Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ee911ac1-951a-4f6c-a81d-3fd75ea08217.roa
File:                     ee911ac1-951a-4f6c-a81d-3fd75ea08217.roa (raw, json)
Hash identifier:          wDMqnOzEdANUG3C+A9KyjQsHvwV/rbVbJsDksTgXx+M=
Subject key identifier:   9E:81:EC:51:08:7C:EC:B9:CF:46:F6:A1:AC:5E:9C:15:16:F3:09:96
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       14B7FC8F5744469D2740D2049596AB4D2563E9C1
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ee911ac1-951a-4f6c-a81d-3fd75ea08217.roa
Signing time:             Mon 10 Oct 2022 00:00:00 +0000
ROA not before:           Mon 10 Oct 2022 00:00:00 +0000
ROA not after:            Thu 13 Oct 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b7:fc:8f:57:44:46:9d:27:40:d2:04:95:96:ab:4d:25:63:e9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Oct 10 00:00:00 2022 GMT
            Not After : Oct 13 23:59:59 2022 GMT
        Subject: serialNumber=e1c78db62fa9937465c1089fb47b8b146e82042f171d5c4c5c49bf6956bb469d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2f:30:10:26:30:d7:6a:1f:1f:ba:dd:fd:23:
                    37:06:71:75:8b:4e:09:c2:5e:10:46:a2:8e:62:54:
                    f9:26:b2:24:01:42:fe:4c:10:7d:51:67:fa:d5:53:
                    ad:33:16:9f:f6:b2:46:2a:62:8e:48:75:d8:e9:40:
                    b7:77:9e:cd:3b:01:63:fa:aa:e8:d2:70:76:3c:59:
                    70:02:79:a6:1d:a5:03:da:a5:a7:04:d8:c6:73:ea:
                    af:9c:7d:b4:4a:4e:62:8c:78:5a:68:ed:f0:3c:27:
                    a0:e4:47:3e:63:23:3b:54:e1:53:e9:67:64:20:d4:
                    3a:20:7d:87:d3:52:d1:04:48:bb:85:9f:64:94:07:
                    61:25:d1:a7:b0:9b:1a:e0:84:7e:75:62:27:f7:de:
                    7b:67:f4:84:60:d8:8e:a7:d7:a8:25:86:f6:3c:f1:
                    8e:e3:9d:e0:d6:56:1a:0c:92:3b:db:4d:88:21:46:
                    72:19:8c:be:f1:b9:f0:2b:a5:d9:d8:cb:7f:9f:eb:
                    87:9a:d5:ee:81:6f:a4:01:e9:87:71:82:06:cf:ac:
                    f6:f4:08:54:67:68:17:86:90:2d:a0:fc:a1:9d:e5:
                    1e:b8:56:97:6b:df:69:c9:99:1f:b5:20:26:ee:24:
                    47:d8:99:88:19:87:b3:b6:da:1e:be:41:d3:f5:26:
                    c5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:81:EC:51:08:7C:EC:B9:CF:46:F6:A1:AC:5E:9C:15:16:F3:09:96
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ee911ac1-951a-4f6c-a81d-3fd75ea08217.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:f1:a1:db:23:e1:27:2b:19:a3:67:85:54:6f:68:88:08:1a:
         9c:1d:05:c4:0a:38:51:61:02:3c:69:35:36:2d:40:25:0e:67:
         a3:a4:0a:43:f4:9c:aa:12:77:89:bc:12:d3:bc:da:b0:e1:f1:
         95:05:72:5b:65:31:bb:95:3b:4f:e4:c5:5f:ea:0f:a2:c9:9f:
         8a:f1:be:26:34:0e:23:78:51:d8:5f:c2:4a:df:bd:9f:de:5f:
         d4:9f:e8:3d:c2:15:5d:89:72:8f:22:57:2e:b1:ff:e1:05:b8:
         07:06:92:9f:63:fb:0b:81:e8:0f:2d:e8:f7:ff:b8:40:6a:11:
         ea:3d:7c:26:c3:c4:72:32:9c:3f:f9:f4:cc:82:62:ab:36:ea:
         5f:c7:8f:9c:01:fc:b9:c3:6e:a3:25:cd:a5:25:ef:32:9e:92:
         3c:a6:4e:0a:e2:72:1a:0a:20:34:67:84:84:9a:ee:da:59:76:
         5c:9b:4f:7b:e4:5c:2e:6d:4a:6f:94:80:9c:ef:ca:34:77:50:
         07:80:50:ba:e5:d3:74:e9:e5:bf:fb:dd:84:45:58:d9:19:4d:
         e2:65:c7:b5:01:fb:9d:09:45:da:63:29:26:44:88:8e:fe:94:
         13:e5:00:bc:d5:ff:e8:01:e7:fe:0b:70:aa:fb:d1:e8:eb:1a:
         ea:ea:39:c7
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUFLf8j1dERp0nQNIElZarTSVj6cEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMDEwMDAwMDAwWhcNMjIxMDEzMjM1OTU5
WjCBpTFJMEcGA1UEBRNAZTFjNzhkYjYyZmE5OTM3NDY1YzEwODlmYjQ3YjhiMTQ2
ZTgyMDQyZjE3MWQ1YzRjNWM0OWJmNjk1NmJiNDY5ZDEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKIvMBAmMNdqHx+63f0jNwZxdYtOCcJeEEaijmJU+SayJAFC/kwQ
fVFn+tVTrTMWn/ayRipijkh12OlAt3eezTsBY/qq6NJwdjxZcAJ5ph2lA9qlpwTY
xnPqr5x9tEpOYox4Wmjt8DwnoORHPmMjO1ThU+lnZCDUOiB9h9NS0QRIu4WfZJQH
YSXRp7CbGuCEfnViJ/fee2f0hGDYjqfXqCWG9jzxjuOd4NZWGgySO9tNiCFGchmM
vvG58Cul2djLf5/rh5rV7oFvpAHph3GCBs+s9vQIVGdoF4aQLaD8oZ3lHrhWl2vf
acmZH7UgJu4kR9iZiBmHs7baHr5B0/UmxfUCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBSegexRCHzsuc9G9qGsXpwVFvMJljAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZWU5MTFhYzEtOTUxYS00ZjZjLWE4MWQtM2ZkNzVlYTA4MjE3LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJ7xodsj4ScrGaNn
hVRvaIgIGpwdBcQKOFFhAjxpNTYtQCUOZ6OkCkP0nKoSd4m8EtO82rDh8ZUFcltl
MbuVO0/kxV/qD6LJn4rxviY0DiN4UdhfwkrfvZ/eX9Sf6D3CFV2Jco8iVy6x/+EF
uAcGkp9j+wuB6A8t6Pf/uEBqEeo9fCbDxHIynD/59MyCYqs26l/Hj5wB/LnDbqMl
zaUl7zKekjymTgrichoKIDRnhISa7tpZdlybT3vkXC5tSm+UgJzvyjR3UAeAULrl
03Tp5b/73YRFWNkZTeJlx7UB+50JRdpjKSZEiI7+lBPlALzV/+gB5/4LcKr70ejr
GurqOcc=
-----END CERTIFICATE-----