Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/057302a6-68ba-4d0c-9fde-3e9d3502b92b.roa
File: 057302a6-68ba-4d0c-9fde-3e9d3502b92b.roa (raw, json)
Hash identifier: Vjj8FR5/+u/onfVG74BOMugv3PL1K4atAXkxykOMnnY=
Subject key identifier: C5:3F:B8:F5:09:6A:EA:0F:87:4C:DA:CA:29:6E:C7:E4:64:CE:A5:9E
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 2C9F57170939A65815E9C55F2571A2D057367F65
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/057302a6-68ba-4d0c-9fde-3e9d3502b92b.roa
Signing time: Tue 06 Sep 2022 00:00:00 +0000
ROA not before: Tue 06 Sep 2022 00:00:00 +0000
ROA not after: Fri 09 Sep 2022 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:9f:57:17:09:39:a6:58:15:e9:c5:5f:25:71:a2:d0:57:36:7f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Sep 6 00:00:00 2022 GMT
Not After : Sep 9 23:59:59 2022 GMT
Subject: serialNumber=9986dddb26db619ba303ecfb08d03d36808ab9c9b961e861d6f15cd985042234, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9b:c8:0a:7b:c7:74:47:56:84:75:58:0d:4f:
95:f0:85:a2:fd:82:0a:62:d2:e9:25:e9:b5:8b:0b:
47:90:8f:01:b6:86:29:ae:59:1c:bf:34:24:7e:af:
9f:21:7b:2c:6f:97:13:db:36:9c:69:e4:9b:61:3f:
09:82:07:8a:89:bd:a9:2c:0e:52:3f:32:46:27:04:
3c:a1:62:cf:03:3a:72:48:7b:e1:e1:71:63:3f:f9:
b1:4d:6b:29:86:dc:d2:08:27:3f:f7:9c:44:73:9f:
3d:c6:fc:82:58:1b:14:af:6b:a9:c4:fd:99:97:ad:
5c:f3:2f:c5:94:c1:96:df:9f:03:1d:d2:08:ca:71:
15:65:e7:60:6f:33:2c:73:6e:34:58:b8:86:2b:a6:
9f:23:1f:90:db:15:da:d2:12:8f:d0:8c:a5:43:cc:
b2:d6:37:c1:e3:f2:f3:a3:4c:de:5b:22:10:b2:a0:
bc:ad:02:6b:b1:52:14:bf:38:0e:dd:f2:6a:46:94:
59:f3:01:8b:83:5b:0e:f5:7d:da:9b:22:0f:d6:5c:
d2:cb:ad:e6:6b:09:38:72:cd:fd:a2:09:fd:7f:92:
cd:56:3c:40:08:b6:3c:86:b7:f0:d3:d4:fc:94:58:
8d:7b:7d:2f:b1:a6:ab:59:61:83:10:c2:1b:26:91:
af:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3F:B8:F5:09:6A:EA:0F:87:4C:DA:CA:29:6E:C7:E4:64:CE:A5:9E
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/057302a6-68ba-4d0c-9fde-3e9d3502b92b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
32:f2:66:30:62:3f:4b:84:89:c7:05:98:ca:bd:ff:ce:93:a2:
f5:4f:d3:06:53:88:eb:d6:64:91:5c:c4:df:03:69:1f:4d:2e:
c8:23:6b:40:95:c9:f9:df:0c:25:96:a5:ff:a2:23:ef:6b:90:
fe:df:7a:07:51:d9:38:95:fc:7c:c9:4a:00:4c:40:49:dd:1b:
42:a5:ae:16:c7:b8:d8:84:fa:da:2a:61:41:41:ac:70:74:68:
f0:ab:ef:1f:05:b1:78:50:3a:6f:17:d8:b2:1e:49:79:80:cc:
90:d3:ac:95:5e:57:2c:28:ea:de:82:35:e9:59:2d:0c:1e:78:
02:5e:ad:3b:b3:9d:84:c9:0e:57:9c:28:3b:19:8c:b9:58:73:
af:d2:8a:9a:d0:c2:a6:87:70:42:cb:42:ed:db:5a:c5:61:e4:
59:27:80:53:74:85:81:ea:4a:a7:47:f1:c7:58:af:a3:87:64:
ea:7f:93:7b:44:8f:b4:b4:51:ad:2e:62:ec:4f:1b:7d:30:07:
56:9f:de:19:49:94:3a:78:24:d7:18:00:db:dc:04:e7:94:70:
90:a9:41:11:8b:b5:8c:4a:d8:38:8c:f3:39:53:df:03:16:b7:
40:dd:e8:e4:d2:b3:0e:1f:5b:0a:ee:7e:2c:04:d1:66:df:94:
ec:41:98:73
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIULJ9XFwk5plgV6cVfJXGi0Fc2f2UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIwOTA2MDAwMDAwWhcNMjIwOTA5MjM1OTU5
WjCBpTFJMEcGA1UEBRNAOTk4NmRkZGIyNmRiNjE5YmEzMDNlY2ZiMDhkMDNkMzY4
MDhhYjljOWI5NjFlODYxZDZmMTVjZDk4NTA0MjIzNDEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMSbyAp7x3RHVoR1WA1PlfCFov2CCmLS6SXptYsLR5CPAbaGKa5Z
HL80JH6vnyF7LG+XE9s2nGnkm2E/CYIHiom9qSwOUj8yRicEPKFizwM6ckh74eFx
Yz/5sU1rKYbc0ggnP/ecRHOfPcb8glgbFK9rqcT9mZetXPMvxZTBlt+fAx3SCMpx
FWXnYG8zLHNuNFi4hiumnyMfkNsV2tISj9CMpUPMstY3wePy86NM3lsiELKgvK0C
a7FSFL84Dt3yakaUWfMBi4NbDvV92psiD9Zc0sut5msJOHLN/aIJ/X+SzVY8QAi2
PIa38NPU/JRYjXt9L7Gmq1lhgxDCGyaRrwMCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTFP7j1CWrqD4dM2sopbsfkZM6lnjAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMDU3MzAyYTYtNjhiYS00ZDBjLTlmZGUtM2U5ZDM1MDJiOTJiLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADLyZjBiP0uEiccF
mMq9/86TovVP0wZTiOvWZJFcxN8DaR9NLsgja0CVyfnfDCWWpf+iI+9rkP7fegdR
2TiV/HzJSgBMQEndG0KlrhbHuNiE+toqYUFBrHB0aPCr7x8FsXhQOm8X2LIeSXmA
zJDTrJVeVywo6t6CNelZLQweeAJerTuznYTJDlecKDsZjLlYc6/SiprQwqaHcELL
Qu3bWsVh5FkngFN0hYHqSqdH8cdYr6OHZOp/k3tEj7S0Ua0uYuxPG30wB1af3hlJ
lDp4JNcYANvcBOeUcJCpQRGLtYxK2DiM8zlT3wMWt0Dd6OTSsw4fWwrufiwE0Wbf
lOxBmHM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:31 2023 by rpki-client on console-fra.rpki-client.org