Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1a78d1db-3a71-42c7-8609-f397d6077fca.roa
File: 1a78d1db-3a71-42c7-8609-f397d6077fca.roa (raw, json)
Hash identifier: +8Xutliu1QzWPVwvkzQJuYHUlVfiF867CPFC+qnuqL0=
Subject key identifier: 7A:8D:67:C6:8B:61:95:96:31:C5:62:AE:97:79:C4:C0:27:87:BE:66
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 42B7E2E1F62A35F2EDA24C0DD13F82A18DC11146
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1a78d1db-3a71-42c7-8609-f397d6077fca.roa
Signing time: Sun 07 May 2023 00:00:00 +0000
ROA not before: Sun 07 May 2023 00:00:00 +0000
ROA not after: Wed 10 May 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:b7:e2:e1:f6:2a:35:f2:ed:a2:4c:0d:d1:3f:82:a1:8d:c1:11:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: May 7 00:00:00 2023 GMT
Not After : May 10 23:59:59 2023 GMT
Subject: serialNumber=d2b818d79da4b7efcffac75baaf18515544acb9df9f3735171a69b297a8c4c62, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6b:07:b3:ce:52:4d:42:4a:2c:4a:77:e8:41:
21:98:f5:48:09:84:c8:29:3e:9f:3e:b5:87:2c:69:
e5:ec:ed:90:66:f9:fc:56:61:48:e7:1c:b9:dd:f3:
dd:ce:b4:df:59:44:4d:46:ee:87:22:a0:77:72:f3:
35:e1:28:94:d8:d0:5f:14:1a:15:95:6c:62:89:e0:
34:c2:e7:44:cf:d0:16:5f:04:f4:57:fa:9d:27:e4:
eb:cd:53:d2:ee:ff:85:b6:5b:d6:93:97:5f:ef:09:
b6:b3:ed:40:57:82:8c:5e:49:19:31:77:79:f4:03:
b3:19:6c:fc:96:dd:7f:67:e9:0a:37:d2:90:27:de:
30:40:ed:ba:90:25:f2:f3:26:11:99:ee:d1:a3:f4:
4e:79:8d:8d:60:ad:2f:d7:e6:07:12:ca:48:23:07:
89:b3:16:31:2e:ab:fe:02:b5:5e:b8:2a:da:72:b3:
b9:7b:87:4a:d1:ee:2c:eb:6c:48:dd:8d:1f:93:8b:
10:75:da:ee:e7:53:83:d8:f1:5f:89:41:c9:25:a7:
ec:2a:f2:9a:6d:6d:60:b7:54:25:87:0d:39:0f:b5:
c2:dc:50:89:4d:4d:b7:1a:43:b6:74:5a:bc:8b:8b:
8f:ec:3d:18:ce:72:35:fe:64:f7:6f:76:cb:0a:c9:
57:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8D:67:C6:8B:61:95:96:31:C5:62:AE:97:79:C4:C0:27:87:BE:66
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1a78d1db-3a71-42c7-8609-f397d6077fca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:e9:96:23:42:d0:d6:d7:48:13:d0:2a:06:3a:10:1d:dd:32:
9d:31:87:64:b7:db:da:e6:ca:20:00:dd:5f:7c:a4:5e:02:52:
8b:ae:c4:1d:c0:b7:e3:eb:2f:3a:5c:d5:81:24:1d:a3:60:d0:
1c:31:03:e4:c0:f8:10:21:6e:7a:83:a0:87:3b:99:8b:11:7d:
c2:ea:69:1f:5a:ca:0f:a8:ab:52:bb:ec:c0:e0:1d:d5:f0:f9:
ac:ee:54:4d:36:e1:94:fa:a2:44:ac:db:3a:c5:b7:8b:12:7d:
19:6e:8d:3f:aa:27:b3:9e:be:1b:2d:84:2f:71:80:a9:0b:26:
b8:f3:9a:f3:c8:2e:9f:d7:02:f5:d5:e0:e8:59:2d:1c:3c:0d:
72:22:02:c5:2a:72:15:6d:be:85:0a:fb:5d:a0:2c:c9:9c:94:
42:a4:d3:6b:d5:04:f9:88:30:1e:2b:e4:50:1b:0e:06:f6:c1:
de:4e:97:26:2c:c5:de:b6:2c:e3:89:14:13:ad:82:17:f6:ad:
b0:8c:08:1c:14:04:10:16:5f:8f:62:7c:5d:fa:ad:73:b8:30:
06:62:8b:ac:d5:c7:ba:e4:9f:3b:68:c4:11:ee:1c:6e:4f:55:
9c:85:af:fe:2d:fd:f0:2a:b1:d0:d4:c3:2c:eb:44:2d:f9:49:
25:9f:5a:4f
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUQrfi4fYqNfLtokwN0T+CoY3BEUYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNTA3MDAwMDAwWhcNMjMwNTEwMjM1OTU5
WjCBpTFJMEcGA1UEBRNAZDJiODE4ZDc5ZGE0YjdlZmNmZmFjNzViYWFmMTg1MTU1
NDRhY2I5ZGY5ZjM3MzUxNzFhNjliMjk3YThjNGM2MjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAONrB7POUk1CSixKd+hBIZj1SAmEyCk+nz61hyxp5eztkGb5/FZh
SOccud3z3c6031lETUbuhyKgd3LzNeEolNjQXxQaFZVsYongNMLnRM/QFl8E9Ff6
nSfk681T0u7/hbZb1pOXX+8JtrPtQFeCjF5JGTF3efQDsxls/Jbdf2fpCjfSkCfe
MEDtupAl8vMmEZnu0aP0TnmNjWCtL9fmBxLKSCMHibMWMS6r/gK1Xrgq2nKzuXuH
StHuLOtsSN2NH5OLEHXa7udTg9jxX4lBySWn7Crymm1tYLdUJYcNOQ+1wtxQiU1N
txpDtnRavIuLj+w9GM5yNf5k9292ywrJV7cCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBR6jWfGi2GVljHFYq6XecTAJ4e+ZjAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvMWE3OGQxZGItM2E3MS00MmM3LTg2MDktZjM5N2Q2MDc3ZmNhLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKTpliNC0NbXSBPQ
KgY6EB3dMp0xh2S329rmyiAA3V98pF4CUouuxB3At+PrLzpc1YEkHaNg0BwxA+TA
+BAhbnqDoIc7mYsRfcLqaR9ayg+oq1K77MDgHdXw+azuVE024ZT6okSs2zrFt4sS
fRlujT+qJ7OevhsthC9xgKkLJrjzmvPILp/XAvXV4OhZLRw8DXIiAsUqchVtvoUK
+12gLMmclEKk02vVBPmIMB4r5FAbDgb2wd5OlyYsxd62LOOJFBOtghf2rbCMCBwU
BBAWX49ifF36rXO4MAZii6zVx7rknztoxBHuHG5PVZyFr/4t/fAqsdDUwyzrRC35
SSWfWk8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:32 2023 by rpki-client on console-fra.rpki-client.org