Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/72a627e4-7989-4797-9bf6-8c4d6a6c7c2e.roa
File: 72a627e4-7989-4797-9bf6-8c4d6a6c7c2e.roa (raw, json)
Hash identifier: 1QcWAcJZdyFQqa+5nqLEFIHW6F8lz3v22yWLRjxp0kU=
Subject key identifier: CC:BA:94:25:1E:A0:AF:55:2E:90:D3:CC:FA:C5:6D:B3:63:75:9A:43
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 72E287ED39F122EBFC3A44AD441DDC0542A9A69D
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/72a627e4-7989-4797-9bf6-8c4d6a6c7c2e.roa
Signing time: Sat 29 Oct 2022 00:00:00 +0000
ROA not before: Sat 29 Oct 2022 00:00:00 +0000
ROA not after: Tue 01 Nov 2022 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:e2:87:ed:39:f1:22:eb:fc:3a:44:ad:44:1d:dc:05:42:a9:a6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Oct 29 00:00:00 2022 GMT
Not After : Nov 1 23:59:59 2022 GMT
Subject: serialNumber=40c8c90493122851481a061a0eeb1e255e163ecb5a85258d2d85fee8bb66f979, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:d6:b2:40:ed:c9:79:90:2f:31:2e:2b:36:
c8:2e:aa:bc:b5:df:35:c1:db:b0:58:3d:8e:cf:1c:
e7:2d:84:b1:2d:7d:b7:b6:c7:e9:89:c6:a9:c7:87:
da:92:2d:ef:26:d2:88:a0:84:99:74:7f:fc:87:bb:
c5:1e:9f:b9:cd:0b:be:d2:1d:7a:91:e6:67:a4:80:
b3:34:17:52:16:b1:3c:05:b5:85:85:11:35:d8:73:
69:a8:ed:8a:f9:ac:5e:45:25:ec:cf:74:73:43:d1:
81:41:8d:29:d5:d7:6a:55:a4:b1:ff:19:97:95:7c:
52:3d:19:44:00:83:cd:40:29:81:02:b2:24:4a:2a:
2f:b4:1a:db:63:f7:77:7c:5c:ab:cd:a9:d6:1e:ea:
27:bc:cf:18:68:25:61:79:db:8d:f6:ef:02:6f:98:
d6:b0:03:02:96:b1:5e:b1:f7:49:04:f7:54:01:2f:
65:38:0e:b2:0a:ba:ac:a6:33:89:b0:05:57:f5:70:
40:09:be:65:91:3f:f5:57:83:32:d9:d7:fd:7d:58:
13:f3:09:3c:b8:6a:53:7f:f4:54:a4:26:91:6f:3d:
52:a7:fd:04:72:fc:99:21:59:4c:c1:60:78:42:13:
dc:21:0f:50:72:6a:4c:9b:0a:15:19:c3:07:4e:4d:
5e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BA:94:25:1E:A0:AF:55:2E:90:D3:CC:FA:C5:6D:B3:63:75:9A:43
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/72a627e4-7989-4797-9bf6-8c4d6a6c7c2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
74:29:14:3a:90:7a:3a:fc:48:b0:7f:d3:95:73:93:b3:fa:b3:
02:27:1e:24:e1:86:8d:a3:20:b9:48:a9:b4:5e:e6:d0:c9:f6:
ba:b8:7e:67:b7:56:1e:03:c4:97:b7:d1:50:4b:db:fa:5b:62:
aa:1e:30:82:c0:b6:1f:5b:bd:ee:2e:62:18:ae:82:04:8b:14:
7d:68:70:e6:55:a4:c0:e3:e7:78:bc:04:54:dd:17:38:09:8a:
f4:26:fd:bf:3f:37:24:9c:ba:84:84:46:75:78:bb:9f:f4:c0:
90:1e:2d:ae:45:77:81:61:ec:69:fd:27:7e:98:89:86:ce:e0:
c1:0f:b1:7a:bb:e4:74:26:31:66:34:48:7b:0e:74:de:29:9c:
9a:09:e7:a0:96:c0:54:d6:cf:3c:91:d4:84:8b:ab:3a:0e:0f:
17:ca:b9:4e:09:4d:37:77:8b:b4:71:80:ce:49:01:fb:09:f9:
02:30:8b:bd:fd:54:db:60:ac:3e:d6:b5:67:44:ca:9d:27:7f:
bf:1d:5a:d6:05:2a:fb:36:c5:a4:57:f9:8d:52:ea:df:c9:3a:
16:ab:05:c9:21:79:4a:ef:0c:cf:81:35:39:a2:65:82:fd:88:
04:09:40:4a:2d:4d:d7:42:ef:81:58:79:9d:58:d4:60:db:3f:
58:fd:ff:8d
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUcuKH7TnxIuv8OkStRB3cBUKppp0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMDI5MDAwMDAwWhcNMjIxMTAxMjM1OTU5
WjCBpTFJMEcGA1UEBRNANDBjOGM5MDQ5MzEyMjg1MTQ4MWEwNjFhMGVlYjFlMjU1
ZTE2M2VjYjVhODUyNThkMmQ4NWZlZThiYjY2Zjk3OTEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMcx1rJA7cl5kC8xLis2yC6qvLXfNcHbsFg9js8c5y2EsS19t7bH
6YnGqceH2pIt7ybSiKCEmXR//Ie7xR6fuc0LvtIdepHmZ6SAszQXUhaxPAW1hYUR
NdhzaajtivmsXkUl7M90c0PRgUGNKdXXalWksf8Zl5V8Uj0ZRACDzUApgQKyJEoq
L7Qa22P3d3xcq82p1h7qJ7zPGGglYXnbjfbvAm+Y1rADApaxXrH3SQT3VAEvZTgO
sgq6rKYzibAFV/VwQAm+ZZE/9VeDMtnX/X1YE/MJPLhqU3/0VKQmkW89Uqf9BHL8
mSFZTMFgeEIT3CEPUHJqTJsKFRnDB05NXvkCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBTMupQlHqCvVS6Q08z6xW2zY3WaQzAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvNzJhNjI3ZTQtNzk4OS00Nzk3LTliZjYtOGM0ZDZhNmM3YzJlLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHQpFDqQejr8SLB/
05Vzk7P6swInHiThho2jILlIqbRe5tDJ9rq4fme3Vh4DxJe30VBL2/pbYqoeMILA
th9bve4uYhiuggSLFH1ocOZVpMDj53i8BFTdFzgJivQm/b8/NyScuoSERnV4u5/0
wJAeLa5Fd4Fh7Gn9J36YiYbO4MEPsXq75HQmMWY0SHsOdN4pnJoJ56CWwFTWzzyR
1ISLqzoODxfKuU4JTTd3i7RxgM5JAfsJ+QIwi739VNtgrD7WtWdEyp0nf78dWtYF
Kvs2xaRX+Y1S6t/JOharBckheUrvDM+BNTmiZYL9iAQJQEotTddC74FYeZ1Y1GDb
P1j9/40=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:47 2023 by rpki-client on console-fra.rpki-client.org