Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a2b52fab-6340-480c-953e-0e62c9408c87.roa
File: a2b52fab-6340-480c-953e-0e62c9408c87.roa (raw, json)
Hash identifier: BxtHALjXLw7lpdHnLYcPdC5oWOI6JfPTS/Ljrvdr+2c=
Subject key identifier: 83:D5:82:99:AC:25:C4:04:9C:C4:46:ED:94:99:98:12:0F:5D:5F:C3
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 4516397A579B14C141D40DFC048D9AA89676489E
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a2b52fab-6340-480c-953e-0e62c9408c87.roa
Signing time: Thu 01 Jun 2023 00:00:00 +0000
ROA not before: Thu 01 Jun 2023 00:00:00 +0000
ROA not after: Sun 04 Jun 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:16:39:7a:57:9b:14:c1:41:d4:0d:fc:04:8d:9a:a8:96:76:48:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jun 1 00:00:00 2023 GMT
Not After : Jun 4 23:59:59 2023 GMT
Subject: serialNumber=0dbc8c3828d046a8c3fa123d97edfac36b60c87c2bd72d3717bb6bdfc7025e66, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:47:b1:6a:8d:42:67:30:fe:35:4e:85:7d:ca:
1d:43:d3:09:6d:b0:cd:25:73:c9:ef:ac:fe:aa:57:
68:88:86:eb:57:9c:d6:d8:af:d3:b4:d1:b0:a2:f2:
b1:1c:c5:b0:bf:ab:eb:ee:6d:cd:4e:eb:c9:7b:6a:
53:8e:a1:46:6b:ba:dc:c2:43:bc:bb:c9:42:1c:b0:
ac:b5:95:d3:82:0d:32:1b:e9:ec:f9:82:4b:78:be:
93:b6:c8:4e:65:6b:11:07:55:b0:24:83:e1:05:f5:
45:69:b5:e1:83:f2:a9:88:b0:aa:4b:ce:74:4a:4d:
f3:dc:d0:9c:73:af:c9:ef:6b:84:27:0f:6c:48:95:
a5:e2:9a:41:14:70:c2:b3:32:86:67:d7:81:cb:e2:
c0:dd:57:30:d9:72:2b:7b:7a:f0:04:b7:d7:ae:90:
db:4f:0f:78:a7:eb:4e:41:4a:de:d9:bb:0a:bf:d3:
b3:6e:3e:a5:54:65:02:06:78:41:63:0a:4b:09:bd:
44:27:9f:97:1b:e6:d4:02:13:1e:47:0c:37:57:7f:
5d:94:c0:d1:1e:fc:e7:ec:a3:c7:82:8e:1d:7b:7c:
a2:d5:07:46:83:56:31:b6:0c:86:30:ba:51:14:c2:
82:2f:29:1f:e6:99:f3:b8:58:03:b0:f8:2c:ec:ad:
db:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D5:82:99:AC:25:C4:04:9C:C4:46:ED:94:99:98:12:0F:5D:5F:C3
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a2b52fab-6340-480c-953e-0e62c9408c87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
34:b9:2e:0c:02:b2:e7:f7:59:09:c3:f3:55:a6:43:ed:75:c6:
5a:25:71:ea:12:51:cb:57:e3:1c:5a:7e:02:4f:b4:38:e4:9e:
b8:cd:d7:a7:31:61:17:7c:af:a5:98:c7:f4:c0:b1:c8:c9:ef:
86:49:6a:8c:18:2e:65:9b:fb:3f:d9:03:82:b3:8a:08:ea:04:
ed:62:19:0e:ed:5b:77:45:a3:78:8d:90:48:30:e8:5a:24:67:
21:aa:16:61:12:35:86:ba:06:fd:8d:91:29:33:b2:78:e5:04:
b8:d3:7c:1d:b3:2e:8d:c6:a1:d4:93:fb:7e:80:4b:19:82:c5:
2c:4b:85:0c:59:0a:a8:7b:1e:db:bb:c1:30:08:e6:86:3a:dd:
57:ae:80:2d:24:c3:d4:be:99:9f:32:6d:0a:74:32:24:9c:71:
af:72:81:5f:2b:7c:06:f8:d0:77:ca:e8:78:e1:12:fd:62:b0:
1b:76:b0:12:b7:bd:22:97:d4:28:e9:33:88:6f:b0:3c:a7:00:
e5:bd:08:49:ca:e3:8a:fc:bb:4d:f8:bb:99:c3:5d:6a:d5:bc:
ab:1e:78:c1:81:28:8d:74:c9:67:da:6a:71:f3:8c:fe:50:22:
b9:15:b1:d8:86:ec:ea:4c:ba:07:98:e2:d7:33:ea:14:4b:fd:
87:a5:d3:98
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIURRY5elebFMFB1A38BI2aqJZ2SJ4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNjAxMDAwMDAwWhcNMjMwNjA0MjM1OTU5
WjCBpTFJMEcGA1UEBRNAMGRiYzhjMzgyOGQwNDZhOGMzZmExMjNkOTdlZGZhYzM2
YjYwYzg3YzJiZDcyZDM3MTdiYjZiZGZjNzAyNWU2NjEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOFHsWqNQmcw/jVOhX3KHUPTCW2wzSVzye+s/qpXaIiG61ec1tiv
07TRsKLysRzFsL+r6+5tzU7ryXtqU46hRmu63MJDvLvJQhywrLWV04INMhvp7PmC
S3i+k7bITmVrEQdVsCSD4QX1RWm14YPyqYiwqkvOdEpN89zQnHOvye9rhCcPbEiV
peKaQRRwwrMyhmfXgcviwN1XMNlyK3t68AS3166Q208PeKfrTkFK3tm7Cr/Ts24+
pVRlAgZ4QWMKSwm9RCeflxvm1AITHkcMN1d/XZTA0R785+yjx4KOHXt8otUHRoNW
MbYMhjC6URTCgi8pH+aZ87hYA7D4LOyt29cCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBSD1YKZrCXEBJzERu2UmZgSD11fwzAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvYTJiNTJmYWItNjM0MC00ODBjLTk1M2UtMGU2MmM5NDA4Yzg3LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADS5LgwCsuf3WQnD
81WmQ+11xlolceoSUctX4xxafgJPtDjknrjN16cxYRd8r6WYx/TAscjJ74ZJaowY
LmWb+z/ZA4KzigjqBO1iGQ7tW3dFo3iNkEgw6FokZyGqFmESNYa6Bv2NkSkzsnjl
BLjTfB2zLo3GodST+36ASxmCxSxLhQxZCqh7Htu7wTAI5oY63VeugC0kw9S+mZ8y
bQp0MiScca9ygV8rfAb40HfK6HjhEv1isBt2sBK3vSKX1CjpM4hvsDynAOW9CEnK
44r8u034u5nDXWrVvKseeMGBKI10yWfaanHzjP5QIrkVsdiG7OpMugeY4tcz6hRL
/Yel05g=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:49 2023 by rpki-client on console-fra.rpki-client.org