Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0eab83d2-c1b3-4193-a62d-b3d267a79d18.roa
File: 0eab83d2-c1b3-4193-a62d-b3d267a79d18.roa (raw, json)
Hash identifier: 5vrpY0DlZfuIscG2nQfhGLeyTaxVflmQWN5/6Pz1vzA=
Subject key identifier: 59:13:C0:9E:AF:A4:54:DF:46:DA:80:1F:E9:F3:39:71:44:23:DF:73
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 74FCD4880E7FD2165D83397DFADCC00AF4FA0B1B
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0eab83d2-c1b3-4193-a62d-b3d267a79d18.roa
Signing time: Thu 02 Mar 2023 00:00:00 +0000
ROA not before: Thu 02 Mar 2023 00:00:00 +0000
ROA not after: Sun 05 Mar 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:fc:d4:88:0e:7f:d2:16:5d:83:39:7d:fa:dc:c0:0a:f4:fa:0b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Mar 2 00:00:00 2023 GMT
Not After : Mar 5 23:59:59 2023 GMT
Subject: serialNumber=ec8a9f6d79fe12dddb2c0ce3091f68e5e6adb1c0a88a5c0a43820d79bbdfb62a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5e:99:c3:b9:d3:62:5c:bc:e2:2b:16:4f:03:
ea:5c:fc:b1:f5:f0:50:cb:20:9b:5e:95:e0:e0:a1:
06:07:6f:23:1f:41:9b:45:94:ae:14:c0:e9:da:e0:
f8:ed:96:a9:c6:5b:2d:79:c0:de:6c:c1:06:f9:ac:
98:29:db:59:a1:2f:97:c5:be:02:cc:c6:fb:93:8b:
e6:e0:fd:05:ef:44:63:ab:42:7d:92:82:53:37:8e:
9d:a9:18:8b:e1:09:49:30:6d:82:ee:84:7c:88:7e:
33:d9:db:3d:82:24:12:e9:8b:fc:d6:ae:a8:40:d0:
d0:12:89:5c:3e:87:6c:59:95:94:9e:a7:9d:03:8a:
4f:f2:4b:03:4c:e6:5b:16:cb:05:22:1e:20:25:56:
fc:d1:12:80:3d:b6:d1:3f:74:bd:12:88:ef:76:3a:
50:a0:24:10:ff:3d:24:b1:47:6d:2b:97:78:5b:4a:
d6:34:c3:f6:a8:63:5a:65:5f:66:ac:19:b4:a6:24:
cc:9b:0b:10:85:55:46:20:0e:02:f6:6a:2c:de:0f:
d9:98:08:b5:83:ab:3f:85:d4:7e:ad:d1:51:84:d6:
3f:68:ec:16:3a:1e:fe:31:2c:f1:10:66:85:70:d0:
9a:ef:e4:1f:e1:8e:5b:3b:61:99:f3:c4:8d:bf:4c:
ea:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:13:C0:9E:AF:A4:54:DF:46:DA:80:1F:E9:F3:39:71:44:23:DF:73
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0eab83d2-c1b3-4193-a62d-b3d267a79d18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
95:e9:61:af:35:58:53:70:6e:5a:4d:2a:da:7b:24:12:23:08:
85:73:3c:ab:4b:bd:8b:53:67:78:5c:59:d3:b2:5d:a0:1a:fa:
17:42:fc:94:0b:30:54:b4:e6:25:ad:7e:02:b9:45:d5:45:b3:
42:9a:06:cf:08:12:27:6b:f8:79:fe:dd:32:d8:09:a3:cf:37:
5a:68:d1:7b:78:26:2f:d2:94:37:b2:80:53:cf:11:8e:ba:c0:
95:2a:71:8f:c9:d6:6c:76:7e:e9:3c:a1:94:77:e2:89:cf:9b:
f4:83:dc:57:4c:dd:a7:8c:3e:6e:07:10:5d:f6:c9:b5:d6:7d:
cc:79:65:80:df:3a:dd:89:41:b4:0f:7b:e8:ce:9a:ab:09:9e:
0b:d7:3b:08:04:f2:23:3b:b7:bd:f0:46:ad:60:51:61:c8:ee:
ea:7d:82:dc:02:8a:22:0f:af:cf:73:d1:97:ac:e5:95:59:e4:
2b:df:3b:8d:a8:94:b4:de:53:a7:fa:97:e0:1e:34:d4:10:42:
db:d0:da:b0:89:fa:f5:78:50:19:d8:c8:6f:e1:75:a7:de:98:
e9:46:5f:12:3c:d7:5e:32:1f:f8:5c:65:07:60:0f:e2:21:e9:
45:44:ff:5e:48:b1:56:33:7a:9b:4d:60:cc:32:0d:ba:25:42:
ed:be:40:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:31 2023 by rpki-client on console-fra.rpki-client.org