Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d69f8d83-31fe-4f90-bfee-0280fb1ed21d.roa
File:                     d69f8d83-31fe-4f90-bfee-0280fb1ed21d.roa (raw, json)
Hash identifier:          I81HKfLdcOqpyu2wpV+NGSr9XQO4jy7UPdLADEIbO1M=
Subject key identifier:   5F:04:BC:5D:EF:EA:BE:08:F1:A2:92:38:63:E4:89:86:87:E9:A5:44
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       21675E930A9CEABA1051983998B7732EE72674CE
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d69f8d83-31fe-4f90-bfee-0280fb1ed21d.roa
Signing time:             Tue 30 Aug 2022 00:00:00 +0000
ROA not before:           Tue 30 Aug 2022 00:00:00 +0000
ROA not after:            Fri 02 Sep 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:67:5e:93:0a:9c:ea:ba:10:51:98:39:98:b7:73:2e:e7:26:74:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug 30 00:00:00 2022 GMT
            Not After : Sep  2 23:59:59 2022 GMT
        Subject: serialNumber=1ae849343c738f5d95c5faa4ab1f5c3bc1c1d0bdb3f14a2be527545fcd020f81, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8b:14:b3:b6:12:f7:aa:b7:84:4e:3b:19:3e:
                    33:4e:81:58:1c:a5:b3:88:04:fa:67:ce:f6:07:6a:
                    1c:24:51:c2:b5:84:bc:5a:67:09:ac:4f:54:9d:88:
                    28:fd:1c:c9:e4:7b:62:ca:5d:99:25:0a:f8:36:a3:
                    ea:08:85:b7:4f:37:78:8e:2f:85:bd:d0:65:34:78:
                    60:1e:e6:29:8a:7b:01:4d:5c:a6:f4:7a:66:62:59:
                    7e:83:05:e5:a5:8e:5b:17:e1:04:3d:89:b7:21:6e:
                    f5:fc:23:ff:95:4d:e9:2c:0e:c2:b3:92:fe:eb:d4:
                    8a:b8:61:74:51:ad:2c:de:d9:27:70:55:32:52:ef:
                    93:2c:0a:bb:5b:a5:ef:3a:56:35:1e:c4:29:d7:3d:
                    8d:dd:d6:b0:e8:6d:ff:a2:50:ec:9a:0c:35:6a:88:
                    fb:59:e2:0e:3e:31:b9:e4:30:fd:50:0d:3c:6b:85:
                    da:e6:33:97:62:e9:72:95:d8:f9:ee:1a:15:ed:ed:
                    65:89:97:b2:48:2a:de:ad:1c:14:47:dd:a3:85:e8:
                    b4:e2:78:4f:88:ed:5d:e4:1c:69:b3:2c:8e:de:fc:
                    e8:e6:e1:f8:35:db:bf:d8:6b:0f:74:15:bf:c1:2e:
                    e6:2f:b6:36:9c:5e:d8:59:2c:c2:a8:e4:cd:50:86:
                    c7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:04:BC:5D:EF:EA:BE:08:F1:A2:92:38:63:E4:89:86:87:E9:A5:44
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d69f8d83-31fe-4f90-bfee-0280fb1ed21d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:7e:29:d4:9a:23:c5:58:a0:85:76:58:3f:1e:8d:a3:9d:a1:
         17:2f:ef:41:d7:df:ec:e9:d9:7f:ac:b6:62:da:e6:b6:45:cb:
         58:dc:a3:2e:78:d5:a6:b4:a8:36:c6:c9:f2:77:4d:07:e2:97:
         f3:3c:4d:01:af:4b:d0:5c:77:a8:72:36:f3:8f:51:38:92:65:
         da:c9:4e:38:e6:4a:74:4c:b6:92:fb:6d:20:0d:0d:7b:50:a5:
         3d:19:7a:cf:f1:ea:9e:9c:87:cc:f9:b8:77:4b:a9:52:e7:e4:
         61:56:49:72:83:83:8a:bc:47:cc:62:12:1c:33:8a:e9:ad:d4:
         69:66:4c:91:49:36:26:93:a0:79:00:c9:fa:ab:9c:56:44:74:
         29:35:b9:57:34:26:05:ca:0f:5d:a9:ea:ec:83:04:d2:a8:35:
         c0:e5:33:40:d4:00:fd:2d:2f:53:0d:ed:8e:df:74:b6:17:c1:
         3e:aa:87:ea:9b:92:bd:4f:1a:d4:2c:04:1f:66:8f:7e:45:4e:
         84:8f:e6:50:71:45:5c:b8:2f:3b:55:c4:fe:02:66:b4:89:a1:
         a4:e8:e5:52:d4:01:d8:be:f9:c1:86:8a:54:13:7d:f1:35:e5:
         80:d9:68:db:b3:4c:1b:c8:2e:70:43:d8:9d:aa:29:e1:20:e6:
         10:c6:72:c4
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUIWdekwqc6roQUZg5mLdzLucmdM4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIwODMwMDAwMDAwWhcNMjIwOTAyMjM1OTU5
WjCBpTFJMEcGA1UEBRNAMWFlODQ5MzQzYzczOGY1ZDk1YzVmYWE0YWIxZjVjM2Jj
MWMxZDBiZGIzZjE0YTJiZTUyNzU0NWZjZDAyMGY4MTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKuLFLO2Eveqt4ROOxk+M06BWByls4gE+mfO9gdqHCRRwrWEvFpn
CaxPVJ2IKP0cyeR7YspdmSUK+Daj6giFt083eI4vhb3QZTR4YB7mKYp7AU1cpvR6
ZmJZfoMF5aWOWxfhBD2JtyFu9fwj/5VN6SwOwrOS/uvUirhhdFGtLN7ZJ3BVMlLv
kywKu1ul7zpWNR7EKdc9jd3WsOht/6JQ7JoMNWqI+1niDj4xueQw/VANPGuF2uYz
l2LpcpXY+e4aFe3tZYmXskgq3q0cFEfdo4XotOJ4T4jtXeQcabMsjt786Obh+DXb
v9hrD3QVv8Eu5i+2Npxe2FkswqjkzVCGx/ECAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRfBLxd7+q+CPGikjhj5ImGh+mlRDAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZDY5ZjhkODMtMzFmZS00ZjkwLWJmZWUtMDI4MGZiMWVkMjFkLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKF+KdSaI8VYoIV2
WD8ejaOdoRcv70HX3+zp2X+stmLa5rZFy1jcoy541aa0qDbGyfJ3TQfil/M8TQGv
S9Bcd6hyNvOPUTiSZdrJTjjmSnRMtpL7bSANDXtQpT0Zes/x6p6ch8z5uHdLqVLn
5GFWSXKDg4q8R8xiEhwziumt1GlmTJFJNiaToHkAyfqrnFZEdCk1uVc0JgXKD12p
6uyDBNKoNcDlM0DUAP0tL1MN7Y7fdLYXwT6qh+qbkr1PGtQsBB9mj35FToSP5lBx
RVy4LztVxP4CZrSJoaTo5VLUAdi++cGGilQTffE15YDZaNuzTBvILnBD2J2qKeEg
5hDGcsQ=
-----END CERTIFICATE-----