Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fb38e05d-8f84-4628-a39a-834d16da3a83.roa
File:                     fb38e05d-8f84-4628-a39a-834d16da3a83.roa (raw, json)
Hash identifier:          mTOEbh1dymi6bp96iUTcKM4/U7G0E1hTLBopbF7otNw=
Subject key identifier:   CE:4A:53:E9:E1:99:1E:F6:17:16:96:40:FD:B9:3F:35:EB:C8:0A:2F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       086D5F06D9E033D3FA9FB9D509D98F2E206BD487
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fb38e05d-8f84-4628-a39a-834d16da3a83.roa
Signing time:             Tue 06 Dec 2022 00:00:00 +0000
ROA not before:           Tue 06 Dec 2022 00:00:00 +0000
ROA not after:            Fri 09 Dec 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:6d:5f:06:d9:e0:33:d3:fa:9f:b9:d5:09:d9:8f:2e:20:6b:d4:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Dec  6 00:00:00 2022 GMT
            Not After : Dec  9 23:59:59 2022 GMT
        Subject: serialNumber=25271e5233f5ad006afecdb9aa60d620c4b540a4d51e125f702c285e0cc9b7b1, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:87:e7:16:63:f1:fb:9b:c8:82:4e:b2:10:cc:
                    15:1d:bc:41:97:55:ca:c7:5b:43:c1:86:9e:fc:fa:
                    57:84:ac:7b:2b:33:3c:57:d1:eb:3e:47:01:ad:76:
                    18:82:52:d9:bb:93:70:c7:cd:38:d7:74:0a:f4:8f:
                    b5:7d:33:87:97:10:5e:50:dc:64:c0:7e:1a:cf:3e:
                    dd:05:32:1a:27:74:17:96:54:f7:0d:7f:98:74:34:
                    97:11:05:e4:f7:de:f2:90:4d:f1:7a:50:47:a0:90:
                    e9:6e:f4:e5:25:37:02:26:59:35:6f:95:80:0d:d5:
                    ad:c9:32:d0:32:38:ac:59:94:fb:94:01:95:e3:e2:
                    98:39:f4:30:f4:88:46:fb:1e:45:e7:49:16:6b:26:
                    7e:c4:45:df:9a:d3:e1:bb:f6:be:af:3e:b8:b7:50:
                    05:f5:90:c8:22:df:1f:d6:42:e9:a6:56:31:6b:c0:
                    17:56:ca:c2:08:70:40:57:66:e7:4b:0b:8a:c1:6d:
                    db:f6:51:05:cf:3e:b3:84:5d:56:a4:13:14:24:3e:
                    d4:f6:5a:a4:e6:d5:cc:84:0c:58:b4:b5:62:11:cb:
                    72:74:37:81:fa:ad:35:1a:b4:99:33:c9:96:e3:0e:
                    0f:78:24:26:31:be:c4:6e:85:dd:b0:8d:59:fb:c7:
                    50:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4A:53:E9:E1:99:1E:F6:17:16:96:40:FD:B9:3F:35:EB:C8:0A:2F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fb38e05d-8f84-4628-a39a-834d16da3a83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:34:c7:8c:19:16:f2:4b:38:45:dd:82:0a:9d:d2:52:ee:7f:
         e3:06:d1:e3:cc:88:f1:79:dd:84:bc:1a:f8:e4:50:96:3f:f7:
         94:b9:09:5d:a3:71:67:21:59:be:2c:8f:b5:82:d2:62:aa:73:
         e3:98:d0:2a:68:81:fe:08:eb:97:5d:21:17:8d:3e:68:c2:7e:
         dc:ca:2b:9b:a6:86:16:d2:03:3c:fd:2e:c9:58:2b:d2:f7:21:
         66:47:1c:eb:b9:b5:4a:c4:67:33:af:0b:1d:fe:26:50:86:ca:
         59:69:f9:0f:d9:b6:01:74:0f:14:08:e8:d9:a8:57:1b:55:9f:
         74:5d:85:26:31:95:df:2f:0d:66:80:fe:cb:86:73:e5:0a:d2:
         cf:ef:c6:92:b5:e3:d6:74:79:b8:cc:8b:b5:97:7b:4d:f2:ce:
         0a:ae:39:30:4c:ef:d3:3c:ef:21:3d:51:3f:7e:13:94:00:77:
         50:2c:86:ed:a0:d0:54:5f:60:04:41:f0:ea:d2:53:80:c8:3c:
         b3:8b:36:68:e4:ba:c0:fb:e1:95:50:71:29:19:64:3d:c5:4e:
         b0:8a:e1:d5:60:fd:33:2b:b7:3e:fe:49:37:80:9b:30:95:80:
         13:f5:9d:06:41:82:83:a5:ef:f4:c5:f8:ca:3f:d5:63:fe:08:
         e9:f3:2b:cd
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUCG1fBtngM9P6n7nVCdmPLiBr1IcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMjA2MDAwMDAwWhcNMjIxMjA5MjM1OTU5
WjCBpTFJMEcGA1UEBRNAMjUyNzFlNTIzM2Y1YWQwMDZhZmVjZGI5YWE2MGQ2MjBj
NGI1NDBhNGQ1MWUxMjVmNzAyYzI4NWUwY2M5YjdiMTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKKH5xZj8fubyIJOshDMFR28QZdVysdbQ8GGnvz6V4SseyszPFfR
6z5HAa12GIJS2buTcMfNONd0CvSPtX0zh5cQXlDcZMB+Gs8+3QUyGid0F5ZU9w1/
mHQ0lxEF5Pfe8pBN8XpQR6CQ6W705SU3AiZZNW+VgA3Vrcky0DI4rFmU+5QBlePi
mDn0MPSIRvseRedJFmsmfsRF35rT4bv2vq8+uLdQBfWQyCLfH9ZC6aZWMWvAF1bK
wghwQFdm50sLisFt2/ZRBc8+s4RdVqQTFCQ+1PZapObVzIQMWLS1YhHLcnQ3gfqt
NRq0mTPJluMOD3gkJjG+xG6F3bCNWfvHUKUCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTOSlPp4Zke9hcWlkD9uT8168gKLzAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZmIzOGUwNWQtOGY4NC00NjI4LWEzOWEtODM0ZDE2ZGEzYTgzLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAF40x4wZFvJLOEXd
ggqd0lLuf+MG0ePMiPF53YS8GvjkUJY/95S5CV2jcWchWb4sj7WC0mKqc+OY0Cpo
gf4I65ddIReNPmjCftzKK5umhhbSAzz9LslYK9L3IWZHHOu5tUrEZzOvCx3+JlCG
yllp+Q/ZtgF0DxQI6NmoVxtVn3RdhSYxld8vDWaA/suGc+UK0s/vxpK149Z0ebjM
i7WXe03yzgquOTBM79M87yE9UT9+E5QAd1Ashu2g0FRfYARB8OrSU4DIPLOLNmjk
usD74ZVQcSkZZD3FTrCK4dVg/TMrtz7+STeAmzCVgBP1nQZBgoOl7/TF+Mo/1WP+
COnzK80=
-----END CERTIFICATE-----