Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/012a136d-d73e-45a3-9e12-ebb796af77bb.roa
File: 012a136d-d73e-45a3-9e12-ebb796af77bb.roa (raw, json)
Hash identifier: qE4zla3EOc9HNFp4MZnwNOfihs6MvKPN5ajj3uQcA+0=
Subject key identifier: 7C:17:77:2D:43:DF:D3:B6:1D:F7:3B:9E:6A:A0:95:AB:08:7B:32:95
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 6717B643A90D52DDA874568B39E676C15B94FEE2
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/012a136d-d73e-45a3-9e12-ebb796af77bb.roa
Signing time: Sat 03 Dec 2022 00:00:00 +0000
ROA not before: Sat 03 Dec 2022 00:00:00 +0000
ROA not after: Tue 06 Dec 2022 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:17:b6:43:a9:0d:52:dd:a8:74:56:8b:39:e6:76:c1:5b:94:fe:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Dec 3 00:00:00 2022 GMT
Not After : Dec 6 23:59:59 2022 GMT
Subject: serialNumber=dd4ca9de2afd84346eee86a678e0081cb40b7f25362581f0979cfb4cf723ca6b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:3f:04:5e:4b:5e:3d:33:97:58:af:c1:4d:
42:43:0f:1b:12:16:62:b0:7b:e4:f9:82:90:a9:41:
22:e0:f8:e0:57:8f:a1:00:30:4e:20:28:19:98:03:
a1:ad:c9:e8:7b:e8:29:81:1e:7a:68:44:c1:8e:64:
ca:1a:f5:d2:78:36:54:b4:24:c9:4c:7a:c1:e4:b8:
32:83:db:4c:6a:b6:8f:99:5a:a9:be:6b:f4:55:06:
d0:a3:8b:68:25:47:bb:b9:50:b7:82:79:9f:b6:8f:
03:cb:e4:a8:82:69:0d:24:9f:a1:5e:30:bb:be:57:
2f:7e:d1:e6:a9:42:6f:8a:a9:51:1c:52:7c:bf:ef:
8c:0c:57:2f:4c:eb:fa:d3:3d:1a:14:7e:94:86:d2:
2e:6b:85:f7:fa:75:be:09:c5:4f:28:bb:b7:76:1a:
18:0d:e0:2f:70:36:ef:3c:31:87:9a:98:8c:be:9d:
25:9b:ad:e4:6a:20:3a:d4:fd:f0:ab:81:58:bc:d2:
fc:30:38:b5:e2:12:87:40:66:3c:ac:90:2e:96:41:
5b:09:f0:33:92:55:ac:ca:62:e9:37:6b:cf:40:b4:
0f:9e:3e:6d:71:bb:15:0f:82:fd:c2:9e:d2:ec:16:
51:f1:14:44:c1:63:55:02:a9:e3:9c:9e:65:55:dc:
ef:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:17:77:2D:43:DF:D3:B6:1D:F7:3B:9E:6A:A0:95:AB:08:7B:32:95
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/012a136d-d73e-45a3-9e12-ebb796af77bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ca:46:eb:26:b8:bc:61:5c:c8:04:6e:0a:d4:00:85:cb:ea:
83:a6:56:37:bb:b4:22:94:d7:06:b0:ca:70:32:52:6d:c5:3f:
f9:27:6e:37:ed:21:c9:76:14:59:2d:57:77:40:c1:7a:6a:a5:
ba:1c:e5:c4:22:79:71:b3:38:ac:b0:00:d8:24:45:53:1e:fd:
6a:f5:d9:3f:71:23:af:2a:ec:62:84:02:76:77:54:4d:a2:5f:
19:d2:6f:9c:b9:ef:f1:b1:12:b4:2e:38:ea:96:76:d8:f7:35:
75:cd:ec:8b:26:32:ae:34:33:ef:9f:eb:5d:6c:ef:e3:00:a4:
5d:65:5c:9c:9f:89:e9:d9:97:5c:70:98:36:67:8d:02:19:42:
cb:08:71:72:63:dd:1b:a0:d9:1c:37:e7:45:bd:69:4b:e6:a3:
99:b5:70:47:43:2b:5f:b8:b8:22:2d:06:cd:f3:54:fc:c2:0c:
94:3a:78:e8:a1:54:aa:6b:74:70:a4:c0:fd:85:0d:8b:a2:eb:
d9:9c:52:fb:84:0a:1a:2c:62:60:d9:69:d3:6e:fe:db:2f:df:
28:c5:27:4f:54:3d:20:d7:ed:67:c5:7a:0f:c8:25:2c:61:32:
27:a9:52:f3:42:2c:de:a7:89:9a:ec:4e:e6:23:a1:5d:4a:d3:
d6:d7:7a:8b
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUZxe2Q6kNUt2odFaLOeZ2wVuU/uIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMjAzMDAwMDAwWhcNMjIxMjA2MjM1OTU5
WjCBpTFJMEcGA1UEBRNAZGQ0Y2E5ZGUyYWZkODQzNDZlZWU4NmE2NzhlMDA4MWNi
NDBiN2YyNTM2MjU4MWYwOTc5Y2ZiNGNmNzIzY2E2YjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ9xPwReS149M5dYr8FNQkMPGxIWYrB75PmCkKlBIuD44FePoQAw
TiAoGZgDoa3J6HvoKYEeemhEwY5kyhr10ng2VLQkyUx6weS4MoPbTGq2j5laqb5r
9FUG0KOLaCVHu7lQt4J5n7aPA8vkqIJpDSSfoV4wu75XL37R5qlCb4qpURxSfL/v
jAxXL0zr+tM9GhR+lIbSLmuF9/p1vgnFTyi7t3YaGA3gL3A27zwxh5qYjL6dJZut
5GogOtT98KuBWLzS/DA4teISh0BmPKyQLpZBWwnwM5JVrMpi6Tdrz0C0D54+bXG7
FQ+C/cKe0uwWUfEURMFjVQKp45yeZVXc77ECAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBR8F3ctQ9/Tth33O55qoJWrCHsylTAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMDEyYTEzNmQtZDczZS00NWEzLTllMTItZWJiNzk2YWY3N2JiLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACzKRusmuLxhXMgE
bgrUAIXL6oOmVje7tCKU1wawynAyUm3FP/knbjftIcl2FFktV3dAwXpqpboc5cQi
eXGzOKywANgkRVMe/Wr12T9xI68q7GKEAnZ3VE2iXxnSb5y57/GxErQuOOqWdtj3
NXXN7IsmMq40M++f611s7+MApF1lXJyfienZl1xwmDZnjQIZQssIcXJj3Rug2Rw3
50W9aUvmo5m1cEdDK1+4uCItBs3zVPzCDJQ6eOihVKprdHCkwP2FDYui69mcUvuE
ChosYmDZadNu/tsv3yjFJ09UPSDX7WfFeg/IJSxhMiepUvNCLN6niZrsTuYjoV1K
09bXeos=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:31 2023 by rpki-client on console-fra.rpki-client.org