Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f34f7679-089d-4c5b-a9b7-15576d73df70.roa
File: f34f7679-089d-4c5b-a9b7-15576d73df70.roa (raw, json)
Hash identifier: 3/jK0JHF/dWvnp1XD76nEELTK//hb5iyEoEmOpRTc54=
Subject key identifier: 27:94:AC:5C:B8:BA:E4:9F:10:DF:0B:DC:52:DB:6B:BE:75:34:C1:24
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 13B6D8F3AA5FCAEA49D31F06A8E235B53DA214F4
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f34f7679-089d-4c5b-a9b7-15576d73df70.roa
Signing time: Fri 09 Dec 2022 00:00:00 +0000
ROA not before: Fri 09 Dec 2022 00:00:00 +0000
ROA not after: Mon 12 Dec 2022 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:b6:d8:f3:aa:5f:ca:ea:49:d3:1f:06:a8:e2:35:b5:3d:a2:14:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Dec 9 00:00:00 2022 GMT
Not After : Dec 12 23:59:59 2022 GMT
Subject: serialNumber=2e098f3d53d015e59072dcec0e8a7828ca29e8ad11eb8124cfaa9dab558bcf6d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:8a:5c:11:c9:e9:ad:86:9e:44:d0:04:6f:
c1:98:d7:39:61:a7:d5:5e:ea:2c:24:a3:99:41:ef:
61:bd:10:ac:77:35:c0:01:92:bd:69:19:9e:4f:c2:
0e:22:62:d7:ce:61:2b:9f:1b:0b:be:c7:49:58:7b:
4e:ae:ba:0f:b5:a0:10:2c:98:28:ca:3d:bc:f2:c0:
63:ca:dd:d7:3c:93:20:6d:23:75:44:b0:7f:fd:72:
e0:6c:72:f4:84:95:45:7e:db:de:8e:1b:f8:68:59:
ba:79:ce:23:a2:e9:84:f6:f4:c0:19:af:34:7a:2c:
06:aa:62:ac:26:c3:5d:19:54:60:26:e4:8c:b2:e0:
82:80:17:77:d3:db:3f:0b:d5:51:3d:7b:37:6a:29:
95:f0:c5:3f:2d:54:7c:79:78:e0:38:c5:ed:1f:cd:
1c:17:d6:4c:9d:5a:05:85:84:32:00:da:1a:83:66:
de:fc:a5:e8:c6:f8:1b:3a:7e:7a:1f:7f:31:90:30:
16:de:3a:01:89:36:2c:c4:f0:f1:19:d6:82:4f:39:
66:b7:27:f4:89:e0:e5:6f:1f:cc:a8:31:0d:06:8a:
29:ab:4d:22:24:96:ec:90:2f:6c:34:ef:49:02:eb:
f8:51:36:89:16:8c:c1:0b:42:29:f7:d5:85:16:9e:
57:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:94:AC:5C:B8:BA:E4:9F:10:DF:0B:DC:52:DB:6B:BE:75:34:C1:24
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f34f7679-089d-4c5b-a9b7-15576d73df70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
24:b6:cd:9c:63:32:d8:9f:29:14:66:9a:c3:17:30:70:4e:4b:
c3:ae:47:ac:f4:26:34:7d:c7:f3:92:3b:5c:2d:aa:ae:db:76:
ad:1e:fe:a8:7d:0d:d2:c5:46:0d:67:09:c3:d2:40:a4:d2:23:
c0:c5:27:93:4a:a9:ad:50:5c:78:aa:6b:bc:b6:cc:db:f3:b6:
e1:5c:cc:15:85:87:c3:79:98:13:ab:83:36:8e:05:8f:a7:34:
2f:00:9f:fc:e5:ba:f9:93:e7:f6:66:be:ea:ec:33:06:d1:db:
1c:34:81:28:de:ce:60:69:66:84:42:85:d4:29:a6:39:ab:82:
