Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f2d29eb7-9f1e-4a03-b624-2b45824d3c5f.roa
File:                     f2d29eb7-9f1e-4a03-b624-2b45824d3c5f.roa (raw, json)
Hash identifier:          NmidG6lbsEJ/z25oMz6qt674fsrXsELfTain/sPJ0i4=
Subject key identifier:   50:EC:42:D6:F6:74:29:2B:E8:AD:BF:BC:D4:7A:36:C9:98:47:6C:B9
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       059F4D7135E7816656BBEB64E4744C58E4FF011A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f2d29eb7-9f1e-4a03-b624-2b45824d3c5f.roa
Signing time:             Wed 21 Dec 2022 00:00:00 +0000
ROA not before:           Wed 21 Dec 2022 00:00:00 +0000
ROA not after:            Sat 24 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:9f:4d:71:35:e7:81:66:56:bb:eb:64:e4:74:4c:58:e4:ff:01:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 21 00:00:00 2022 GMT
            Not After : Dec 24 23:59:59 2022 GMT
        Subject: serialNumber=c057dbfe837a3ccebd3eb14d053bf83a046b461a6858a9bd4a741acbfbbc4824, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e3:cc:dd:03:50:bb:a4:dd:51:08:51:de:4b:
                    e3:f5:ed:eb:e9:23:cb:d0:49:c6:61:e7:ac:38:07:
                    d4:cf:a1:00:ce:82:88:f5:77:56:aa:0b:cc:ee:cf:
                    9b:95:8f:91:81:e2:b8:38:31:16:fe:9b:07:df:3e:
                    e9:1c:c2:cc:7f:5d:bf:e0:d7:a8:e5:69:56:1f:73:
                    88:48:6c:e1:b3:2f:65:c9:85:1e:3e:15:a8:61:c2:
                    9c:e7:99:d6:99:5c:3d:92:81:24:1e:09:17:25:c1:
                    bf:42:4a:33:af:2a:22:68:91:72:1d:87:a1:d0:50:
                    4f:34:00:17:fc:46:aa:21:14:92:f2:b7:50:e8:4a:
                    6d:8d:f4:b3:1d:76:28:00:1c:a5:24:e6:5e:3c:67:
                    12:f5:55:00:b8:1b:33:39:22:0b:f2:51:b5:7b:c5:
                    86:39:ef:0e:25:06:08:24:24:80:08:28:44:db:9d:
                    4a:89:df:3e:8e:ec:f6:14:6c:54:12:58:a7:83:f7:
                    59:03:3d:ac:c3:47:c4:86:d6:46:35:be:e1:42:2f:
                    bb:3d:10:29:55:c1:b4:66:0b:f3:17:2d:39:f4:88:
                    ef:02:2b:b1:15:c5:07:47:45:11:de:30:3b:43:1d:
                    bc:72:fc:7b:8c:a1:7d:0a:27:b2:0b:22:0e:56:4d:
                    99:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EC:42:D6:F6:74:29:2B:E8:AD:BF:BC:D4:7A:36:C9:98:47:6C:B9
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f2d29eb7-9f1e-4a03-b624-2b45824d3c5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:f8:ba:99:9e:99:4b:d7:62:4f:c8:0d:c1:13:73:68:77:13:
         d6:24:2b:41:b4:b7:66:91:e7:3d:54:8b:e2:6a:2d:85:25:18:
         70:32:5c:2a:14:03:57:c3:89:a7:7b:a4:bb:71:b2:ac:52:e8:
         13:e8:60:96:60:19:ff:df:94:b0:71:26:c3:df:d2:46:da:9a:
         4e:df:f8:9e:bd:3e:96:36:27:3c:d7:53:71:47:b0:09:8c:61:
         6f:8f:0c:44:90:15:25:b5:17:e8:e4:0a:54:21:9a:b4:1b:d9:
         5a:d3:5a:be:43:f8:2f:cf:be:cc:aa:89:72:14:1f:ed:0d:de:
         d4:a0:73:09:58:43:c3:13:f5:a7:ea:b7:d6:f9:2e:b5:c2:fa:
         61:db:5a:b4:e1:c9:5a:a8:f5:05:cc:6d:b6:de:75:a4:be:7e:
         81:93:15:cf:2b:36:fd:cc:f4:13:73:51:62:ce:dc:be:09:fa:
         65:b3:af:c2:c0:28:1d:94:69:63:b9:10:d4:f2:06:96:24:f1:
         c7:66:5b:b7:36:f7:a2:f7:a1:3f:c2:21:f7:7c:19:57:75:13:
         f5:25:ba:b6:f6:ea:5f:f2:9d:16:4d:0f:f6:5d:47:28:eb:b5:
         09:8f:51:07:ca:6c:b6:52:61:89:0e:f1:eb:92:94:c4:f4:98:
         83:cc:73:ff
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUBZ9NcTXngWZWu+tk5HRMWOT/ARowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMjIxMDAwMDAwWhcNMjIxMjI0MjM1OTU5
WjCBpTFJMEcGA1UEBRNAYzA1N2RiZmU4MzdhM2NjZWJkM2ViMTRkMDUzYmY4M2Ew
NDZiNDYxYTY4NThhOWJkNGE3NDFhY2JmYmJjNDgyNDEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMHjzN0DULuk3VEIUd5L4/Xt6+kjy9BJxmHnrDgH1M+hAM6CiPV3
VqoLzO7Pm5WPkYHiuDgxFv6bB98+6RzCzH9dv+DXqOVpVh9ziEhs4bMvZcmFHj4V
qGHCnOeZ1plcPZKBJB4JFyXBv0JKM68qImiRch2HodBQTzQAF/xGqiEUkvK3UOhK
bY30sx12KAAcpSTmXjxnEvVVALgbMzkiC/JRtXvFhjnvDiUGCCQkgAgoRNudSonf
Po7s9hRsVBJYp4P3WQM9rMNHxIbWRjW+4UIvuz0QKVXBtGYL8xctOfSI7wIrsRXF
B0dFEd4wO0MdvHL8e4yhfQonsgsiDlZNmccCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRQ7ELW9nQpK+itv7zUejbJmEdsuTAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZjJkMjllYjctOWYxZS00YTAzLWI2MjQtMmI0NTgyNGQzYzVmLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACT4upmemUvXYk/I
DcETc2h3E9YkK0G0t2aR5z1Ui+JqLYUlGHAyXCoUA1fDiad7pLtxsqxS6BPoYJZg
Gf/flLBxJsPf0kbamk7f+J69PpY2JzzXU3FHsAmMYW+PDESQFSW1F+jkClQhmrQb
2VrTWr5D+C/PvsyqiXIUH+0N3tSgcwlYQ8MT9afqt9b5LrXC+mHbWrThyVqo9QXM
bbbedaS+foGTFc8rNv3M9BNzUWLO3L4J+mWzr8LAKB2UaWO5ENTyBpYk8cdmW7c2
96L3oT/CIfd8GVd1E/Ulurb26l/ynRZND/ZdRyjrtQmPUQfKbLZSYYkO8euSlMT0
mIPMc/8=
-----END CERTIFICATE-----