Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4400ba5f-8bee-4ee5-83bb-631abc02c8be.roa
File: 4400ba5f-8bee-4ee5-83bb-631abc02c8be.roa (raw, json)
Hash identifier: MkZ8YCLG9LZ6VEcEf1VeH1CRKjk4d9bBU0V80nZPFzI=
Subject key identifier: 63:EC:1F:DB:B2:D6:1E:AA:6F:64:8B:B2:1A:4D:25:11:4E:27:48:64
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 0BA131525FAD1441D2BE9BA3A5B2418D5BC55F38
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4400ba5f-8bee-4ee5-83bb-631abc02c8be.roa
Signing time: Sat 29 Apr 2023 00:00:00 +0000
ROA not before: Sat 29 Apr 2023 00:00:00 +0000
ROA not after: Tue 02 May 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:a1:31:52:5f:ad:14:41:d2:be:9b:a3:a5:b2:41:8d:5b:c5:5f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Apr 29 00:00:00 2023 GMT
Not After : May 2 23:59:59 2023 GMT
Subject: serialNumber=1dfb5371e6f737d308e1268f8621849101534ba529e584470fbf193e43136ec7, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:ab:f5:1b:8a:78:0f:c9:0b:a9:da:95:41:
94:13:42:7e:b7:a9:e9:02:dc:b9:e7:1a:0b:8a:6d:
15:3b:7f:bd:35:5a:10:cb:b8:41:c6:22:c1:95:bb:
84:8e:78:85:b3:48:f0:29:45:a2:2b:29:73:5a:f3:
12:ac:b2:bc:1a:c0:66:c8:fa:50:66:40:4c:88:44:
08:4d:2e:47:40:77:fa:3f:0b:aa:31:6c:7a:b2:6c:
f8:7f:b1:cf:c5:21:5e:bc:ff:27:ab:d0:2b:f7:29:
0d:d7:34:3d:0f:f3:88:d5:7a:7c:e1:7a:13:0f:35:
81:1d:05:bf:55:65:cc:e9:24:ac:74:05:d4:48:e6:
38:9e:bf:1b:f2:e6:ea:6f:93:2d:d1:b0:67:b7:d1:
91:e2:4a:45:f2:6c:51:41:1d:b1:b8:f7:d2:c4:f9:
f9:74:c1:9a:34:4f:e4:17:c7:5a:aa:9f:98:9e:53:
cf:18:4d:cd:54:f8:9c:20:fe:8d:a0:cf:e5:1b:48:
1d:43:57:39:fe:3c:f7:18:81:77:35:f3:51:6a:c0:
b8:cd:2b:87:fc:7e:72:a6:c6:c7:22:32:20:ad:d1:
29:b1:33:e5:c6:b7:e7:73:07:6d:6e:e3:1c:49:fa:
4e:04:1f:2f:dd:e7:42:37:6c:a5:75:ec:7c:28:b4:
48:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EC:1F:DB:B2:D6:1E:AA:6F:64:8B:B2:1A:4D:25:11:4E:27:48:64
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4400ba5f-8bee-4ee5-83bb-631abc02c8be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
27:b0:5c:58:48:9b:81:c3:05:7e:50:c8:43:da:5f:64:9b:b4:
83:99:78:3e:e0:29:73:ac:4b:88:e1:35:08:cf:f8:ee:56:55:
23:5e:85:35:d1:ee:ce:14:99:70:f0:3f:34:27:b3:dc:2b:aa:
57:77:ce:5e:93:b5:e4:62:ae:d9:c4:fe:5e:c6:f9:9d:98:a0:
3e:9b:e6:ce:c4:21:93:94:46:06:b5:4e:01:03:e4:76:00:dc:
da:51:5d:ca:d5:46:82:b0:25:78:fd:db:46:2d:d7:14:72:48:
8c:8d:64:8a:e1:05:13:65:dc:0e:25:c3:36:5d:b4:00:79:61:
e0:3f:e2:63:d0:9b:e9:92:6f:1b:c0:be:65:35:65:ff:d1:32:
a3:a8:13:28:76:a3:c2:a1:29:d0:01:51:91:6f:75:a7:be:78:
b9:20:ab:32:bf:99:a8:7f:a7:0c:68:be:21:38:a4:9f:50:17:
de:fb:ee:62:01:19:1a:cf:c0:db:3d:ca:bc:0c:b4:8a:de:c2:
e8:e4:ff:57:d5:8b:8d:49:63:70:69:fd:e2:8b:5f:53:4a:c7:
02:b9:d9:62:71:6f:39:93:ab:74:9f:cc:5e:04:11:a0:0a:2a:
0f:f5:a5:a7:b9:19:33:93:eb:da:e0:c3:28:ad:26:ac:31:4a:
a0:e6:8e:68
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUC6ExUl+tFEHSvpujpbJBjVvFXzgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNDI5MDAwMDAwWhcNMjMwNTAyMjM1OTU5
WjCBpTFJMEcGA1UEBRNAMWRmYjUzNzFlNmY3MzdkMzA4ZTEyNjhmODYyMTg0OTEw
MTUzNGJhNTI5ZTU4NDQ3MGZiZjE5M2U0MzEzNmVjNzEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKzbq/UbingPyQup2pVBlBNCfrep6QLcuecaC4ptFTt/vTVaEMu4
QcYiwZW7hI54hbNI8ClFoispc1rzEqyyvBrAZsj6UGZATIhECE0uR0B3+j8LqjFs
erJs+H+xz8UhXrz/J6vQK/cpDdc0PQ/ziNV6fOF6Ew81gR0Fv1VlzOkkrHQF1Ejm
OJ6/G/Lm6m+TLdGwZ7fRkeJKRfJsUUEdsbj30sT5+XTBmjRP5BfHWqqfmJ5TzxhN
zVT4nCD+jaDP5RtIHUNXOf489xiBdzXzUWrAuM0rh/x+cqbGxyIyIK3RKbEz5ca3
53MHbW7jHEn6TgQfL93nQjdspXXsfCi0SB0CAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBRj7B/bstYeqm9ki7IaTSURTidIZDAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNDQwMGJhNWYtOGJlZS00ZWU1LTgzYmItNjMxYWJjMDJjOGJlLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACewXFhIm4HDBX5Q
yEPaX2SbtIOZeD7gKXOsS4jhNQjP+O5WVSNehTXR7s4UmXDwPzQns9wrqld3zl6T
teRirtnE/l7G+Z2YoD6b5s7EIZOURga1TgED5HYA3NpRXcrVRoKwJXj920Yt1xRy
SIyNZIrhBRNl3A4lwzZdtAB5YeA/4mPQm+mSbxvAvmU1Zf/RMqOoEyh2o8KhKdAB
UZFvdae+eLkgqzK/mah/pwxoviE4pJ9QF9777mIBGRrPwNs9yrwMtIrewujk/1fV
i41JY3Bp/eKLX1NKxwK52WJxbzmTq3SfzF4EEaAKKg/1pae5GTOT69rgwyitJqwx
SqDmjmg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:41 2023 by rpki-client on console-ams.rpki-client.org