Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/414be1c2-b6cd-4749-b699-e367cb1dd846.roa
File: 414be1c2-b6cd-4749-b699-e367cb1dd846.roa (raw, json)
Hash identifier: Nxt4z+aBLZpwtZ27H6J7n3/DX/kBKKvWZQvsDlSZINU=
Subject key identifier: DA:E8:AE:61:58:70:E0:DA:70:8F:59:B5:72:9E:4C:A5:45:54:05:F3
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 517C0F1B89F088CFF1F37B159EBF7B4FCA42BDAB
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/414be1c2-b6cd-4749-b699-e367cb1dd846.roa
Signing time: Fri 01 Jul 2022 00:00:00 +0000
ROA not before: Fri 01 Jul 2022 00:00:00 +0000
ROA not after: Mon 04 Jul 2022 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:7c:0f:1b:89:f0:88:cf:f1:f3:7b:15:9e:bf:7b:4f:ca:42:bd:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jul 1 00:00:00 2022 GMT
Not After : Jul 4 23:59:59 2022 GMT
Subject: serialNumber=ae3755eb7f7989ee0b21e322905268535fe682bd9568c5f5f39d840256ddcdd4, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a4:4e:de:c0:db:cc:cb:ad:df:6d:ca:9a:3f:
33:fd:e5:e3:8c:42:b0:97:af:ee:52:0f:cf:73:3f:
2c:6d:2c:62:01:bc:f1:9e:b2:da:d8:ac:6a:99:30:
26:f4:0e:71:13:b9:e3:7f:a0:3a:75:35:a8:22:69:
7b:a3:b8:61:26:84:a2:83:ed:4c:ca:bc:78:19:7a:
62:9f:28:c6:2f:cb:84:33:08:f2:81:e1:a9:75:cb:
7b:e4:8e:f5:00:b6:fd:da:de:7f:50:b8:52:a6:bd:
d4:05:0b:31:6b:be:af:4d:34:c2:57:48:56:51:f8:
ac:f4:61:f2:4f:fa:73:60:bc:5e:62:8f:98:51:77:
61:24:f7:72:06:37:bd:bb:5d:35:86:9b:88:d9:3e:
b0:bb:e3:27:e7:c7:8f:0d:ab:b8:9e:7d:22:f3:c8:
c4:e4:a2:34:d2:59:a5:23:1a:12:59:a7:2e:27:96:
05:4b:48:ff:74:13:44:73:79:04:9b:9b:37:99:16:
f1:34:3f:1c:a5:4e:31:08:a1:7e:39:e9:8b:c9:5d:
51:93:84:b9:02:b8:ad:aa:15:cf:6c:4e:83:d7:d8:
c7:7c:7f:6a:a9:5b:51:2b:45:aa:59:a3:6e:6b:f1:
31:37:e3:50:ef:9b:f1:64:1d:7b:e6:60:73:2b:88:
5e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E8:AE:61:58:70:E0:DA:70:8F:59:B5:72:9E:4C:A5:45:54:05:F3
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/414be1c2-b6cd-4749-b699-e367cb1dd846.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
64:6a:2f:d1:fb:7f:69:c0:a4:5b:b9:42:05:bf:95:d4:a4:30:
cf:05:e7:39:12:c3:17:9f:0f:e3:cd:36:7e:52:29:d8:20:78:
a4:1c:f0:43:8b:b1:c3:b6:5e:5e:5d:7d:49:3d:b5:c6:ed:2e:
3d:50:85:d5:10:3f:10:e7:fd:e2:e0:57:76:4d:e9:3e:85:34:
34:db:7e:62:d1:d2:ef:c6:2d:d1:6b:92:46:e5:43:88:14:7f:
58:cc:0c:74:ee:48:98:6d:37:a0:eb:81:0d:9b:6e:c6:18:27:
eb:88:49:a8:7c:bc:a8:6b:91:03:57:27:c4:11:f2:2d:1c:12:
a4:a8:b8:26:92:79:7a:51:65:a7:0c:09:b6:62:f3:96:0c:e7:
58:1d:9f:e2:d9:b5:03:e7:23:95:d9:4c:24:9e:28:6b:5c:2e:
7f:38:80:93:53:33:d1:e3:a7:ea:1d:36:2c:31:e2:0e:c9:2d:
bf:51:3a:f3:54:62:a9:13:b5:06:18:d6:e3:a3:f6:89:bc:ca:
3e:fe:cd:d0:f2:39:ce:c7:54:d6:c8:b2:66:0e:ea:17:5a:e9:
0b:9e:40:3d:71:41:a8:17:9f:ed:74:54:ac:d2:9b:29:4b:ec:
1a:7d:6b:77:e7:f4:d2:eb:83:48:b4:f5:0e:27:55:9e:38:21:
8c:26:a8:74
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUUXwPG4nwiM/x83sVnr97T8pCvaswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIwNzAxMDAwMDAwWhcNMjIwNzA0MjM1OTU5
WjCBpTFJMEcGA1UEBRNAYWUzNzU1ZWI3Zjc5ODllZTBiMjFlMzIyOTA1MjY4NTM1
ZmU2ODJiZDk1NjhjNWY1ZjM5ZDg0MDI1NmRkY2RkNDEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJSkTt7A28zLrd9typo/M/3l44xCsJev7lIPz3M/LG0sYgG88Z6y
2tisapkwJvQOcRO543+gOnU1qCJpe6O4YSaEooPtTMq8eBl6Yp8oxi/LhDMI8oHh
qXXLe+SO9QC2/dref1C4Uqa91AULMWu+r000wldIVlH4rPRh8k/6c2C8XmKPmFF3
YST3cgY3vbtdNYabiNk+sLvjJ+fHjw2ruJ59IvPIxOSiNNJZpSMaElmnLieWBUtI
/3QTRHN5BJubN5kW8TQ/HKVOMQihfjnpi8ldUZOEuQK4raoVz2xOg9fYx3x/aqlb
UStFqlmjbmvxMTfjUO+b8WQde+ZgcyuIXmkCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTa6K5hWHDg2nCPWbVynkylRVQF8zAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNDE0YmUxYzItYjZjZC00NzQ5LWI2OTktZTM2N2NiMWRkODQ2LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGRqL9H7f2nApFu5
QgW/ldSkMM8F5zkSwxefD+PNNn5SKdggeKQc8EOLscO2Xl5dfUk9tcbtLj1QhdUQ
PxDn/eLgV3ZN6T6FNDTbfmLR0u/GLdFrkkblQ4gUf1jMDHTuSJhtN6DrgQ2bbsYY
J+uISah8vKhrkQNXJ8QR8i0cEqSouCaSeXpRZacMCbZi85YM51gdn+LZtQPnI5XZ
TCSeKGtcLn84gJNTM9Hjp+odNiwx4g7JLb9ROvNUYqkTtQYY1uOj9om8yj7+zdDy
Oc7HVNbIsmYO6hda6QueQD1xQagXn+10VKzSmylL7Bp9a3fn9NLrg0i09Q4nVZ44
IYwmqHQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:41 2023 by rpki-client on console-ams.rpki-client.org