Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e022a729-6269-4f77-b348-1fdcbfe3cdfd.roa
File:                     e022a729-6269-4f77-b348-1fdcbfe3cdfd.roa (raw, json)
Hash identifier:          oMbTIs59/WxsWCFBx2ivQ45ABUCL/eX5p0e2fP2Fifs=
Subject key identifier:   D7:02:B6:5F:B2:D5:F5:AC:DB:C1:25:59:16:63:35:E0:B2:20:A6:90
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       347E3569A04E9A5D74087E859E2FC65A5E93CDEB
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e022a729-6269-4f77-b348-1fdcbfe3cdfd.roa
Signing time:             Fri 26 Aug 2022 00:00:00 +0000
ROA not before:           Fri 26 Aug 2022 00:00:00 +0000
ROA not after:            Mon 29 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:7e:35:69:a0:4e:9a:5d:74:08:7e:85:9e:2f:c6:5a:5e:93:cd:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug 26 00:00:00 2022 GMT
            Not After : Aug 29 23:59:59 2022 GMT
        Subject: serialNumber=d55acd5f5cb539294e5973472c220e06268e08818e5839cc8650567a062e84ae, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:87:87:4c:3d:02:bc:32:d3:8f:a5:ea:75:02:
                    64:8b:11:0c:c4:e0:9a:24:9d:8d:9c:bb:ba:a1:e6:
                    ba:f7:84:25:1b:83:4a:b9:f8:1e:30:2f:be:cd:2e:
                    e9:cf:f0:24:19:10:1f:2e:2c:2b:37:79:ed:f8:59:
                    d2:1a:2a:ba:a9:bd:72:60:b9:9e:e9:4a:20:66:44:
                    08:50:3f:02:ea:0b:e4:8f:da:ce:f2:d3:8a:b3:cd:
                    c0:aa:67:52:70:2d:3e:1f:69:ff:fb:33:82:b9:d4:
                    27:4b:f9:df:95:7d:fb:57:8f:85:e9:51:21:3c:b0:
                    7b:b0:4d:7e:24:ec:99:f3:0b:26:5a:81:fc:fd:c5:
                    7e:9b:28:0a:f2:42:7c:8d:62:d4:b8:8a:01:05:a7:
                    25:ac:8f:7a:01:3a:ab:99:74:60:dd:9e:78:70:17:
                    3a:2a:08:97:39:54:b1:d9:b8:19:4f:b1:80:2f:94:
                    01:2e:b5:73:53:a9:49:7f:9a:c0:54:1c:5a:41:c5:
                    9b:98:ae:1f:bd:97:82:d0:ca:02:61:c2:30:a2:ff:
                    e6:e9:61:b6:51:c7:52:c3:6a:e8:d6:2b:1a:69:0b:
                    5c:c7:25:b2:36:06:82:5b:2f:89:14:0d:bd:3c:37:
                    a3:e8:39:5c:00:90:9a:18:bf:6d:c5:0f:b1:28:a8:
                    6f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:02:B6:5F:B2:D5:F5:AC:DB:C1:25:59:16:63:35:E0:B2:20:A6:90
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e022a729-6269-4f77-b348-1fdcbfe3cdfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:c8:fa:a6:4b:0f:91:ab:13:52:c3:d4:26:9d:d4:3e:06:1f:
         be:cc:85:68:c4:33:ba:d2:fc:de:52:61:ae:03:4f:b3:57:0a:
         05:72:d9:9c:eb:08:ee:ab:78:c1:fb:88:c3:91:2a:6e:05:3c:
         4f:54:16:40:70:cd:33:33:6c:d3:ef:e8:f9:a1:e5:19:9d:12:
         e4:34:fe:d8:c2:f8:20:0c:e8:b2:bc:b0:b8:82:1c:33:82:17:
         f2:7d:d0:7e:d0:71:23:2e:53:b4:2d:20:a5:f4:cc:fc:cb:35:
         17:1d:37:e1:58:87:74:a5:ef:08:f8:a8:2a:1e:21:59:c4:6b:
         69:58:1f:7d:56:a9:2d:b9:8e:69:93:ed:35:18:99:53:3f:3a:
         62:0b:26:be:07:f6:01:7f:2f:48:78:1b:5f:0b:c7:76:ea:3f:
         c4:61:07:0a:5e:d0:61:8d:2e:e2:72:6b:ed:54:f5:54:21:85:
         c1:a5:58:f5:a5:ac:4f:6c:4f:e3:ef:54:7c:0a:9a:1f:35:30:
         43:4b:e9:d9:58:58:70:c1:a7:24:5e:70:16:35:6f:05:b4:c6:
         fc:d0:85:b4:f3:1c:48:62:eb:4f:f7:59:60:e9:d9:ef:81:fc:
         75:4d:48:80:e5:07:85:df:2b:8e:0f:1a:f5:15:e9:c5:37:20:
         55:89:b5:7d
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUNH41aaBOml10CH6Fni/GWl6TzeswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIwODI2MDAwMDAwWhcNMjIwODI5MjM1OTU5
WjCBpTFJMEcGA1UEBRNAZDU1YWNkNWY1Y2I1MzkyOTRlNTk3MzQ3MmMyMjBlMDYy
NjhlMDg4MThlNTgzOWNjODY1MDU2N2EwNjJlODRhZTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKCHh0w9Arwy04+l6nUCZIsRDMTgmiSdjZy7uqHmuveEJRuDSrn4
HjAvvs0u6c/wJBkQHy4sKzd57fhZ0hoquqm9cmC5nulKIGZECFA/AuoL5I/azvLT
irPNwKpnUnAtPh9p//szgrnUJ0v535V9+1ePhelRITywe7BNfiTsmfMLJlqB/P3F
fpsoCvJCfI1i1LiKAQWnJayPegE6q5l0YN2eeHAXOioIlzlUsdm4GU+xgC+UAS61
c1OpSX+awFQcWkHFm5iuH72XgtDKAmHCMKL/5ulhtlHHUsNq6NYrGmkLXMclsjYG
glsviRQNvTw3o+g5XACQmhi/bcUPsSiob5sCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTXArZfstX1rNvBJVkWYzXgsiCmkDAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZTAyMmE3MjktNjI2OS00Zjc3LWIzNDgtMWZkY2JmZTNjZGZkLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACbI+qZLD5GrE1LD
1Cad1D4GH77MhWjEM7rS/N5SYa4DT7NXCgVy2ZzrCO6reMH7iMORKm4FPE9UFkBw
zTMzbNPv6Pmh5RmdEuQ0/tjC+CAM6LK8sLiCHDOCF/J90H7QcSMuU7QtIKX0zPzL
NRcdN+FYh3Sl7wj4qCoeIVnEa2lYH31WqS25jmmT7TUYmVM/OmILJr4H9gF/L0h4
G18Lx3bqP8RhBwpe0GGNLuJya+1U9VQhhcGlWPWlrE9sT+PvVHwKmh81MENL6dlY
WHDBpyRecBY1bwW0xvzQhbTzHEhi60/3WWDp2e+B/HVNSIDlB4XfK44PGvUV6cU3
IFWJtX0=
-----END CERTIFICATE-----