Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ec136fc6-f6dc-48ac-8791-fdb66fb02a7f.roa
File:                     ec136fc6-f6dc-48ac-8791-fdb66fb02a7f.roa (raw, json)
Hash identifier:          y1TuoxYrv0vOlvqfzg5a41el3rms0LEzJP1xOxHTkjA=
Subject key identifier:   08:6E:B0:B3:A8:E7:C4:2F:B7:6B:7C:F1:B8:3A:D1:D9:5B:A8:04:C9
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       60B32FAB7D0B3E1C1638D1D1601399AF6E392C38
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ec136fc6-f6dc-48ac-8791-fdb66fb02a7f.roa
Signing time:             Tue 02 Aug 2022 00:00:00 +0000
ROA not before:           Tue 02 Aug 2022 00:00:00 +0000
ROA not after:            Fri 05 Aug 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b3:2f:ab:7d:0b:3e:1c:16:38:d1:d1:60:13:99:af:6e:39:2c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Aug  2 00:00:00 2022 GMT
            Not After : Aug  5 23:59:59 2022 GMT
        Subject: serialNumber=e17bf6222594d8522351a42ab25c9e38660032e784d3ccfc785563cdf7f248f7, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cc:50:05:f3:10:6f:0e:36:92:a9:48:88:e0:
                    77:e3:3d:05:c8:f0:94:82:e6:f0:64:8c:24:23:17:
                    03:46:9d:f8:76:dc:15:90:68:30:c1:fc:70:c5:01:
                    cf:bc:d6:42:e8:5e:26:a1:5a:60:39:fb:fa:a7:f9:
                    76:22:e1:e6:c3:4d:9b:67:93:5e:94:42:47:01:55:
                    44:81:6e:48:78:74:a4:8b:ef:cd:8f:16:74:31:cf:
                    a3:f1:5d:54:70:3c:80:ce:f4:e0:ad:06:91:83:22:
                    b8:0f:8f:3e:da:26:e1:12:59:d0:60:19:f8:34:83:
                    3d:c5:b0:18:5a:47:46:a5:87:37:e0:ea:4c:29:49:
                    fb:20:03:17:9e:02:a4:18:2d:69:86:78:71:54:70:
                    a5:d8:93:0f:d7:f9:3a:57:1c:6d:5e:85:7d:8d:46:
                    ff:b3:86:19:6d:83:f3:a9:00:15:6f:f9:b3:ea:57:
                    60:c3:15:44:b8:c2:e5:b8:2e:4e:8d:c5:a2:49:5e:
                    87:f5:14:84:25:17:37:7c:37:94:2e:fc:c9:ab:ff:
                    82:c5:9b:58:84:98:c2:5e:e6:a2:fe:84:31:23:dc:
                    15:c7:ef:08:51:f5:a0:b8:41:6d:33:8c:d1:fb:bf:
                    ac:63:db:af:fb:54:08:2c:77:ff:b6:0a:95:3d:de:
                    ad:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6E:B0:B3:A8:E7:C4:2F:B7:6B:7C:F1:B8:3A:D1:D9:5B:A8:04:C9
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ec136fc6-f6dc-48ac-8791-fdb66fb02a7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:a3:98:fd:16:dd:a1:3b:04:72:13:e4:2b:a2:9f:14:b4:48:
         ba:01:50:6d:0a:4f:bf:a9:87:e8:30:2c:41:08:31:39:95:6b:
         ef:1b:0b:c4:9b:23:4b:d0:4d:b3:35:f9:5b:9e:bd:4e:35:b0:
         a5:af:eb:45:af:35:98:d9:fb:27:c5:f0:ea:f6:83:95:41:d2:
         a4:e8:d7:1b:d4:21:43:88:98:88:40:9f:ce:b0:7e:4c:a2:31:
         92:21:77:fc:41:ba:23:c0:6f:58:e0:82:23:ab:fe:1b:55:1f:
         0f:3f:e5:f6:f7:9f:87:5e:d8:90:4c:66:63:fc:cf:de:d0:83:
         11:c1:24:78:24:a2:a4:4d:9d:69:85:c7:d7:39:df:f8:33:f5:
         41:e9:8a:6d:5e:33:2d:32:82:f4:e2:a3:b4:6f:89:22:e4:26:
         31:cf:eb:dd:4b:41:70:6f:94:0e:77:6e:77:10:0d:c7:f0:59:
         5e:36:a2:9f:ed:78:d7:13:0b:5f:19:d0:6e:e5:6e:bd:9f:cb:
         a2:92:ab:c8:98:e2:6b:81:d6:90:d1:e4:89:23:2f:52:9f:e5:
         5e:8a:f4:f6:d3:21:5e:3a:b9:f3:ba:97:23:fa:8c:a2:72:de:
         ab:cd:4e:81:2c:ab:f0:1d:d5:17:e0:d0:a2:16:66:22:24:f3:
         d2:4e:c2:59
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUYLMvq30LPhwWONHRYBOZr245LDgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIwODAyMDAwMDAwWhcNMjIwODA1MjM1OTU5
WjCBpTFJMEcGA1UEBRNAZTE3YmY2MjIyNTk0ZDg1MjIzNTFhNDJhYjI1YzllMzg2
NjAwMzJlNzg0ZDNjY2ZjNzg1NTYzY2RmN2YyNDhmNzEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJbMUAXzEG8ONpKpSIjgd+M9BcjwlILm8GSMJCMXA0ad+HbcFZBo
MMH8cMUBz7zWQuheJqFaYDn7+qf5diLh5sNNm2eTXpRCRwFVRIFuSHh0pIvvzY8W
dDHPo/FdVHA8gM704K0GkYMiuA+PPtom4RJZ0GAZ+DSDPcWwGFpHRqWHN+DqTClJ
+yADF54CpBgtaYZ4cVRwpdiTD9f5OlccbV6FfY1G/7OGGW2D86kAFW/5s+pXYMMV
RLjC5bguTo3Fokleh/UUhCUXN3w3lC78yav/gsWbWISYwl7mov6EMSPcFcfvCFH1
oLhBbTOM0fu/rGPbr/tUCCx3/7YKlT3erY8CAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQIbrCzqOfEL7drfPG4OtHZW6gEyTAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZWMxMzZmYzYtZjZkYy00OGFjLTg3OTEtZmRiNjZmYjAyYTdmLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEajmP0W3aE7BHIT
5CuinxS0SLoBUG0KT7+ph+gwLEEIMTmVa+8bC8SbI0vQTbM1+VuevU41sKWv60Wv
NZjZ+yfF8Or2g5VB0qTo1xvUIUOImIhAn86wfkyiMZIhd/xBuiPAb1jggiOr/htV
Hw8/5fb3n4de2JBMZmP8z97QgxHBJHgkoqRNnWmFx9c53/gz9UHpim1eMy0ygvTi
o7RviSLkJjHP691LQXBvlA53bncQDcfwWV42op/teNcTC18Z0G7lbr2fy6KSq8iY
4muB1pDR5IkjL1Kf5V6K9PbTIV46ufO6lyP6jKJy3qvNToEsq/Ad1Rfg0KIWZiIk
89JOwlk=
-----END CERTIFICATE-----