Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e8abcfe6-3763-4a7c-8c40-95bc4e64483f.roa
File:                     e8abcfe6-3763-4a7c-8c40-95bc4e64483f.roa (raw, json)
Hash identifier:          wkt/fYJTuhkQVCvfrMJrWAn5hjUQZYBP9TaOkngY2wo=
Subject key identifier:   0C:83:C3:BD:6D:94:40:05:DC:95:56:7C:4E:89:7B:26:86:A2:CB:DB
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       61ED053980347142A2D10239827E416ED1E66365
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e8abcfe6-3763-4a7c-8c40-95bc4e64483f.roa
Signing time:             Sun 11 Sep 2022 00:00:00 +0000
ROA not before:           Sun 11 Sep 2022 00:00:00 +0000
ROA not after:            Wed 14 Sep 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ed:05:39:80:34:71:42:a2:d1:02:39:82:7e:41:6e:d1:e6:63:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Sep 11 00:00:00 2022 GMT
            Not After : Sep 14 23:59:59 2022 GMT
        Subject: serialNumber=c8dc9f2e16bdb02aab160f02a5acfb29ce9e156e2446807c014cb7ed82c6f042, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:29:c7:23:0b:98:10:d0:f4:b1:24:26:96:52:
                    5c:8f:a9:73:c6:eb:3e:ce:ff:76:45:02:39:59:6c:
                    96:c5:4c:c8:b5:2a:9c:ed:10:6a:51:95:b1:61:f0:
                    ce:83:90:20:93:b3:8c:63:62:a8:02:4b:2a:b2:13:
                    84:c7:a5:5b:8a:57:0a:62:6d:bb:76:0b:41:d3:36:
                    96:3e:90:0c:18:8e:5b:12:d7:8d:72:e0:59:c3:f2:
                    d2:9f:d2:c7:6b:ff:a3:2e:92:5e:16:14:08:6c:cc:
                    84:cb:28:21:d9:86:35:20:f5:e5:06:70:b5:44:8c:
                    36:a6:cb:e5:6e:46:7a:a1:38:1b:20:73:b1:b5:29:
                    5a:e1:74:97:93:dd:a7:a0:8d:e4:15:5b:be:ac:e2:
                    de:e4:ca:90:98:cb:f3:9c:67:57:ec:23:cc:26:72:
                    17:f4:69:a4:17:21:8d:c5:70:1c:a2:5e:cd:33:25:
                    9e:d3:07:80:eb:36:fa:eb:5a:b5:9e:cc:f3:25:9a:
                    b4:e1:41:4c:20:a6:64:ce:3b:d3:de:e9:20:e8:fc:
                    0d:70:e0:f1:ef:ea:07:ad:a3:fe:00:71:70:7f:4c:
                    b3:e4:07:ce:11:21:a0:73:e8:60:74:9d:0c:72:cb:
                    71:87:98:77:cf:38:04:50:05:65:c3:77:9c:b6:7e:
                    1c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:83:C3:BD:6D:94:40:05:DC:95:56:7C:4E:89:7B:26:86:A2:CB:DB
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e8abcfe6-3763-4a7c-8c40-95bc4e64483f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:1a:da:ac:d5:05:76:93:96:7f:14:22:74:6e:fa:05:90:cf:
         cf:62:6b:f4:7a:7d:f6:2c:cc:fa:6a:9c:f6:e6:cf:74:ce:64:
         29:06:39:04:88:e8:00:f1:d5:9d:00:e3:fa:c6:91:0d:be:7c:
         f8:ec:90:ea:58:93:d9:27:ee:44:b5:02:6f:82:5f:fe:c5:2b:
         2e:50:b4:77:f1:bd:93:f2:fb:4b:dc:ba:01:74:28:88:63:a7:
         bf:2e:1c:53:08:35:ee:c4:c3:84:9e:6e:89:0a:37:d7:7b:b2:
         00:68:4a:99:73:5b:b9:52:82:90:d0:da:55:29:89:00:e2:7f:
         bd:2a:f0:b4:8f:87:b7:ac:20:26:a6:a8:08:eb:02:4d:78:92:
         bd:53:58:c4:90:f2:c5:bd:7d:d2:b3:cd:71:9f:2e:4c:69:6e:
         2e:63:6f:c6:43:a6:1e:44:05:cb:6b:cd:62:c8:2b:f5:af:e5:
         fc:c3:6f:5e:a8:0d:e7:8c:c6:aa:dd:88:74:a0:0a:4e:a7:56:
         b9:3c:3d:1b:1c:6f:7b:6e:e0:ba:03:9c:36:99:08:59:d2:5b:
         88:42:2c:d8:9b:79:e9:b5:f6:f4:2c:81:8f:5e:50:ff:1f:95:
         39:d7:1e:90:87:90:28:2a:ab:b4:20:d8:37:9a:29:22:61:79:
         b2:a4:e8:ff
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUYe0FOYA0cUKi0QI5gn5BbtHmY2UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIwOTExMDAwMDAwWhcNMjIwOTE0MjM1OTU5
WjCBpTFJMEcGA1UEBRNAYzhkYzlmMmUxNmJkYjAyYWFiMTYwZjAyYTVhY2ZiMjlj
ZTllMTU2ZTI0NDY4MDdjMDE0Y2I3ZWQ4MmM2ZjA0MjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKgpxyMLmBDQ9LEkJpZSXI+pc8brPs7/dkUCOVlslsVMyLUqnO0Q
alGVsWHwzoOQIJOzjGNiqAJLKrIThMelW4pXCmJtu3YLQdM2lj6QDBiOWxLXjXLg
WcPy0p/Sx2v/oy6SXhYUCGzMhMsoIdmGNSD15QZwtUSMNqbL5W5GeqE4GyBzsbUp
WuF0l5Pdp6CN5BVbvqzi3uTKkJjL85xnV+wjzCZyF/RppBchjcVwHKJezTMlntMH
gOs2+utatZ7M8yWatOFBTCCmZM47097pIOj8DXDg8e/qB62j/gBxcH9Ms+QHzhEh
oHPoYHSdDHLLcYeYd884BFAFZcN3nLZ+HDkCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQMg8O9bZRABdyVVnxOiXsmhqLL2zAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZThhYmNmZTYtMzc2My00YTdjLThjNDAtOTViYzRlNjQ0ODNmLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAM0a2qzVBXaTln8U
InRu+gWQz89ia/R6ffYszPpqnPbmz3TOZCkGOQSI6ADx1Z0A4/rGkQ2+fPjskOpY
k9kn7kS1Am+CX/7FKy5QtHfxvZPy+0vcugF0KIhjp78uHFMINe7Ew4SebokKN9d7
sgBoSplzW7lSgpDQ2lUpiQDif70q8LSPh7esICamqAjrAk14kr1TWMSQ8sW9fdKz
zXGfLkxpbi5jb8ZDph5EBctrzWLIK/Wv5fzDb16oDeeMxqrdiHSgCk6nVrk8PRsc
b3tu4LoDnDaZCFnSW4hCLNibeem19vQsgY9eUP8flTnXHpCHkCgqq7Qg2DeaKSJh
ebKk6P8=
-----END CERTIFICATE-----