24:b4:9d:2f:1a:7d:36:33:0b:e5:49:de:5f:9f:1a:80:c5:a1:
65:c6:11:09:17:f7:ab:0b:f1:e8:54:70:b0:35:90:68:8b:d0:
15:18:92:3c:f3:56:84:ff:81:88:78:51:7b:ec:a0:00:94:60:
cc:b4:74:16:d5:d9:29:05:39:c7:33:23:31:41:be:76:4a:98:
a2:90:88:9e:85:d8:d5:15:1e:48:37:2c:b3:5e:ec:bb:d1:8d:
f7:f1:ae:1b:3c:35:17:c8:e5:d9:b0:95:d6:8a:0b:ef:c7:ab:
79:a7:d8:12:ca:e5:d3:14:21:bc:7e:29:9c:eb:c7:7c:cd:13:
e0:f2:88:35
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUE7bY86pfyupJ0x8GqOI1tT2iFPQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjIxMjA5MDAwMDAwWhcNMjIxMjEyMjM1OTU5
WjCBpTFJMEcGA1UEBRNAMmUwOThmM2Q1M2QwMTVlNTkwNzJkY2VjMGU4YTc4Mjhj
YTI5ZThhZDExZWI4MTI0Y2ZhYTlkYWI1NThiY2Y2ZDEtMCsGA1UEAxMkNmFlNGU1
NjctNjM0OC00YzRmLTk4YTgtMDQyMmM0YzUyZmYzMRQwEgYDVQQLEwtBbWF6b24g
UlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALgnilwRyemthp5E0ARvwZjXOWGn1V7qLCSjmUHvYb0QrHc1wAGS
vWkZnk/CDiJi185hK58bC77HSVh7Tq66D7WgECyYKMo9vPLAY8rd1zyTIG0jdUSw
f/1y4Gxy9ISVRX7b3o4b+GhZunnOI6LphPb0wBmvNHosBqpirCbDXRlUYCbkjLLg
goAXd9PbPwvVUT17N2oplfDFPy1UfHl44DjF7R/NHBfWTJ1aBYWEMgDaGoNm3vyl
6Mb4Gzp+eh9/MZAwFt46AYk2LMTw8RnWgk85Zrcn9Ing5W8fzKgxDQaKKatNIiSW
7JAvbDTvSQLr+FE2iRaMwQtCKffVhRaeV0ECAwEAAaOCAr4wggK6MB0GA1UdDgQW
BBQnlKxcuLrknxDfC9xS22u+dTTBJDAfBgNVHSMEGDAWgBSRRO3HpA7pkLf6Nm/2
4X15rcSDlzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1
NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzczZjIxYzJiLTg4MjMt
NGMyNC1iMjViLTQzYzgwY2I2ZDFiYi8yNzhhYWI4NzhmMjgzMWJiMTgyM2I1ODc5
NGIwOTJkODZmYjFkN2EwZjc0ZTI4MTYxMS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGO
MIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2EtOTQzZC0xYTViZTc0
OGJmZWEvZjM0Zjc2NzktMDg5ZC00YzViLWE5YjctMTU1NzZkNzNkZjcwLnJvYTCB
lQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I2OGEzMmVlLTQ1NWQtNDgzYS05NDNk
LTFhNWJlNzQ4YmZlYS80YmI4YWU1Yy0xMjRjLTQyZjMtODdmYi00ZjM0ZTc0ZTNk
YTIuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACS2zZxjMtifKRRm
msMXMHBOS8OuR6z0JjR9x/OSO1wtqq7bdq0e/qh9DdLFRg1nCcPSQKTSI8DFJ5NK
qa1QXHiqa7y2zNvztuFczBWFh8N5mBOrgzaOBY+nNC8An/zluvmT5/ZmvursMwbR
2xw0gSjezmBpZoRChdQppjmrgiS0nS8afTYzC+VJ3l+fGoDFoWXGEQkX96sL8ehU
cLA1kGiL0BUYkjzzVoT/gYh4UXvsoACUYMy0dBbV2SkFOcczIzFBvnZKmKKQiJ6F
2NUVHkg3LLNe7LvRjffxrhs8NRfI5dmwldaKC+/Hq3mn2BLK5dMUIbx+KZzrx3zN
E+DyiDU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:55 2023 by rpki-client on console-fra.rpki-client.org