Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e74b669c-f192-4d27-9054-2b6c394b9cc8.roa
File: e74b669c-f192-4d27-9054-2b6c394b9cc8.roa (raw, json)
Hash identifier: rOtpYDNkVMAGZQQb6hHjtzfe/orDpb1XefX9UJxCMnI=
Subject key identifier: 17:5D:B5:F8:04:C4:DA:95:FF:82:FB:82:BC:CA:53:5C:55:E2:DF:FB
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 4FFEA55DFCBF3041BB59E4EEDC8EE38CC086E2C5
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e74b669c-f192-4d27-9054-2b6c394b9cc8.roa
Signing time: Sun 26 Feb 2023 00:00:00 +0000
ROA not before: Sun 26 Feb 2023 00:00:00 +0000
ROA not after: Wed 01 Mar 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:fe:a5:5d:fc:bf:30:41:bb:59:e4:ee:dc:8e:e3:8c:c0:86:e2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Feb 26 00:00:00 2023 GMT
Not After : Mar 1 23:59:59 2023 GMT
Subject: serialNumber=1fa0b7dc583cee3688b19b494ab1627db95da2a7c1110c699284fd42456c43dc, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:5a:57:3c:a2:32:50:d1:6f:8a:02:05:53:
74:68:b8:31:f0:85:24:65:25:8b:d7:1c:33:47:2e:
47:9c:0d:a3:ce:43:ca:33:c3:68:47:28:1f:bb:fe:
d7:d3:f2:31:fb:fc:39:f6:c3:38:04:3d:c7:71:22:
94:ea:29:12:bc:b9:8e:40:1f:4c:8e:ce:db:a0:b2:
35:cd:29:ce:98:4c:9f:31:b7:be:37:cd:13:7c:ad:
67:dd:36:b7:c3:59:73:62:b2:16:cf:97:9e:b5:46:
a4:a6:27:07:6b:80:6f:70:8b:bf:a9:21:40:80:91:
e3:96:cd:fe:7a:87:a7:ae:5a:a8:d4:ba:d5:a8:b3:
fb:17:99:98:c7:b2:a7:75:d8:2a:3b:3e:f7:cd:d7:
cc:28:31:bd:06:3e:9b:9b:47:f8:98:21:d8:b1:f7:
22:eb:83:dc:a8:a2:8b:e9:8b:3e:b4:4e:23:57:7b:
db:86:a6:04:37:4a:17:70:ad:57:df:3f:df:10:f3:
24:c6:00:c7:e9:34:cb:f1:dc:52:02:1e:e1:cd:5c:
74:c7:ad:21:82:bc:80:76:d0:49:a3:af:c4:52:7e:
82:06:63:d8:49:5d:05:fd:82:56:d7:1c:a9:f6:83:
ab:4b:93:5c:4d:6e:fe:99:3c:cf:d8:48:d7:58:95:
4a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5D:B5:F8:04:C4:DA:95:FF:82:FB:82:BC:CA:53:5C:55:E2:DF:FB
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e74b669c-f192-4d27-9054-2b6c394b9cc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b1:29:59:a8:b0:5d:5c:b7:fe:0e:40:44:86:45:8b:49:78:
b1:a1:51:4c:a5:1f:9a:61:f2:f6:fd:29:82:2f:ec:66:db:1d:
f3:cc:34:a6:f4:8d:b3:4c:bf:b3:68:cf:6d:fa:fd:99:b4:7c:
13:04:ea:68:e0:a0:d4:15:60:7f:79:2f:f8:9c:56:29:a2:82:
00:7f:6d:d0:96:34:42:88:95:23:8b:6a:19:12:0e:03:f9:b4:
fc:ac:9b:dd:e1:70:11:08:f5:e2:95:9f:75:25:a5:68:7d:74:
07:ac:9a:b5:b1:48:e9:95:1d:a5:f7:2b:f8:57:42:8b:1a:70:
c1:0e:3a:73:a6:fd:7b:3c:cb:b6:65:bf:82:27:b3:d9:88:6c:
f3:b7:64:65:7a:d5:43:10:91:0f:21:a1:fa:b2:84:c9:22:5d:
78:b9:ad:5c:dc:c4:d8:3a:0d:7a:42:1c:cc:c2:b8:11:3f:e7:
c8:d5:ed:40:d0:9e:80:d4:d4:d7:aa:de:aa:eb:5e:d7:cc:94:
a2:8b:c5:5d:83:da:8c:24:21:55:d4:af:2f:44:36:4b:80:4e:
e9:71:01:46:20:2f:6c:26:ad:11:4f:9c:b6:65:56:7f:e0:6c:
c6:2c:63:00:ad:ba:4e:78:8d:aa:78:2b:b7:b3:b0:57:21:21:
8a:e7:bc:03
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUT/6lXfy/MEG7WeTu3I7jjMCG4sUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwMjI2MDAwMDAwWhcNMjMwMzAxMjM1OTU5
WjCBpTFJMEcGA1UEBRNAMWZhMGI3ZGM1ODNjZWUzNjg4YjE5YjQ5NGFiMTYyN2Ri
OTVkYTJhN2MxMTEwYzY5OTI4NGZkNDI0NTZjNDNkYzEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALn5Wlc8ojJQ0W+KAgVTdGi4MfCFJGUli9ccM0cuR5wNo85DyjPD
aEcoH7v+19PyMfv8OfbDOAQ9x3EilOopEry5jkAfTI7O26CyNc0pzphMnzG3vjfN
E3ytZ902t8NZc2KyFs+XnrVGpKYnB2uAb3CLv6khQICR45bN/nqHp65aqNS61aiz
+xeZmMeyp3XYKjs+983XzCgxvQY+m5tH+Jgh2LH3IuuD3Kiii+mLPrROI1d724am
BDdKF3CtV98/3xDzJMYAx+k0y/HcUgIe4c1cdMetIYK8gHbQSaOvxFJ+ggZj2Eld
Bf2CVtccqfaDq0uTXE1u/pk8z9hI11iVSjcCAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQXXbX4BMTalf+C+4K8ylNcVeLf+zAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZTc0YjY2OWMtZjE5Mi00ZDI3LTkwNTQtMmI2YzM5NGI5Y2M4LnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJWxKVmosF1ct/4O
QESGRYtJeLGhUUylH5ph8vb9KYIv7GbbHfPMNKb0jbNMv7Noz236/Zm0fBME6mjg
oNQVYH95L/icVimiggB/bdCWNEKIlSOLahkSDgP5tPysm93hcBEI9eKVn3UlpWh9
dAesmrWxSOmVHaX3K/hXQosacMEOOnOm/Xs8y7Zlv4Ins9mIbPO3ZGV61UMQkQ8h
ofqyhMkiXXi5rVzcxNg6DXpCHMzCuBE/58jV7UDQnoDU1Neq3qrrXtfMlKKLxV2D
2owkIVXUry9ENkuATulxAUYgL2wmrRFPnLZlVn/gbMYsYwCtuk54jap4K7ezsFch
IYrnvAM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:52 2023 by rpki-client on console-ams.rpki-client.org