Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/09769a23-f271-4f35-9332-6a8fb3be7028.roa
File: 09769a23-f271-4f35-9332-6a8fb3be7028.roa (raw, json)
Hash identifier: 4RSkXZW1Ww4z8tdyyva3dX3hdNFlbM3mAnwZeDMbcfY=
Subject key identifier: 42:89:91:2C:0D:CE:E8:73:91:41:44:65:70:57:38:AC:B0:1D:94:2B
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 66BBA753B16661DAFE4B3F4C431514CAF9B6B8CA
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/09769a23-f271-4f35-9332-6a8fb3be7028.roa
Signing time: Wed 01 Feb 2023 00:00:00 +0000
ROA not before: Wed 01 Feb 2023 00:00:00 +0000
ROA not after: Sat 04 Feb 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:bb:a7:53:b1:66:61:da:fe:4b:3f:4c:43:15:14:ca:f9:b6:b8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Feb 1 00:00:00 2023 GMT
Not After : Feb 4 23:59:59 2023 GMT
Subject: serialNumber=5b1f657f23fecb5e267098581751cecfbd7ce9872657eb48c46e578c0d332a1e, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:85:48:20:77:93:cb:53:0f:d8:73:0d:ea:
a5:35:8e:63:76:dd:37:5a:7b:e8:72:d1:2f:59:b0:
9c:bf:9a:32:fd:88:7a:a2:e2:ff:37:97:3e:a1:d8:
55:f3:69:56:97:07:da:1b:01:9b:85:98:3e:46:13:
06:6b:b7:ad:f6:3a:b8:52:9c:79:e3:6a:4a:31:48:
75:e9:b5:30:0d:c1:95:d8:7a:d4:96:a2:c5:62:df:
43:5e:01:a4:08:63:62:e8:af:36:2c:49:e4:d1:9a:
be:e7:97:47:f9:50:3d:9e:35:99:b2:6b:50:e0:7f:
f8:f9:a2:85:dc:8a:02:91:05:4b:bb:4e:73:d1:1b:
a9:22:a8:fb:92:dd:94:04:97:8b:46:10:4f:00:7d:
4e:ef:64:00:59:10:e0:4f:a0:c9:ed:5b:54:86:fb:
87:ad:1a:d4:39:47:d6:ff:a6:38:ed:b8:4d:a9:5c:
6a:15:e9:2f:a9:56:5c:d9:86:c3:15:20:8a:70:62:
9e:4d:76:6f:21:71:37:b5:1e:de:bb:1b:59:0b:14:
2a:32:08:44:55:c3:35:6c:a6:dc:4f:91:b0:c1:da:
ee:bf:44:95:83:1a:c1:e6:ed:e2:7f:45:cc:57:6e:
0d:e4:35:ce:3d:7c:08:c0:04:b3:e0:d4:39:b4:44:
e7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:89:91:2C:0D:CE:E8:73:91:41:44:65:70:57:38:AC:B0:1D:94:2B
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/09769a23-f271-4f35-9332-6a8fb3be7028.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:0f:44:0d:c3:84:72:87:1c:ad:35:12:ac:7b:07:71:ce:e9:
f0:9f:9a:05:cc:95:3c:d2:e2:2a:f8:90:38:f9:c8:50:6e:8a:
da:06:d5:47:73:a0:0c:be:bb:34:eb:bb:d2:44:7a:d8:5d:3c:
a9:f9:90:a1:3c:ae:8a:d2:f6:b1:cd:0e:4c:8e:a5:02:ab:09:
86:57:dc:09:2c:4f:7b:fd:58:b1:56:86:0d:75:ec:b0:91:d7:
53:e3:d5:09:1f:ef:af:01:73:5b:95:0a:12:2f:aa:9e:59:dd:
e9:09:0c:c1:eb:01:df:0d:39:f7:34:00:20:41:f2:e1:3b:6c:
86:ec:d4:83:7f:af:8f:15:d5:a4:36:a9:59:4f:11:47:79:38:
20:2b:5a:df:13:d1:48:31:89:e8:cb:60:87:8f:71:a4:48:b3:
46:f5:91:d0:71:3b:45:f2:9d:0e:a5:55:db:e1:49:d6:9d:ef:
a7:f4:37:74:5e:df:fc:37:ae:64:80:70:c0:d5:aa:dd:58:b1:
ef:62:3e:3b:b9:23:1a:50:0a:dc:ac:56:ba:82:85:21:fd:36:
83:c7:cf:15:c7:3e:3c:70:2e:00:7f:f0:53:32:aa:5c:f8:d2:
a8:50:be:c6:a9:5b:e5:09:89:a8:19:b6:23:84:61:2c:b8:a5:
ee:f0:17:e8
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUZrunU7FmYdr+Sz9MQxUUyvm2uMowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMjAxMDAwMDAwWhcNMjMwMjA0MjM1OTU5
WjCBpTFJMEcGA1UEBRNANWIxZjY1N2YyM2ZlY2I1ZTI2NzA5ODU4MTc1MWNlY2Zi
ZDdjZTk4NzI2NTdlYjQ4YzQ2ZTU3OGMwZDMzMmExZTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKzShUggd5PLUw/Ycw3qpTWOY3bdN1p76HLRL1mwnL+aMv2IeqLi
/zeXPqHYVfNpVpcH2hsBm4WYPkYTBmu3rfY6uFKceeNqSjFIdem1MA3Bldh61Jai
xWLfQ14BpAhjYuivNixJ5NGavueXR/lQPZ41mbJrUOB/+PmihdyKApEFS7tOc9Eb
qSKo+5LdlASXi0YQTwB9Tu9kAFkQ4E+gye1bVIb7h60a1DlH1v+mOO24TalcahXp
L6lWXNmGwxUginBink12byFxN7Ue3rsbWQsUKjIIRFXDNWym3E+RsMHa7r9ElYMa
webt4n9FzFduDeQ1zj18CMAEs+DUObRE55UCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRCiZEsDc7oc5FBRGVwVzissB2UKzAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMDk3NjlhMjMtZjI3MS00ZjM1LTkzMzItNmE4ZmIzYmU3MDI4LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAMAPRA3DhHKHHK01
Eqx7B3HO6fCfmgXMlTzS4ir4kDj5yFBuitoG1UdzoAy+uzTru9JEethdPKn5kKE8
rorS9rHNDkyOpQKrCYZX3AksT3v9WLFWhg117LCR11Pj1Qkf768Bc1uVChIvqp5Z
3ekJDMHrAd8NOfc0ACBB8uE7bIbs1IN/r48V1aQ2qVlPEUd5OCArWt8T0UgxiejL
YIePcaRIs0b1kdBxO0XynQ6lVdvhSdad76f0N3Re3/w3rmSAcMDVqt1Yse9iPju5
IxpQCtysVrqChSH9NoPHzxXHPjxwLgB/8FMyqlz40qhQvsapW+UJiagZtiOEYSy4
pe7wF+g=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:37 2023 by rpki-client on console-ams.rpki-client.org