Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3b1fa4f8-0632-458e-afb2-d4ee023f20d6.roa
File: 3b1fa4f8-0632-458e-afb2-d4ee023f20d6.roa (raw, json)
Hash identifier: 3oAXWkX1C4Pf0pj0AbGMsFjityqglI/IysYTbPrBWPQ=
Subject key identifier: CF:EC:73:48:61:22:40:6B:D9:83:6D:1A:3F:A8:32:34:8B:44:58:C7
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 2C4DE848F4BA24517E576CD8CEC499CCA45138D3
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3b1fa4f8-0632-458e-afb2-d4ee023f20d6.roa
Signing time: Wed 01 Mar 2023 00:00:00 +0000
ROA not before: Wed 01 Mar 2023 00:00:00 +0000
ROA not after: Sat 04 Mar 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:4d:e8:48:f4:ba:24:51:7e:57:6c:d8:ce:c4:99:cc:a4:51:38:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Mar 1 00:00:00 2023 GMT
Not After : Mar 4 23:59:59 2023 GMT
Subject: serialNumber=d31c22f9bae16b62f8f23e449c4848b41fde65623aaf7e85ad4bdd95d1e608e2, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0f:ce:14:1e:ba:35:49:f2:f5:38:55:81:21:
a9:4d:8b:7e:15:13:6c:e3:32:86:d1:cc:fd:01:00:
5c:04:56:e6:09:0b:bb:42:d2:2f:ff:c6:b7:2e:93:
ff:1c:cb:df:1f:7f:9f:af:27:27:eb:bb:df:08:ef:
e0:de:38:b5:c8:f7:09:88:d0:43:cf:ee:4b:76:41:
25:20:0d:85:5a:58:b7:ea:e1:51:17:74:35:ea:c2:
10:ec:0d:80:ba:fc:cf:3e:e7:0f:e9:3b:09:9e:12:
e9:34:ad:39:a0:b9:b8:cd:f0:70:8f:62:15:3e:84:
ac:76:4e:a1:bf:86:66:81:11:6a:90:6c:5a:00:bb:
3d:9e:f7:fd:0d:78:c1:80:15:99:d7:9d:d3:bf:4a:
48:7b:2e:92:96:25:ed:5a:d1:9d:a1:b3:60:1f:76:
20:0f:2a:2b:cb:4e:0b:3c:95:a1:bc:65:ff:22:e1:
fe:e5:48:e9:df:2c:92:30:1c:df:f6:8f:5a:b8:f6:
d1:c6:e5:d5:27:f4:71:58:6d:b3:49:34:c6:d1:5d:
e4:60:b6:bf:e1:c3:e9:b1:cd:0f:a8:a5:01:74:f2:
d9:e0:6e:ff:f9:e2:03:85:17:1d:63:f8:b7:90:d1:
66:cc:55:64:32:71:de:99:03:9b:2e:d8:95:38:09:
5d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EC:73:48:61:22:40:6B:D9:83:6D:1A:3F:A8:32:34:8B:44:58:C7
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3b1fa4f8-0632-458e-afb2-d4ee023f20d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:ff:c9:fe:04:8d:37:9a:e8:f0:7a:35:b8:2d:e6:46:b3:8e:
36:62:09:c9:33:ce:2e:e0:01:a8:38:d1:d3:db:ed:9c:c0:44:
66:e3:98:44:a7:e6:e5:4f:f3:a9:a5:97:a8:e1:ce:79:52:0e:
e9:f3:da:5b:d0:49:bf:9d:29:11:57:5c:95:ed:8a:d2:78:83:
96:6b:97:39:96:28:73:ee:92:ef:3f:0e:88:23:55:6e:99:fc:
dd:17:68:a0:59:92:96:4e:d2:9b:aa:a9:a6:48:a7:85:89:3d:
98:43:b1:27:25:0c:7a:c9:11:08:c5:c4:5e:fc:65:97:48:4d:
fd:5b:7a:86:05:ea:1a:d9:23:7d:15:f2:84:fe:5b:7b:b1:69:
fc:5f:cd:74:8a:59:b4:2a:20:11:4c:d6:e1:da:fa:bb:bb:58:
40:f8:8f:0a:2a:b9:90:82:66:29:f8:4d:0e:1a:d0:2f:9b:22:
64:23:97:fd:03:29:1b:92:29:83:87:43:42:79:e4:8c:64:43:
21:59:1d:d8:13:ae:c7:b4:07:1e:ed:de:6c:05:13:f9:21:03:
6e:97:a6:5f:9f:71:3e:30:a8:4b:06:7a:70:34:19:4d:06:d0:
1f:99:99:bd:f4:8b:79:60:09:23:96:b0:e7:d4:c8:a4:bf:b9:
e1:83:44:88
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIULE3oSPS6JFF+V2zYzsSZzKRRONMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMzAxMDAwMDAwWhcNMjMwMzA0MjM1OTU5
WjCBpTFJMEcGA1UEBRNAZDMxYzIyZjliYWUxNmI2MmY4ZjIzZTQ0OWM0ODQ4YjQx
ZmRlNjU2MjNhYWY3ZTg1YWQ0YmRkOTVkMWU2MDhlMjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJYPzhQeujVJ8vU4VYEhqU2LfhUTbOMyhtHM/QEAXARW5gkLu0LS
L//Gty6T/xzL3x9/n68nJ+u73wjv4N44tcj3CYjQQ8/uS3ZBJSANhVpYt+rhURd0
NerCEOwNgLr8zz7nD+k7CZ4S6TStOaC5uM3wcI9iFT6ErHZOob+GZoERapBsWgC7
PZ73/Q14wYAVmded079KSHsukpYl7VrRnaGzYB92IA8qK8tOCzyVobxl/yLh/uVI
6d8skjAc3/aPWrj20cbl1Sf0cVhts0k0xtFd5GC2v+HD6bHND6ilAXTy2eBu//ni
A4UXHWP4t5DRZsxVZDJx3pkDmy7YlTgJXakCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTP7HNIYSJAa9mDbRo/qDI0i0RYxzAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvM2IxZmE0ZjgtMDYzMi00NThlLWFmYjItZDRlZTAyM2YyMGQ2LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAv/yf4EjTea6PB6
Nbgt5kazjjZiCckzzi7gAag40dPb7ZzARGbjmESn5uVP86mll6jhznlSDunz2lvQ
Sb+dKRFXXJXtitJ4g5ZrlzmWKHPuku8/DogjVW6Z/N0XaKBZkpZO0puqqaZIp4WJ
PZhDsSclDHrJEQjFxF78ZZdITf1beoYF6hrZI30V8oT+W3uxafxfzXSKWbQqIBFM
1uHa+ru7WED4jwoquZCCZin4TQ4a0C+bImQjl/0DKRuSKYOHQ0J55IxkQyFZHdgT
rse0Bx7t3mwFE/khA26Xpl+fcT4wqEsGenA0GU0G0B+Zmb30i3lgCSOWsOfUyKS/
ueGDRIg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:40 2023 by rpki-client on console-ams.rpki-client.org