Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b6401c43-d846-47b5-9481-3afb8e52e9a4.roa
File:                     b6401c43-d846-47b5-9481-3afb8e52e9a4.roa (raw, json)
Hash identifier:          ks/qhX/AZW7MHTBGk3Vke7f16fQkWX7nNDWZuKUSTeg=
Subject key identifier:   CF:A8:2C:DD:C3:53:62:42:EB:8B:3B:68:C6:65:E9:1C:85:F8:CD:18
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       6AD4E491A5FFD60E87F3085429C4DED12BBCBD78
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b6401c43-d846-47b5-9481-3afb8e52e9a4.roa
Signing time:             Fri 29 Jul 2022 00:00:00 +0000
ROA not before:           Fri 29 Jul 2022 00:00:00 +0000
ROA not after:            Mon 01 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d4:e4:91:a5:ff:d6:0e:87:f3:08:54:29:c4:de:d1:2b:bc:bd:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jul 29 00:00:00 2022 GMT
            Not After : Aug  1 23:59:59 2022 GMT
        Subject: serialNumber=2e8102329c1ac34882779a921df4d7e641370946d4a87cbd24296eb213eb33c7, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a6:6c:d8:44:3c:83:ec:29:38:5a:96:27:4c:
                    bf:c3:28:28:35:e8:41:14:88:46:12:1b:18:43:39:
                    8d:8e:15:da:91:b7:db:f8:63:c8:04:0b:37:e5:8f:
                    0d:3d:49:86:fd:10:48:63:1e:18:bd:c8:04:d3:c2:
                    da:af:c3:4e:b7:40:11:ba:5b:4f:e8:c1:27:1d:03:
                    6b:60:43:df:83:a5:78:14:66:ed:c7:e9:2d:c5:31:
                    c7:8a:71:e4:b1:98:62:c4:3f:e3:31:24:24:14:ea:
                    28:ab:5c:5d:b7:ce:61:0a:7d:df:40:9b:67:c6:ae:
                    80:22:2d:22:e1:6f:64:a0:d3:a2:90:47:bf:d4:61:
                    5b:bb:2b:fc:6d:80:ae:0b:90:e8:e6:12:25:39:f4:
                    d1:18:70:46:82:02:bd:57:63:b5:43:7f:49:62:aa:
                    8e:11:a5:df:6e:0d:f1:65:37:07:f0:37:d4:8a:e5:
                    06:62:04:ca:42:b3:d2:14:58:67:33:04:29:4a:4d:
                    8f:83:2d:91:f7:b8:d1:2c:38:a1:02:20:cc:af:ef:
                    c8:7d:fd:6c:51:eb:6c:3e:38:d1:52:50:5e:33:39:
                    a4:c5:1c:55:fc:e1:fb:b6:44:0c:d9:be:d3:d3:6d:
                    06:48:f3:29:02:a6:93:aa:f3:c2:4d:1c:e1:46:08:
                    76:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A8:2C:DD:C3:53:62:42:EB:8B:3B:68:C6:65:E9:1C:85:F8:CD:18
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b6401c43-d846-47b5-9481-3afb8e52e9a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:40:82:ff:16:fe:16:40:da:e6:a6:64:8e:ff:02:64:cc:08:
         c5:ef:46:06:ce:6a:36:6d:71:19:60:e1:3a:d2:4f:7d:e1:e9:
         1b:ba:42:d1:ca:1e:84:bf:cf:dc:c8:31:73:04:ba:87:20:af:
         e0:cc:aa:14:72:b5:78:b5:e2:55:fb:5b:01:c6:e7:e6:b0:ee:
         7d:b8:f9:15:f4:8c:7a:f1:f4:f0:ec:37:b7:f7:60:d6:76:ae:
         5e:0e:60:1e:99:c6:f1:4e:02:a5:c1:0f:71:47:46:bc:af:10:
         14:66:d1:20:fe:d5:f9:9a:0f:b1:1f:d6:99:af:7c:39:1a:05:
         c1:b4:d1:82:5d:72:a0:dc:4e:16:18:08:fe:f3:6e:82:be:02:
         2a:19:bf:0b:eb:12:2e:10:e1:3e:ba:9e:81:42:36:49:e6:7e:
         9d:cf:50:b4:73:33:4c:09:95:3d:0f:63:8e:4e:c9:56:3e:4d:
         0a:6f:7a:76:93:d5:1b:69:21:88:d7:17:75:b7:64:9d:46:54:
         a4:85:bb:c6:1d:0a:2a:39:7e:80:5f:5f:6b:8d:13:d7:d4:d9:
         68:9a:3a:ec:81:be:af:26:cf:83:ac:a9:6f:ad:30:e4:2a:96:
         4b:3a:d9:78:c4:96:6e:51:28:bd:01:08:b2:c7:73:b4:a4:e7:
         7b:e6:35:ba
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUatTkkaX/1g6H8whUKcTe0Su8vXgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIwNzI5MDAwMDAwWhcNMjIwODAxMjM1OTU5
WjCBpTFJMEcGA1UEBRNAMmU4MTAyMzI5YzFhYzM0ODgyNzc5YTkyMWRmNGQ3ZTY0
MTM3MDk0NmQ0YTg3Y2JkMjQyOTZlYjIxM2ViMzNjNzEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ6mbNhEPIPsKThalidMv8MoKDXoQRSIRhIbGEM5jY4V2pG32/hj
yAQLN+WPDT1Jhv0QSGMeGL3IBNPC2q/DTrdAEbpbT+jBJx0Da2BD34OleBRm7cfp
LcUxx4px5LGYYsQ/4zEkJBTqKKtcXbfOYQp930CbZ8augCItIuFvZKDTopBHv9Rh
W7sr/G2ArguQ6OYSJTn00RhwRoICvVdjtUN/SWKqjhGl324N8WU3B/A31IrlBmIE
ykKz0hRYZzMEKUpNj4Mtkfe40Sw4oQIgzK/vyH39bFHrbD440VJQXjM5pMUcVfzh
+7ZEDNm+09NtBkjzKQKmk6rzwk0c4UYIdnkCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTPqCzdw1NiQuuLO2jGZekchfjNGDAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvYjY0MDFjNDMtZDg0Ni00N2I1LTk0ODEtM2FmYjhlNTJlOWE0LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBALRAgv8W/hZA2uam
ZI7/AmTMCMXvRgbOajZtcRlg4TrST33h6Ru6QtHKHoS/z9zIMXMEuocgr+DMqhRy
tXi14lX7WwHG5+aw7n24+RX0jHrx9PDsN7f3YNZ2rl4OYB6ZxvFOAqXBD3FHRryv
EBRm0SD+1fmaD7Ef1pmvfDkaBcG00YJdcqDcThYYCP7zboK+AioZvwvrEi4Q4T66
noFCNknmfp3PULRzM0wJlT0PY45OyVY+TQpvenaT1RtpIYjXF3W3ZJ1GVKSFu8Yd
Cio5foBfX2uNE9fU2WiaOuyBvq8mz4OsqW+tMOQqlks62XjElm5RKL0BCLLHc7Sk
53vmNbo=
-----END CERTIFICATE-----