Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ef5e59c1-bbab-41d3-bb3b-c88dfcdf8e70.roa
File:                     ef5e59c1-bbab-41d3-bb3b-c88dfcdf8e70.roa (raw, json)
Hash identifier:          nShZ92ULuSX+tGAzriFqOdm2SKY/22a7Stj7L3lSQ5I=
Subject key identifier:   0E:57:AC:4D:B5:21:79:22:89:B3:85:C7:9F:58:D2:87:12:B9:90:FD
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7A443A1371A63ACCAEBF919BE7B0EBDB4DDD1123
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ef5e59c1-bbab-41d3-bb3b-c88dfcdf8e70.roa
Signing time:             Sat 26 Nov 2022 00:00:00 +0000
ROA not before:           Sat 26 Nov 2022 00:00:00 +0000
ROA not after:            Tue 29 Nov 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:44:3a:13:71:a6:3a:cc:ae:bf:91:9b:e7:b0:eb:db:4d:dd:11:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Nov 26 00:00:00 2022 GMT
            Not After : Nov 29 23:59:59 2022 GMT
        Subject: serialNumber=ce56a4e8c2dee960976047c4e75154ca834181987f7fa5abb0ec61965a08b7bf, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ca:e1:a1:b7:57:eb:9c:fc:71:28:ce:8e:61:
                    39:2f:1e:be:61:0b:db:ee:db:1a:6c:66:35:5f:fd:
                    12:dd:cc:22:5a:7c:39:36:08:9d:5b:74:a8:49:51:
                    1f:85:69:0d:d2:bf:de:08:da:bb:63:d4:27:58:0e:
                    8c:88:b9:a8:06:46:47:0e:19:33:42:6c:98:85:be:
                    15:3c:cd:31:9c:e0:38:3c:c2:33:96:1b:13:41:00:
                    4c:d4:0d:d0:e6:e0:57:36:2b:c1:95:db:11:1c:b2:
                    27:0d:d2:a0:66:2e:ee:7c:58:15:98:00:d3:71:c2:
                    3d:5c:93:83:4c:4b:53:55:ad:de:b3:7f:6c:2f:14:
                    aa:2b:79:6d:48:d3:d7:72:da:81:61:c3:21:75:77:
                    b9:65:2d:5e:cc:be:1b:af:44:54:b9:5a:ef:67:38:
                    11:f9:b7:a0:08:a9:ea:ec:30:b1:98:bd:96:f7:8e:
                    e4:c4:b4:12:16:1d:82:40:08:da:40:a1:7a:f9:f9:
                    c8:61:7a:87:95:05:95:b8:dd:fb:22:11:ec:ea:a3:
                    ff:85:a1:d6:3c:8f:83:04:0d:e9:4a:63:ef:ce:14:
                    46:6a:12:ad:cd:f7:93:fe:a2:e8:08:8c:b4:9a:59:
                    d7:85:26:c0:85:e2:88:25:33:9d:48:14:98:d6:d8:
                    6a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:57:AC:4D:B5:21:79:22:89:B3:85:C7:9F:58:D2:87:12:B9:90:FD
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ef5e59c1-bbab-41d3-bb3b-c88dfcdf8e70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:4c:8b:5a:a4:65:f6:79:2f:34:59:47:2a:67:80:fb:57:86:
         9b:62:07:22:86:f7:c0:aa:e7:6f:f4:63:41:fc:ec:cc:8a:15:
         67:2c:6d:35:00:ef:f7:f9:a3:84:57:88:7c:f7:6a:71:b4:67:
         29:1f:42:de:5c:d5:eb:67:ac:7e:09:d7:3b:97:eb:ce:68:34:
         c8:d4:27:ec:9f:cb:a5:56:54:4a:42:66:33:1c:db:b7:23:1a:
         49:2a:1b:5f:a8:ab:20:f2:2a:b7:bd:78:99:fc:65:a2:cd:02:
         92:2f:f0:82:ec:2d:6b:bd:ec:74:82:0e:45:84:61:83:f0:3d:
         be:4f:05:6b:28:f1:09:8a:ce:80:20:a8:bf:ea:12:b7:09:23:
         74:6f:ff:00:52:40:f6:c3:a1:2e:37:04:7b:e2:22:e4:09:1a:
         87:ec:8c:bf:12:d2:8f:52:1e:ef:5e:d5:6f:ca:58:83:6f:3c:
         e2:0c:3c:36:50:f9:bf:20:ee:79:f8:ea:7a:18:12:0d:3c:03:
         a5:6f:6b:89:dc:2c:01:41:2c:7c:1a:45:7f:21:13:1b:b6:20:
         bf:08:81:49:4d:23:62:6d:3f:88:31:d2:55:c5:e9:ae:b9:c9:
         ba:9b:26:d9:28:57:86:2d:a4:c2:ee:2a:f4:6c:79:65:06:7a:
         9f:b9:a3:61
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUekQ6E3GmOsyuv5Gb57Dr203dESMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMTI2MDAwMDAwWhcNMjIxMTI5MjM1OTU5
WjCBpTFJMEcGA1UEBRNAY2U1NmE0ZThjMmRlZTk2MDk3NjA0N2M0ZTc1MTU0Y2E4
MzQxODE5ODdmN2ZhNWFiYjBlYzYxOTY1YTA4YjdiZjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJrK4aG3V+uc/HEozo5hOS8evmEL2+7bGmxmNV/9Et3MIlp8OTYI
nVt0qElRH4VpDdK/3gjau2PUJ1gOjIi5qAZGRw4ZM0JsmIW+FTzNMZzgODzCM5Yb
E0EATNQN0ObgVzYrwZXbERyyJw3SoGYu7nxYFZgA03HCPVyTg0xLU1Wt3rN/bC8U
qit5bUjT13LagWHDIXV3uWUtXsy+G69EVLla72c4Efm3oAip6uwwsZi9lveO5MS0
EhYdgkAI2kChevn5yGF6h5UFlbjd+yIR7Oqj/4Wh1jyPgwQN6Upj784URmoSrc33
k/6i6AiMtJpZ14UmwIXiiCUznUgUmNbYaskCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQOV6xNtSF5IomzhcefWNKHErmQ/TAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZWY1ZTU5YzEtYmJhYi00MWQzLWJiM2ItYzg4ZGZjZGY4ZTcwLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKhMi1qkZfZ5LzRZ
RypngPtXhptiByKG98Cq52/0Y0H87MyKFWcsbTUA7/f5o4RXiHz3anG0ZykfQt5c
1etnrH4J1zuX685oNMjUJ+yfy6VWVEpCZjMc27cjGkkqG1+oqyDyKre9eJn8ZaLN
ApIv8ILsLWu97HSCDkWEYYPwPb5PBWso8QmKzoAgqL/qErcJI3Rv/wBSQPbDoS43
BHviIuQJGofsjL8S0o9SHu9e1W/KWINvPOIMPDZQ+b8g7nn46noYEg08A6Vva4nc
LAFBLHwaRX8hExu2IL8IgUlNI2JtP4gx0lXF6a65ybqbJtkoV4YtpMLuKvRseWUG
ep+5o2E=
-----END CERTIFICATE-----