Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f223684b-8dd7-4562-807f-879710c42ac9.roa
File:                     f223684b-8dd7-4562-807f-879710c42ac9.roa (raw, json)
Hash identifier:          PlyPGQ5KAlHB0No3A0UUtyOwh7ienAGQQVyl7euVufE=
Subject key identifier:   1F:35:6A:FF:1C:EE:71:7F:42:28:9E:E9:2F:99:66:F8:0A:98:FF:04
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       68476739EE9909BD331306D9D246AC5570558605
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f223684b-8dd7-4562-807f-879710c42ac9.roa
Signing time:             Sun 06 Nov 2022 00:00:00 +0000
ROA not before:           Sun 06 Nov 2022 00:00:00 +0000
ROA not after:            Wed 09 Nov 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:47:67:39:ee:99:09:bd:33:13:06:d9:d2:46:ac:55:70:55:86:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Nov  6 00:00:00 2022 GMT
            Not After : Nov  9 23:59:59 2022 GMT
        Subject: serialNumber=0b5f43f698c832306db9c4ef3e8a8fb48ba0d2a32fd121f3834d0baaa3810df5, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6e:ce:fc:c3:80:2c:fb:82:57:82:23:73:9a:
                    f9:4c:50:35:3c:c4:48:f7:9d:0b:4d:e7:0e:aa:6d:
                    3b:e9:25:fb:2f:3e:30:2f:67:85:14:d9:94:e6:70:
                    56:b0:ba:68:0c:1f:92:08:b9:8b:47:65:02:6e:3b:
                    bb:44:dd:78:3b:a8:89:3b:80:8e:c3:fb:f8:49:bb:
                    15:31:06:b7:9f:e4:7d:27:d2:cf:8b:43:61:51:cb:
                    c5:6b:7a:6c:6b:bd:cb:36:bd:d1:68:f5:d1:a2:55:
                    e0:a6:ec:13:f3:a1:b3:43:7d:6b:46:f5:3c:8c:06:
                    b8:ef:d2:01:1f:68:d1:11:cd:87:c7:f1:16:75:3c:
                    c4:d0:82:b6:ff:a7:93:9c:f2:16:16:09:d6:67:a0:
                    9c:38:f3:57:d2:cc:07:e3:14:87:b1:83:0f:64:23:
                    d2:7a:e8:71:9b:0f:4a:ab:2f:0b:da:06:03:7a:ae:
                    f7:8c:de:4a:06:35:7a:2b:00:77:e9:0c:37:13:3b:
                    44:45:e6:2c:90:69:5a:bf:24:ed:52:cf:10:69:41:
                    c1:93:8d:c7:23:ee:50:4d:e6:3d:c1:7e:51:b5:3e:
                    0e:94:f3:8d:43:ef:31:0a:e0:0c:80:33:1f:84:4c:
                    9e:b4:99:21:3f:2b:98:cc:f2:04:93:26:dd:7c:2c:
                    4b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:35:6A:FF:1C:EE:71:7F:42:28:9E:E9:2F:99:66:F8:0A:98:FF:04
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f223684b-8dd7-4562-807f-879710c42ac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:3c:f0:ff:06:b0:1c:c7:60:d2:61:47:e0:ae:6f:4e:f7:bb:
         06:3e:0f:51:90:9c:ed:cd:d3:29:02:b0:e8:84:81:ec:21:a3:
         98:9c:e4:cd:e8:b4:4f:4a:33:a6:91:92:5e:fa:77:44:c8:a8:
         9b:ee:e2:98:f7:f0:09:90:0c:75:b4:28:e9:0d:6e:0c:3b:2b:
         34:fa:c0:d8:ec:0f:6a:f1:27:87:9f:09:10:54:38:b7:b2:ed:
         88:8a:97:f0:d7:93:b1:f3:b9:6b:a3:91:b5:c1:38:ee:fe:b5:
         b5:f0:3c:47:ca:1c:61:b1:76:ce:2a:62:5f:83:99:44:d1:f0:
         a9:7f:6a:0f:ef:15:2d:fd:b4:af:e7:ff:64:c5:1e:2b:e2:e4:
         2f:1f:6e:d7:2a:45:46:db:27:5a:06:b1:a7:87:f8:d3:10:af:
         7a:68:d5:17:ea:43:6a:88:59:fc:6a:5f:cf:79:cd:2f:13:b5:
         b6:e4:56:e0:9e:9e:4a:59:80:e8:30:85:26:21:52:60:5b:3b:
         c5:e7:5d:cf:24:df:ef:2e:6d:f2:fb:d3:ec:9b:87:fc:46:56:
         0a:ed:1c:dc:96:17:19:b4:df:b3:e2:30:0c:6f:5d:03:03:6a:
         05:b3:e0:49:e2:ea:4c:10:2c:8c:59:67:03:b6:61:04:56:93:
         79:8c:a4:29
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUaEdnOe6ZCb0zEwbZ0kasVXBVhgUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMTA2MDAwMDAwWhcNMjIxMTA5MjM1OTU5
WjCBpTFJMEcGA1UEBRNAMGI1ZjQzZjY5OGM4MzIzMDZkYjljNGVmM2U4YThmYjQ4
YmEwZDJhMzJmZDEyMWYzODM0ZDBiYWFhMzgxMGRmNTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMRuzvzDgCz7gleCI3Oa+UxQNTzESPedC03nDqptO+kl+y8+MC9n
hRTZlOZwVrC6aAwfkgi5i0dlAm47u0TdeDuoiTuAjsP7+Em7FTEGt5/kfSfSz4tD
YVHLxWt6bGu9yza90Wj10aJV4KbsE/Ohs0N9a0b1PIwGuO/SAR9o0RHNh8fxFnU8
xNCCtv+nk5zyFhYJ1megnDjzV9LMB+MUh7GDD2Qj0nrocZsPSqsvC9oGA3qu94ze
SgY1eisAd+kMNxM7REXmLJBpWr8k7VLPEGlBwZONxyPuUE3mPcF+UbU+DpTzjUPv
MQrgDIAzH4RMnrSZIT8rmMzyBJMm3XwsS4ECAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQfNWr/HO5xf0IonukvmWb4Cpj/BDAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZjIyMzY4NGItOGRkNy00NTYyLTgwN2YtODc5NzEwYzQyYWM5LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAg88P8GsBzHYNJh
R+Cub073uwY+D1GQnO3N0ykCsOiEgewho5ic5M3otE9KM6aRkl76d0TIqJvu4pj3
8AmQDHW0KOkNbgw7KzT6wNjsD2rxJ4efCRBUOLey7YiKl/DXk7HzuWujkbXBOO7+
tbXwPEfKHGGxds4qYl+DmUTR8Kl/ag/vFS39tK/n/2TFHivi5C8fbtcqRUbbJ1oG
saeH+NMQr3po1RfqQ2qIWfxqX895zS8TtbbkVuCenkpZgOgwhSYhUmBbO8XnXc8k
3+8ubfL70+ybh/xGVgrtHNyWFxm037PiMAxvXQMDagWz4Eni6kwQLIxZZwO2YQRW
k3mMpCk=
-----END CERTIFICATE-----