Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e22ff792-1eff-4436-9b65-5e76699e1c5f.roa
File:                     e22ff792-1eff-4436-9b65-5e76699e1c5f.roa (raw, json)
Hash identifier:          ye43MIJ2ac0H9xsM5DaEq/NyaV2mEq0ORTw9/soxA/Y=
Subject key identifier:   64:AF:97:6E:84:6A:1B:66:CC:05:C8:A1:09:65:DE:C7:A7:FA:22:CC
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       413309237D4CC82642D263A2469336FC3009C269
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e22ff792-1eff-4436-9b65-5e76699e1c5f.roa
Signing time:             Sat 24 Dec 2022 00:00:00 +0000
ROA not before:           Sat 24 Dec 2022 00:00:00 +0000
ROA not after:            Tue 27 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:33:09:23:7d:4c:c8:26:42:d2:63:a2:46:93:36:fc:30:09:c2:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 24 00:00:00 2022 GMT
            Not After : Dec 27 23:59:59 2022 GMT
        Subject: serialNumber=4fbabf30479be9424c7586543c83f9edd9507d297cf8f9b1798c1c9250d39557, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:df:85:a2:f1:30:49:9b:8d:5f:58:ab:c6:5c:
                    0a:1e:66:fd:0d:e2:91:d2:08:9b:81:1a:70:1d:e0:
                    b5:0e:10:5a:b3:79:41:77:9a:5c:4f:6e:f4:91:c4:
                    87:7d:ad:1f:d4:e4:71:24:6a:c5:57:78:27:8e:44:
                    49:5d:89:fd:e2:04:dd:80:16:b7:6b:75:08:d9:a8:
                    8a:b2:7f:c2:43:a8:51:cf:a6:c3:46:90:8d:ac:5e:
                    cb:2c:01:af:f5:39:3f:02:6d:98:46:d0:ca:cf:77:
                    e4:39:60:e5:14:54:59:38:63:70:ab:fe:f9:57:11:
                    27:79:af:e0:4c:cc:c3:82:23:81:cc:46:aa:8e:bc:
                    9f:af:61:96:6a:e2:85:c6:54:0c:6a:67:c0:fe:a7:
                    b7:5a:e0:17:a6:43:0a:90:1b:f5:93:14:d2:10:e4:
                    bf:d7:1b:77:c0:37:a7:ea:7e:a4:bc:31:f0:55:15:
                    42:bf:ee:40:b6:58:46:64:de:50:49:8e:eb:02:f5:
                    25:fe:2b:dd:90:8d:9d:f0:c1:e5:ad:f7:fb:f6:34:
                    6d:24:0e:98:43:aa:27:f7:2b:44:88:b9:83:46:65:
                    ec:85:9c:16:95:8c:a0:dc:f7:04:65:c2:91:f8:4e:
                    21:57:08:e9:fc:b9:ae:a7:29:4b:bb:9e:4f:f0:58:
                    d0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AF:97:6E:84:6A:1B:66:CC:05:C8:A1:09:65:DE:C7:A7:FA:22:CC
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e22ff792-1eff-4436-9b65-5e76699e1c5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:2c:7a:01:b2:4f:26:b3:36:ac:cb:8a:d9:dc:65:4b:56:16:
         d5:f0:01:36:49:f0:18:80:a9:8f:48:c4:f6:0b:7c:6f:28:70:
         6b:ab:d0:6f:94:ea:91:45:2b:46:e1:1d:fe:6e:ae:d2:27:c6:
         6a:c6:61:9d:1d:96:0b:56:0d:7e:32:9f:5e:b5:08:a4:14:6a:
         0e:99:21:44:9b:87:bf:3d:0e:27:18:ca:22:9e:6e:6a:da:39:
         5a:26:f2:86:27:66:7d:c0:23:05:d4:f3:2e:db:51:a7:61:96:
         1d:c5:a4:55:68:ce:81:87:75:e5:71:3e:b0:83:7f:c3:1c:d6:
         64:01:3f:fb:48:21:a9:40:a4:30:29:95:3c:fa:26:a2:e2:c5:
         eb:3f:e1:22:0c:c9:40:a7:4b:d2:e7:e8:70:68:b4:a0:fc:6b:
         3b:2e:f4:7d:70:3d:30:10:c4:2f:e5:d4:2c:c1:57:db:7e:bf:
         79:98:6a:fd:f9:20:ba:9b:f4:bf:0d:8f:4d:c1:ec:a3:78:09:
         77:4e:88:83:75:59:a4:ff:27:4c:26:30:c5:70:92:4b:d3:aa:
         e4:dd:04:f0:79:94:af:b1:85:a5:10:38:77:0b:c2:d5:b4:fe:
         04:90:6b:59:54:b0:2c:7d:c5:2c:ae:6a:71:35:4e:cf:9a:bf:
         0d:17:c6:20
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUQTMJI31MyCZC0mOiRpM2/DAJwmkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMjI0MDAwMDAwWhcNMjIxMjI3MjM1OTU5
WjCBpTFJMEcGA1UEBRNANGZiYWJmMzA0NzliZTk0MjRjNzU4NjU0M2M4M2Y5ZWRk
OTUwN2QyOTdjZjhmOWIxNzk4YzFjOTI1MGQzOTU1NzEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANjfhaLxMEmbjV9Yq8ZcCh5m/Q3ikdIIm4EacB3gtQ4QWrN5QXea
XE9u9JHEh32tH9TkcSRqxVd4J45ESV2J/eIE3YAWt2t1CNmoirJ/wkOoUc+mw0aQ
jaxeyywBr/U5PwJtmEbQys935Dlg5RRUWThjcKv++VcRJ3mv4EzMw4IjgcxGqo68
n69hlmrihcZUDGpnwP6nt1rgF6ZDCpAb9ZMU0hDkv9cbd8A3p+p+pLwx8FUVQr/u
QLZYRmTeUEmO6wL1Jf4r3ZCNnfDB5a33+/Y0bSQOmEOqJ/crRIi5g0Zl7IWcFpWM
oNz3BGXCkfhOIVcI6fy5rqcpS7ueT/BY0GUCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRkr5duhGobZswFyKEJZd7Hp/oizDAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZTIyZmY3OTItMWVmZi00NDM2LTliNjUtNWU3NjY5OWUxYzVmLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAG0segGyTyazNqzL
itncZUtWFtXwATZJ8BiAqY9IxPYLfG8ocGur0G+U6pFFK0bhHf5urtInxmrGYZ0d
lgtWDX4yn161CKQUag6ZIUSbh789DicYyiKebmraOVom8oYnZn3AIwXU8y7bUadh
lh3FpFVozoGHdeVxPrCDf8Mc1mQBP/tIIalApDAplTz6JqLixes/4SIMyUCnS9Ln
6HBotKD8azsu9H1wPTAQxC/l1CzBV9t+v3mYav35ILqb9L8Nj03B7KN4CXdOiIN1
WaT/J0wmMMVwkkvTquTdBPB5lK+xhaUQOHcLwtW0/gSQa1lUsCx9xSyuanE1Ts+a
vw0XxiA=
-----END CERTIFICATE-----