Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0734cf71-ce86-439e-9f53-2d418dc21fc9.roa
File: 0734cf71-ce86-439e-9f53-2d418dc21fc9.roa (raw, json)
Hash identifier: X+rgo+pT0/ZYSIkAZSxMJ+02ClhYhOYDlGP+lLP+RnA=
Subject key identifier: 2D:A8:5E:67:C7:2E:D8:0E:44:5B:35:AF:3B:DD:89:30:20:6F:16:C2
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 1CC6B29C9FEC456CECF12A75418AB7CFF20A5C4B
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0734cf71-ce86-439e-9f53-2d418dc21fc9.roa
Signing time: Mon 27 Feb 2023 00:00:00 +0000
ROA not before: Mon 27 Feb 2023 00:00:00 +0000
ROA not after: Thu 02 Mar 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:c6:b2:9c:9f:ec:45:6c:ec:f1:2a:75:41:8a:b7:cf:f2:0a:5c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Feb 27 00:00:00 2023 GMT
Not After : Mar 2 23:59:59 2023 GMT
Subject: serialNumber=5416b095e86ce9248c7c7639bc51083e6a44c7524282f639f0848a5edb708065, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:28:cd:81:0b:8d:14:eb:0a:33:62:4b:06:
61:24:ba:1a:4f:17:00:42:2e:2d:e2:4c:25:8c:79:
57:cf:1a:12:1c:82:06:05:6d:07:96:1f:81:66:5c:
bd:2c:af:d1:62:be:2f:e3:e9:07:3a:1e:51:ac:c4:
7d:f3:c4:1e:be:3c:ff:58:22:c9:21:1c:66:19:3d:
53:2f:d3:86:87:19:91:cc:27:4e:ef:c3:56:03:f1:
ff:8d:77:bf:15:4f:fc:7f:f2:fd:d3:45:46:0d:86:
11:37:50:78:26:69:29:fb:5b:41:35:51:a6:2b:f5:
ec:d3:73:6c:bf:6e:42:1b:4d:47:42:c0:e4:96:4d:
2b:0a:48:7d:38:8c:de:87:ac:f4:5f:3a:a3:1a:8a:
46:aa:ae:dd:e0:43:59:3e:45:4b:2a:6e:7c:0d:2f:
ee:a0:76:a3:27:03:25:be:90:28:e1:17:a9:5d:8a:
a5:71:bb:a9:35:bb:a7:58:e7:fd:dc:90:9f:51:9f:
ef:8b:15:2e:e9:90:69:10:f8:57:65:35:35:2e:b2:
53:81:ac:5d:2d:6d:88:f4:aa:52:da:ad:82:5b:60:
55:08:bc:73:f7:1e:1f:74:5f:f5:37:00:36:c4:6e:
0c:27:12:9c:c1:e3:86:2a:7c:98:73:7e:7f:61:14:
35:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A8:5E:67:C7:2E:D8:0E:44:5B:35:AF:3B:DD:89:30:20:6F:16:C2
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0734cf71-ce86-439e-9f53-2d418dc21fc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
75:eb:5b:bc:54:1c:cb:ac:0c:55:b1:5b:cf:38:f8:66:f4:fb:
29:12:ee:83:29:25:92:12:40:b9:23:d5:f2:a1:47:5e:52:b5:
64:25:2b:be:b0:47:f5:46:3b:bc:73:99:19:5e:71:36:86:2a:
98:80:db:59:97:dd:79:91:5d:bf:a9:1c:30:b2:17:29:01:45:
cb:d6:40:3d:90:26:c3:7e:44:a7:4b:bd:fd:1a:20:84:bc:ae:
cc:27:88:3a:8e:b0:a8:34:05:77:6e:99:53:24:2b:c0:b3:90:
44:ea:91:39:b8:57:d8:6f:f1:53:09:69:9b:54:67:e9:4f:08:
a8:c5:94:10:fc:c2:ed:0e:da:02:a7:fe:26:56:ba:6d:f5:36:
fa:10:23:7f:84:dd:f7:b6:0e:57:c2:c5:f0:e4:9f:40:8e:f3:
0a:73:cb:bd:5f:eb:b1:15:3b:26:14:31:aa:44:03:35:c7:b8:
8f:d0:e3:fe:c2:76:cc:62:81:69:b2:3c:9a:fa:99:7c:60:e9:
6e:3a:52:4b:db:1a:57:19:5b:6a:5c:76:f0:dd:aa:17:d2:a6:
84:79:d1:11:4e:5e:71:a7:2e:04:dc:1a:e0:88:a8:1d:c1:c9:
51:f4:7b:ac:0a:c4:56:02:be:41:d5:61:b1:88:61:31:9f:31:
32:1d:d9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:36 2023 by rpki-client on console-ams.rpki-client.org