Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/026fa175-6143-43fa-b7c3-a119f6833484.roa
File: 026fa175-6143-43fa-b7c3-a119f6833484.roa (raw, json)
Hash identifier: XZtGVjIwk5eoQK0uTfb6/vghvzP3v0jTpioE/AQGu4w=
Subject key identifier: B7:4B:37:A6:9E:53:03:6D:83:00:71:7C:CA:79:1E:E3:1C:85:59:99
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 46D036D2A7E2ED4F6ECEDE06F162E82FFD31F924
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/026fa175-6143-43fa-b7c3-a119f6833484.roa
Signing time: Wed 01 Mar 2023 00:00:00 +0000
ROA not before: Wed 01 Mar 2023 00:00:00 +0000
ROA not after: Sat 04 Mar 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:d0:36:d2:a7:e2:ed:4f:6e:ce:de:06:f1:62:e8:2f:fd:31:f9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Mar 1 00:00:00 2023 GMT
Not After : Mar 4 23:59:59 2023 GMT
Subject: serialNumber=f527205ddbe8cc373162ed1a7bae272fde522365d80e4155028fe059e1d094b5, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:73:d9:a1:01:b3:11:06:99:81:e4:2d:e7:fe:
07:64:07:6e:22:28:05:ad:80:34:35:2a:20:89:81:
0a:9c:4e:67:2b:37:1d:14:29:0c:51:6a:62:ac:77:
b9:c6:20:21:5d:16:88:d6:db:6f:8a:8a:8a:0f:17:
8d:cd:a7:01:2b:22:7c:fa:24:07:e7:d2:89:11:00:
54:54:28:1a:db:ae:d5:ad:e1:59:29:72:5b:90:bc:
5d:fb:b8:94:f0:c3:18:c6:d6:39:58:de:01:41:1b:
41:99:66:7d:82:fe:62:13:d1:d7:8d:54:19:81:a6:
1c:91:0d:66:8b:ef:c5:43:f6:f9:01:c0:29:e9:bb:
12:76:9e:94:3b:4d:f5:b7:2f:9e:e5:68:cd:92:46:
74:ea:3a:41:85:e4:3a:02:8f:3d:9a:48:dc:75:fa:
04:9b:ec:13:02:d3:cf:2e:61:36:53:73:80:11:b0:
ee:f8:94:ff:69:0c:f1:db:84:3e:89:f8:40:8d:32:
1d:58:cf:69:b2:57:52:39:a2:7c:fd:92:1f:79:77:
5e:21:47:f6:2a:da:34:ef:65:98:b1:5c:69:c8:7a:
57:85:d8:7e:26:52:01:f4:37:7e:75:81:8a:d8:ea:
e2:73:65:f4:67:3c:d8:81:26:97:a4:8d:17:03:64:
c6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4B:37:A6:9E:53:03:6D:83:00:71:7C:CA:79:1E:E3:1C:85:59:99
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/026fa175-6143-43fa-b7c3-a119f6833484.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
75:84:4f:ad:e0:c1:30:45:e3:30:ab:26:22:fd:a0:f7:7e:0e:
db:f8:48:39:20:cc:9c:bb:0e:f6:da:57:d3:8e:2f:d4:f1:86:
04:7e:a3:1f:25:9a:61:77:89:ef:42:28:a5:5e:18:16:77:67:
5c:e0:c7:0d:32:89:06:db:67:8c:21:ee:80:89:9d:b4:8f:17:
b6:d5:01:1e:72:73:2e:fa:aa:66:23:46:29:ee:a5:f7:5e:0e:
95:79:03:3e:41:4a:20:5b:09:3f:bc:b7:46:ff:05:f5:b4:9d:
84:cf:37:8d:b6:5f:c0:24:cd:5d:72:1e:03:7c:ee:3a:05:1a:
43:96:8a:2e:e4:2f:3d:4f:90:01:fc:2b:d8:ef:72:9d:98:50:
a1:e7:37:f7:86:32:6d:c3:f3:0e:9a:83:c8:ec:e4:06:53:dc:
81:41:31:f4:2e:9d:dc:db:0c:f4:69:cb:b2:d2:2b:26:07:56:
1d:78:38:57:b4:98:d9:e4:4d:9f:48:a5:0e:4b:83:75:16:c4:
63:79:16:d1:cc:95:50:fb:df:7f:0b:52:53:cc:3a:86:78:60:
59:b4:99:25:65:16:59:e4:a1:60:cd:3b:f3:9e:b4:de:28:8c:
1b:0b:6d:57:09:07:1f:df:cc:92:a1:4c:39:27:da:ae:bc:87:
c7:e1:ae:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:31 2023 by rpki-client on console-fra.rpki-client.org