Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0cd4215f-ba6b-48b2-9152-410324484999.roa
File: 0cd4215f-ba6b-48b2-9152-410324484999.roa (raw, json)
Hash identifier: GZ2oGn0uzuu9Z+s8oSas8yGTSMz11jijctcoAZyeieU=
Subject key identifier: 34:E8:1F:34:02:EE:9D:7D:26:57:07:F6:E5:5C:22:F8:9A:73:46:22
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 57440F65F15E0DF945B341110E1EEC8B61B4FEC2
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0cd4215f-ba6b-48b2-9152-410324484999.roa
Signing time: Sat 09 Jul 2022 00:00:00 +0000
ROA not before: Sat 09 Jul 2022 00:00:00 +0000
ROA not after: Tue 12 Jul 2022 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:44:0f:65:f1:5e:0d:f9:45:b3:41:11:0e:1e:ec:8b:61:b4:fe:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jul 9 00:00:00 2022 GMT
Not After : Jul 12 23:59:59 2022 GMT
Subject: serialNumber=6b6319f3eb1745690153d47128b6acfb3680dba01aa503aa33ea654e46738b6c, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:29:7b:23:8f:c0:81:7a:ee:ca:36:d1:ba:c8:
5f:e0:84:f4:f9:74:46:f2:b0:92:5f:91:d1:d0:65:
93:0e:9c:15:f2:7f:ed:84:eb:f9:be:cf:9a:8a:46:
84:1a:67:3a:1b:02:9b:38:7b:23:e9:15:15:c5:74:
a0:4b:7e:45:9a:8c:94:7b:05:a9:a1:5d:11:d9:c8:
89:04:b2:83:f7:6d:14:f6:9b:d7:48:2a:35:2a:c9:
77:cb:e8:3b:50:34:15:04:b3:a6:1d:3b:32:a3:d4:
a9:3e:de:55:15:80:b0:d9:3d:87:32:70:7a:68:d4:
5b:05:95:22:3b:a4:0b:55:10:ff:f4:4b:12:31:77:
8f:9b:d7:25:ba:b2:f7:ca:40:c3:00:3e:7a:e4:89:
34:16:8d:6f:dd:2c:bc:07:76:cc:a4:08:86:92:52:
8c:a3:8e:b0:3c:aa:2c:71:48:dc:2f:7c:5a:21:80:
63:e2:5a:ef:78:b5:5e:4c:98:78:33:4c:ab:16:17:
97:62:d3:4f:cb:c2:6c:ed:0d:4c:c9:fd:32:be:3f:
2a:b2:ee:eb:39:6b:fc:87:71:22:40:7b:fd:3f:49:
11:eb:0d:f9:d0:61:61:07:ba:9f:95:aa:2f:85:6f:
87:a2:d2:93:44:03:e4:2d:8a:50:6c:f0:9a:13:7e:
3d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E8:1F:34:02:EE:9D:7D:26:57:07:F6:E5:5C:22:F8:9A:73:46:22
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0cd4215f-ba6b-48b2-9152-410324484999.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
15:19:b9:cb:d3:56:03:e4:d2:59:7d:32:92:8b:54:eb:87:ed:
e1:b0:6f:09:12:1e:bd:ea:ed:06:7f:c6:48:07:4f:c8:91:22:
a4:e8:c5:1e:52:f3:8f:7a:67:d9:fc:d1:a5:66:81:3a:35:3e:
89:23:f8:bb:03:33:e7:e4:c9:fc:ce:aa:01:be:3d:6f:93:36:
18:c1:1b:fd:8d:9c:d9:a6:ff:21:7d:51:71:5b:58:f5:94:a3:
b2:61:ef:e9:86:2a:d8:8e:7e:19:b1:63:69:de:b9:02:2d:68:
c4:46:70:29:bb:de:2f:06:6f:75:61:1d:43:a9:07:77:96:cb:
bd:38:25:3c:bb:a6:be:fe:d8:b6:d9:21:5e:6b:b1:d8:64:18:
fa:4c:35:87:5a:19:bb:a3:b2:6f:d5:0e:a2:5a:bd:53:ca:f0:
b0:7c:6c:84:19:d6:c8:cb:ba:eb:e3:ec:21:d8:14:c5:63:ae:
34:59:c5:24:ad:d4:02:6b:63:70:ce:de:f2:b6:25:f9:cf:50:
55:ae:bf:c0:5b:a5:77:74:91:61:80:92:eb:ac:19:5f:80:01:
de:44:b7:ef:fa:76:5a:56:ca:82:49:af:78:d6:87:ca:67:80:
62:8e:85:98:58:52:a1:f2:e1:14:a4:da:72:6a:52:03:8b:80:
12:1e:99:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:31 2023 by rpki-client on console-fra.rpki-client.org