Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bb9e22d7-f5de-45e2-b32f-05bde61ab294.roa
File:                     bb9e22d7-f5de-45e2-b32f-05bde61ab294.roa (raw, json)
Hash identifier:          4fh0JuECwZIpPdil8EqDpGA4UbJg1L9plov0eVDRc/A=
Subject key identifier:   46:24:D3:6F:93:73:6F:83:E0:F8:8A:AF:EF:A8:24:8B:6A:73:38:C5
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       5335DD70C54F11BC131DE7C4149824D56083D2BD
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bb9e22d7-f5de-45e2-b32f-05bde61ab294.roa
Signing time:             Wed 30 Nov 2022 00:00:00 +0000
ROA not before:           Wed 30 Nov 2022 00:00:00 +0000
ROA not after:            Sat 03 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:35:dd:70:c5:4f:11:bc:13:1d:e7:c4:14:98:24:d5:60:83:d2:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Nov 30 00:00:00 2022 GMT
            Not After : Dec  3 23:59:59 2022 GMT
        Subject: serialNumber=1ca6bcc959e9cae5a99587184b2f483c18b9aebf140f3659f9992b6abceacffa, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1b:34:22:ff:03:bd:9a:c6:2f:a5:d0:4e:cd:
                    aa:29:0a:5b:f4:b3:74:9a:26:44:f6:8f:9e:6d:0f:
                    e2:b5:74:58:11:f9:5f:6c:0d:81:93:8c:ee:1c:35:
                    f5:ac:de:2b:9c:1f:bd:e6:a8:fe:d3:13:81:40:76:
                    b0:39:b5:c6:91:0c:a2:31:45:b5:9a:82:3e:d2:92:
                    6d:63:fb:88:29:e5:7b:17:ec:71:fe:47:06:b2:c3:
                    0b:cb:1e:4c:5a:3a:9a:df:20:8c:2e:f3:10:63:d4:
                    ee:0f:78:51:5f:a2:3c:2f:28:e9:3f:06:09:1b:b7:
                    b5:59:4b:13:d0:ab:ac:de:bc:d0:35:c9:90:e6:c7:
                    23:0d:1a:f0:4d:83:4d:a5:59:92:4f:90:f6:53:e1:
                    76:0a:e0:62:47:69:47:5c:6f:98:f4:c6:6f:42:60:
                    cf:e3:41:7f:30:c0:68:dc:e8:c2:27:cf:46:bc:b1:
                    83:45:b1:90:35:c8:1e:b7:31:70:27:5e:be:4b:84:
                    1f:3b:79:f6:4a:26:c8:da:e7:25:14:21:3d:d4:ec:
                    a1:51:72:37:6d:68:d6:b4:52:32:7c:7c:80:c1:d0:
                    3b:68:f8:76:ba:fa:cb:a3:71:a8:a8:ee:57:12:81:
                    b3:af:1e:a4:4c:58:95:4a:cd:2b:7c:67:9f:68:f1:
                    60:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:24:D3:6F:93:73:6F:83:E0:F8:8A:AF:EF:A8:24:8B:6A:73:38:C5
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bb9e22d7-f5de-45e2-b32f-05bde61ab294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:9d:28:e8:4c:b1:e1:af:1f:52:53:81:83:0a:fd:c4:64:2e:
         ea:d6:d7:1d:01:b0:b5:59:2d:d1:68:fc:19:13:c3:64:71:64:
         91:df:ce:5c:5c:80:05:84:de:a7:73:9e:89:57:80:67:d6:07:
         59:5f:a9:a9:1f:51:10:48:38:84:e0:2b:ab:aa:f5:53:69:ea:
         55:32:4e:9f:86:a4:1d:c0:18:c6:8f:ea:42:55:7e:1d:6e:e1:
         71:2f:1f:15:d1:c1:e8:5b:82:b9:bd:c5:33:75:0a:c1:32:a3:
         d0:30:13:98:d5:e9:0b:34:2e:1f:ba:50:75:82:dd:fd:48:66:
         2a:8b:f7:36:f4:27:78:6e:7e:fa:e7:a0:0d:ce:cc:dc:a4:0b:
         20:e0:af:6d:a4:5a:e7:bf:d2:ed:45:83:2b:35:2b:67:cb:2f:
         77:05:16:da:61:07:ad:08:bf:1c:68:45:74:ef:ce:3c:ba:11:
         1f:5b:60:86:ab:45:ef:25:da:70:5f:79:79:8d:75:d2:68:36:
         eb:58:70:1e:5a:24:ab:01:22:02:ef:f0:f5:89:96:ad:38:b0:
         94:93:69:cb:12:4d:44:bd:13:1a:19:6d:2f:58:3d:3f:36:4b:
         22:79:1c:46:f3:b0:f9:9e:36:c2:14:93:3a:2d:84:af:2a:18:
         ad:5c:19:23
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUUzXdcMVPEbwTHefEFJgk1WCD0r0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMTMwMDAwMDAwWhcNMjIxMjAzMjM1OTU5
WjCBpTFJMEcGA1UEBRNAMWNhNmJjYzk1OWU5Y2FlNWE5OTU4NzE4NGIyZjQ4M2Mx
OGI5YWViZjE0MGYzNjU5Zjk5OTJiNmFiY2VhY2ZmYTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJYbNCL/A72axi+l0E7NqikKW/SzdJomRPaPnm0P4rV0WBH5X2wN
gZOM7hw19azeK5wfveao/tMTgUB2sDm1xpEMojFFtZqCPtKSbWP7iCnlexfscf5H
BrLDC8seTFo6mt8gjC7zEGPU7g94UV+iPC8o6T8GCRu3tVlLE9CrrN680DXJkObH
Iw0a8E2DTaVZkk+Q9lPhdgrgYkdpR1xvmPTGb0Jgz+NBfzDAaNzowifPRryxg0Wx
kDXIHrcxcCdevkuEHzt59komyNrnJRQhPdTsoVFyN21o1rRSMnx8gMHQO2j4drr6
y6NxqKjuVxKBs68epExYlUrNK3xnn2jxYD0CAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRGJNNvk3Nvg+D4iq/vqCSLanM4xTAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvYmI5ZTIyZDctZjVkZS00NWUyLWIzMmYtMDViZGU2MWFiMjk0LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJOdKOhMseGvH1JT
gYMK/cRkLurW1x0BsLVZLdFo/BkTw2RxZJHfzlxcgAWE3qdznolXgGfWB1lfqakf
URBIOITgK6uq9VNp6lUyTp+GpB3AGMaP6kJVfh1u4XEvHxXRwehbgrm9xTN1CsEy
o9AwE5jV6Qs0Lh+6UHWC3f1IZiqL9zb0J3hufvrnoA3OzNykCyDgr22kWue/0u1F
gys1K2fLL3cFFtphB60IvxxoRXTvzjy6ER9bYIarRe8l2nBfeXmNddJoNutYcB5a
JKsBIgLv8PWJlq04sJSTacsSTUS9ExoZbS9YPT82SyJ5HEbzsPmeNsIUkzothK8q
GK1cGSM=
-----END CERTIFICATE-----