Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f7f65232-3a17-433f-ac63-fa1416d9b282.roa
File:                     f7f65232-3a17-433f-ac63-fa1416d9b282.roa (raw, json)
Hash identifier:          j2TFgthhFDycg3OqKaiJ5Hr1sB6GuxOTsTcHDqIzvWc=
Subject key identifier:   54:DC:E1:8C:2D:52:C5:7D:F2:17:1B:8D:FF:7F:D3:C0:9C:16:6D:A5
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       787F0117EA9F14DD9B3E7DC414561204B1B10B44
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f7f65232-3a17-433f-ac63-fa1416d9b282.roa
Signing time:             Sun 04 Dec 2022 00:00:00 +0000
ROA not before:           Sun 04 Dec 2022 00:00:00 +0000
ROA not after:            Wed 07 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7f:01:17:ea:9f:14:dd:9b:3e:7d:c4:14:56:12:04:b1:b1:0b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec  4 00:00:00 2022 GMT
            Not After : Dec  7 23:59:59 2022 GMT
        Subject: serialNumber=6274f2ab37c6d4a3f516e3580ce487af863e2d507980bfa9056d65055d99ae8e, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:19:e4:1d:71:91:8a:2e:7c:9e:b0:9d:ff:d3:
                    e4:94:08:8e:d2:20:74:34:e8:42:9e:ea:38:2d:93:
                    2c:4d:1b:91:bc:2e:be:3d:13:b7:f1:ff:71:47:c4:
                    04:7a:70:ac:b5:22:b7:83:e0:4e:8f:f4:c2:db:b4:
                    0b:d8:f5:6a:60:ec:e1:d8:78:b9:1f:7c:f1:b7:b7:
                    32:11:ac:3d:ce:64:e2:85:cd:d8:12:10:e8:2e:d5:
                    6f:f7:3f:0a:6b:34:a0:92:52:e9:34:21:13:65:39:
                    43:91:48:3a:b7:d6:8c:3f:7c:88:2c:98:70:45:fc:
                    fb:07:52:10:fe:58:89:ec:c9:f5:5e:9c:ce:63:2b:
                    58:37:84:fd:b2:6d:9a:38:61:b5:1a:96:f7:d7:dd:
                    14:0c:2b:38:9b:e6:0f:b9:e4:76:64:d1:d2:7c:f7:
                    21:57:be:61:1f:0b:ae:66:1c:01:8e:bd:d6:1e:75:
                    cf:13:bf:76:e5:cc:f4:90:1b:4d:75:32:3e:e3:2f:
                    33:98:64:85:c9:19:e6:c9:a0:04:63:d3:43:78:e2:
                    f4:9d:dd:cd:0f:f3:39:0d:2b:76:5e:f6:15:7a:e8:
                    ef:b1:e0:48:b5:5f:8a:e2:6b:0b:4b:ff:69:e7:92:
                    e2:08:3a:1a:69:27:17:a8:36:f1:51:13:c9:03:52:
                    d6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DC:E1:8C:2D:52:C5:7D:F2:17:1B:8D:FF:7F:D3:C0:9C:16:6D:A5
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f7f65232-3a17-433f-ac63-fa1416d9b282.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:3c:84:76:20:35:3b:81:c7:73:85:e4:1f:fa:27:58:6c:2e:
         31:60:30:05:7d:44:b5:ec:65:ce:24:42:af:8d:05:38:15:0c:
         f4:8a:fa:12:1a:2e:d6:22:57:ea:27:d8:83:05:a5:d0:90:30:
         f4:2a:dd:53:62:d0:1b:44:b7:5e:c9:76:b3:59:58:18:fb:9a:
         96:15:e0:b0:d1:5a:f0:fe:70:f1:a1:1c:65:36:a9:bd:9e:b5:
         70:89:a6:68:e4:10:e5:17:55:e0:02:7a:cd:9b:81:b0:58:fa:
         0a:8c:ba:4e:67:85:dd:5a:e6:dd:2a:24:e8:4a:75:5b:fd:16:
         18:a1:53:b5:25:e4:e1:a6:df:4d:d3:8a:5d:68:b8:af:24:b9:
         96:6f:8a:06:ba:4b:f6:ae:1c:75:05:2d:a3:24:de:b2:e0:cf:
         19:0a:d7:ff:91:b4:4c:e6:b5:d8:b1:f6:78:1f:eb:f1:4a:cf:
         f7:4d:46:60:7c:25:a0:b9:7d:cc:78:84:27:3a:49:33:4e:d0:
         1d:51:8f:17:65:00:27:5f:f1:16:c4:20:92:81:8c:cf:be:1e:
         df:c7:7e:9f:19:8e:39:1e:5b:de:10:13:0b:78:60:70:e1:c5:
         db:f9:05:3f:21:aa:b5:62:5c:60:f4:5a:cb:8d:10:2d:84:bd:
         3b:99:e8:2b
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUeH8BF+qfFN2bPn3EFFYSBLGxC0QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMjA0MDAwMDAwWhcNMjIxMjA3MjM1OTU5
WjCBpTFJMEcGA1UEBRNANjI3NGYyYWIzN2M2ZDRhM2Y1MTZlMzU4MGNlNDg3YWY4
NjNlMmQ1MDc5ODBiZmE5MDU2ZDY1MDU1ZDk5YWU4ZTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJkZ5B1xkYoufJ6wnf/T5JQIjtIgdDToQp7qOC2TLE0bkbwuvj0T
t/H/cUfEBHpwrLUit4PgTo/0wtu0C9j1amDs4dh4uR988be3MhGsPc5k4oXN2BIQ
6C7Vb/c/Cms0oJJS6TQhE2U5Q5FIOrfWjD98iCyYcEX8+wdSEP5YiezJ9V6czmMr
WDeE/bJtmjhhtRqW99fdFAwrOJvmD7nkdmTR0nz3IVe+YR8LrmYcAY691h51zxO/
duXM9JAbTXUyPuMvM5hkhckZ5smgBGPTQ3ji9J3dzQ/zOQ0rdl72FXro77HgSLVf
iuJrC0v/aeeS4gg6GmknF6g28VETyQNS1gsCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRU3OGMLVLFffIXG43/f9PAnBZtpTAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZjdmNjUyMzItM2ExNy00MzNmLWFjNjMtZmExNDE2ZDliMjgyLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABw8hHYgNTuBx3OF
5B/6J1hsLjFgMAV9RLXsZc4kQq+NBTgVDPSK+hIaLtYiV+on2IMFpdCQMPQq3VNi
0BtEt17JdrNZWBj7mpYV4LDRWvD+cPGhHGU2qb2etXCJpmjkEOUXVeACes2bgbBY
+gqMuk5nhd1a5t0qJOhKdVv9FhihU7Ul5OGm303Til1ouK8kuZZviga6S/auHHUF
LaMk3rLgzxkK1/+RtEzmtdix9ngf6/FKz/dNRmB8JaC5fcx4hCc6STNO0B1Rjxdl
ACdf8RbEIJKBjM++Ht/Hfp8ZjjkeW94QEwt4YHDhxdv5BT8hqrViXGD0WsuNEC2E
vTuZ6Cs=
-----END CERTIFICATE-----