Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f5f2fcd2-b85a-4778-a12c-808512a6b0f9.roa
File:                     f5f2fcd2-b85a-4778-a12c-808512a6b0f9.roa (raw, json)
Hash identifier:          BmdWHrr/WFFaOY+nWdgjNbDCNNvgdpJwG61TPGEP/lc=
Subject key identifier:   39:41:CC:12:8D:08:BC:09:97:6B:92:F5:16:A4:0A:C9:BB:04:1E:E5
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1525CCD70AEC44AD3021FBC02C162834B26CF251
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f5f2fcd2-b85a-4778-a12c-808512a6b0f9.roa
Signing time:             Thu 22 Dec 2022 00:00:00 +0000
ROA not before:           Thu 22 Dec 2022 00:00:00 +0000
ROA not after:            Sun 25 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:25:cc:d7:0a:ec:44:ad:30:21:fb:c0:2c:16:28:34:b2:6c:f2:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec 22 00:00:00 2022 GMT
            Not After : Dec 25 23:59:59 2022 GMT
        Subject: serialNumber=2274463a9dbb131b851478ab739da01eec6013761618bdb2529018be609c92a8, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ac:71:0c:30:9e:8e:ed:ab:66:0d:93:91:95:
                    de:0c:78:81:93:e5:27:89:5b:f2:4d:13:ee:b2:6f:
                    69:ab:4c:88:ec:17:86:34:96:c4:82:0e:d1:9d:f6:
                    fd:9b:7b:5a:f6:98:b3:c3:3a:0b:0e:17:ef:de:56:
                    e5:cf:36:78:3a:2a:a0:0d:5d:2a:3e:5c:4d:20:45:
                    c0:2e:dc:db:a0:7a:27:58:4a:3b:1e:5c:3e:9b:ca:
                    93:54:57:55:00:ba:e5:64:41:10:82:df:63:82:f3:
                    21:d1:5d:77:9d:b8:a2:64:d7:26:e5:54:1f:bc:98:
                    47:3b:aa:a3:26:78:39:44:90:86:7e:47:89:7e:f7:
                    70:7d:59:12:cf:38:de:07:55:49:47:c0:47:c9:eb:
                    fe:7f:67:66:bd:b9:6b:1d:4b:4d:c6:87:f1:5c:a4:
                    45:e8:01:e2:13:d6:de:97:12:ff:ce:11:e9:51:36:
                    4d:be:f0:9f:1e:70:82:56:e2:35:dd:b8:c0:6d:2f:
                    72:6d:c6:f8:52:1b:61:d6:65:59:07:8e:dd:78:ca:
                    cb:58:62:1e:a0:86:17:fd:ab:fc:37:8c:b7:b9:5a:
                    1e:34:65:68:c9:d0:e2:61:fa:03:2f:d9:93:e8:cb:
                    e5:0f:ff:40:dc:f8:68:70:77:7b:1d:80:92:42:f6:
                    68:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:41:CC:12:8D:08:BC:09:97:6B:92:F5:16:A4:0A:C9:BB:04:1E:E5
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f5f2fcd2-b85a-4778-a12c-808512a6b0f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:4b:10:a3:86:d1:b7:b3:11:9b:20:0e:72:91:65:ae:b7:e6:
         a1:17:d8:8a:d1:17:d8:96:14:5b:bb:a2:42:91:96:2c:f9:11:
         7b:3c:8d:9f:3c:3f:1c:1f:04:e6:a5:c8:5b:98:c9:07:04:dd:
         4e:67:26:a7:60:c4:67:c0:2c:ad:96:9b:a0:aa:69:22:52:3a:
         ce:c2:88:69:5f:60:ed:03:ee:9a:2f:df:a3:e7:11:52:d4:d5:
         a4:35:14:a6:c0:27:fd:04:6d:72:58:44:0f:7b:32:34:bf:cf:
         6a:cc:f7:a9:37:2d:12:1a:c6:10:69:1f:cc:43:8a:28:51:0d:
         9a:42:ed:02:9a:7f:f6:7c:3d:a8:f9:2b:e7:fd:31:51:1f:fa:
         c5:ea:f9:6c:79:84:74:33:b6:d8:69:23:e4:69:46:5b:bd:5b:
         0b:fa:4c:7f:99:d6:65:2d:c7:54:ea:bf:53:61:5e:fb:e2:c7:
         d2:c1:2d:09:3a:02:86:73:21:fc:27:b7:20:b3:8f:bf:e8:14:
         c1:e4:01:57:cc:88:57:a5:a1:e1:3c:cd:32:ec:cc:0f:87:de:
         0a:97:1a:00:8f:32:16:82:9f:7b:a4:e0:b2:76:9c:1d:56:3b:
         27:5d:6e:ca:a8:a0:0a:90:d6:a9:b6:f0:ab:cd:f6:37:16:3c:
         62:b0:4d:ed
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUFSXM1wrsRK0wIfvALBYoNLJs8lEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMjIyMDAwMDAwWhcNMjIxMjI1MjM1OTU5
WjCBpTFJMEcGA1UEBRNAMjI3NDQ2M2E5ZGJiMTMxYjg1MTQ3OGFiNzM5ZGEwMWVl
YzYwMTM3NjE2MThiZGIyNTI5MDE4YmU2MDljOTJhODEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL+scQwwno7tq2YNk5GV3gx4gZPlJ4lb8k0T7rJvaatMiOwXhjSW
xIIO0Z32/Zt7WvaYs8M6Cw4X795W5c82eDoqoA1dKj5cTSBFwC7c26B6J1hKOx5c
PpvKk1RXVQC65WRBEILfY4LzIdFdd524omTXJuVUH7yYRzuqoyZ4OUSQhn5HiX73
cH1ZEs843gdVSUfAR8nr/n9nZr25ax1LTcaH8VykRegB4hPW3pcS/84R6VE2Tb7w
nx5wglbiNd24wG0vcm3G+FIbYdZlWQeO3XjKy1hiHqCGF/2r/DeMt7laHjRlaMnQ
4mH6Ay/Zk+jL5Q//QNz4aHB3ex2AkkL2aJ8CAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQ5QcwSjQi8CZdrkvUWpArJuwQe5TAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZjVmMmZjZDItYjg1YS00Nzc4LWExMmMtODA4NTEyYTZiMGY5LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEBLEKOG0bezEZsg
DnKRZa635qEX2IrRF9iWFFu7okKRliz5EXs8jZ88PxwfBOalyFuYyQcE3U5nJqdg
xGfALK2Wm6CqaSJSOs7CiGlfYO0D7pov36PnEVLU1aQ1FKbAJ/0EbXJYRA97MjS/
z2rM96k3LRIaxhBpH8xDiihRDZpC7QKaf/Z8Paj5K+f9MVEf+sXq+Wx5hHQztthp
I+RpRlu9Wwv6TH+Z1mUtx1Tqv1NhXvvix9LBLQk6AoZzIfwntyCzj7/oFMHkAVfM
iFeloeE8zTLszA+H3gqXGgCPMhaCn3uk4LJ2nB1WOyddbsqooAqQ1qm28KvN9jcW
PGKwTe0=
-----END CERTIFICATE-----