2b:
                    de:42:cb:df:1f:6c:d9:df:35:89:6a:39:9d:a2:c7:
                    04:ad:b9:93:6f:4b:be:41:e3:19:de:7a:38:8c:65:
                    e2:54:b3:70:77:3c:44:34:29:27:65:2f:02:ee:ca:
                    ae:e9:02:a3:68:ad:9f:2e:2c:0d:42:86:aa:be:5c:
                    bf:2e:98:30:f3:dc:30:8d:a8:b2:13:b5:e3:bb:18:
                    ab:65:7a:95:57:e0:48:81:82:d6:9f:74:32:81:94:
                    22:96:70:8f:60:71:ae:3a:bb:06:c2:d0:81:3a:9b:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7B:F5:44:BE:7E:BE:D2:44:F1:2F:51:BB:D7:A1:44:8B:4D:85:6D
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b207e47a-4e19-47f9-ae56-a52462c32023.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:ae:f4:f5:40:ec:7c:06:43:8e:23:f8:9f:c8:96:05:3f:f5:
         bf:b1:0b:63:8f:cb:d3:16:64:86:d5:a3:43:f3:04:fa:12:15:
         d3:63:44:80:47:85:3d:4b:c8:08:c6:c8:7d:db:8a:84:52:24:
         41:6c:21:c4:0e:c8:f2:7c:3b:07:63:64:ca:02:c7:d7:96:d0:
         01:56:a9:4c:70:9c:a8:a5:df:f3:53:24:25:d9:fe:b5:f4:65:
         52:4a:99:8c:ee:04:b6:ab:85:20:0c:fb:51:31:4e:67:54:46:
         be:31:18:2e:d1:bf:2e:ac:dc:1f:53:87:b5:81:e0:cf:c8:b5:
         1f:7a:ad:00:0b:96:b3:c8:70:3e:22:6c:e4:29:e4:6d:aa:b0:
         cd:f4:78:8d:1f:81:63:7f:92:2b:5f:c5:14:39:cb:fd:ab:21:
         f3:d4:05:01:cc:b3:9a:c2:81:1a:9c:5f:bf:f0:05:29:32:b4:
         f5:ac:26:68:22:0e:85:66:a8:ed:78:d2:f4:e8:1e:8d:c7:93:
         95:0d:cb:d4:7e:e8:19:42:39:61:58:e1:f2:5e:10:66:8c:2e:
         1d:98:ac:f3:3b:6e:91:31:ae:b4:3a:96:97:09:2e:cf:e5:92:
         e3:da:d4:9e:55:f8:c6:65:26:0d:38:a2:88:35:91:5c:f3:c8:
         bb:c5:40:35
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUXAHxhAtfuphgGiVRD9GIT/Lols4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMjA4MDAwMDAwWhcNMjIxMjExMjM1OTU5
WjCBpTFJMEcGA1UEBRNAZmIxOWI5OTBiYTMzM2M3ZDQyNThmN2I2NDg1MzQ2Yjcz
Nzk3ZmY4YzY3MDNkMTc2YzFiM2Q3ZjY3N2E1NzVlYzEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJAug5cRPyRSYCGbykL1cPv6XUBnMIOAb7RU2QVEK5CYA61z6jDK
UEOWnb3ZeQoUi0mEikyTwovjz1+pVY2DOniDvotq1UGTRXwXcF/qgbz/yqIuOUjF
RGgz2nHCQIIkIqzlQK9HsZiSDpRZOoc3OE4TgPsXpEL2pr7RsVAqlLsSbyVtYBlJ
yadKyToVBAd7JDvFyDMr3kLL3x9s2d81iWo5naLHBK25k29LvkHjGd56OIxl4lSz
cHc8RDQpJ2UvAu7KrukCo2itny4sDUKGqr5cvy6YMPPcMI2oshO147sYq2V6lVfg
SIGC1p90MoGUIpZwj2Bxrjq7BsLQgTqbIAsCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTFe/VEvn6+0kTxL1G716FEi02FbTAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvYjIwN2U0N2EtNGUxOS00N2Y5LWFlNTYtYTUyNDYyYzMyMDIzLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACGu9PVA7HwGQ44j
+J/IlgU/9b+xC2OPy9MWZIbVo0PzBPoSFdNjRIBHhT1LyAjGyH3bioRSJEFsIcQO
yPJ8OwdjZMoCx9eW0AFWqUxwnKil3/NTJCXZ/rX0ZVJKmYzuBLarhSAM+1ExTmdU
Rr4xGC7Rvy6s3B9Th7WB4M/ItR96rQALlrPIcD4ibOQp5G2qsM30eI0fgWN/kitf
xRQ5y/2rIfPUBQHMs5rCgRqcX7/wBSkytPWsJmgiDoVmqO140vToHo3Hk5UNy9R+
6BlCOWFY4fJeEGaMLh2YrPM7bpExrrQ6lpcJLs/lkuPa1J5V+MZlJg04oog1kVzz
yLvFQDU=
-----END CERTIFICATE-----