Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1ad89d75-0f2d-4477-85ae-e0cfb7b1f3ba.roa
File: 1ad89d75-0f2d-4477-85ae-e0cfb7b1f3ba.roa (raw, json)
Hash identifier: /Vzby0s9VLcF+3SW7xrrK2JacQXpAf6qFrV2Mo888u0=
Subject key identifier: C1:88:B2:B8:F6:83:A1:F1:40:AE:57:B5:56:B4:BB:00:24:8A:4E:89
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 533BBC1F0D01EBF7118BFBD8B787EA341CB4DBD2
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1ad89d75-0f2d-4477-85ae-e0cfb7b1f3ba.roa
Signing time: Fri 31 Mar 2023 00:00:00 +0000
ROA not before: Fri 31 Mar 2023 00:00:00 +0000
ROA not after: Mon 03 Apr 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:3b:bc:1f:0d:01:eb:f7:11:8b:fb:d8:b7:87:ea:34:1c:b4:db:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Mar 31 00:00:00 2023 GMT
Not After : Apr 3 23:59:59 2023 GMT
Subject: serialNumber=fbea302c5101290795c0f72ab2e1b9dbea436e991e38bb3a5ba1408628fe5bdb, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:23:7d:ef:33:c6:3b:8f:00:bc:61:eb:6b:6f:
be:9c:56:c6:97:04:f5:06:93:d0:57:46:2b:55:e2:
da:04:90:06:ca:e8:7e:b5:e2:5a:2c:83:2c:88:d1:
ad:60:84:23:bc:c6:66:d1:a3:a9:b6:c7:4a:44:27:
5a:7a:08:81:3d:cf:49:41:4f:5d:a9:8e:38:23:d5:
e1:d7:15:99:ed:a2:bb:49:04:39:3d:d2:6a:e1:ab:
ff:4e:cb:ba:21:83:e7:9f:47:0d:6e:aa:1d:19:c5:
3e:1d:86:dd:58:e1:78:1b:7a:24:8f:89:a8:5f:40:
da:a3:ba:02:bf:3f:34:b0:c4:f9:c3:da:ee:04:66:
05:d7:67:47:79:fe:47:da:9e:1c:52:02:df:af:e9:
7f:60:61:12:01:e6:ad:39:53:bf:30:cb:7e:c0:c7:
53:50:ff:29:ea:70:24:23:23:ae:c2:f8:72:62:ab:
70:54:a4:a1:68:dc:57:a9:e5:17:11:6d:cc:3f:5b:
0f:8b:df:9d:a4:b4:96:25:79:e3:9d:72:2e:a5:90:
e5:56:37:96:0a:cf:10:c2:f5:56:0b:5f:fd:2e:60:
f6:dd:31:7c:cb:1e:b1:82:cc:42:b2:12:50:56:13:
92:c5:04:d6:e5:7b:e9:83:d9:00:38:36:b0:66:ab:
8f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:88:B2:B8:F6:83:A1:F1:40:AE:57:B5:56:B4:BB:00:24:8A:4E:89
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1ad89d75-0f2d-4477-85ae-e0cfb7b1f3ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ed:d2:d1:88:ec:fd:1b:cb:62:ac:53:2f:54:56:48:57:62:
0e:1c:76:e6:59:b8:49:0b:42:42:96:06:8e:02:47:85:92:c0:
1f:29:ba:db:8b:9b:4b:27:97:b7:31:a3:73:24:df:aa:59:4e:
84:c2:4a:0f:95:6c:82:c4:f7:df:1d:22:f3:43:ca:2d:b8:e4:
91:23:b0:66:d1:50:a0:c2:ec:0f:b7:66:cb:b2:5a:41:93:bb:
22:21:61:ef:8f:f3:21:59:20:3c:3b:39:44:98:4a:75:53:8e:
72:06:3a:cb:41:e7:36:b3:f5:0d:44:87:22:9e:dc:6e:9d:60:
a0:01:68:a4:f2:88:4f:d9:e0:56:2e:8a:13:e9:e6:cf:b0:02:
49:55:eb:c2:6c:76:55:6a:99:fc:10:06:28:5f:cf:6e:24:5f:
96:c3:9d:03:6c:cf:e7:da:10:7d:64:93:9c:e4:dd:5a:dc:e3:
bf:ef:e0:c8:5d:86:6e:2b:da:30:9c:b9:15:b2:68:d2:6d:b6:
9f:c4:47:e2:be:89:26:19:54:92:bc:27:11:26:d1:51:e7:2a:
7e:21:82:2d:b1:b2:7a:2d:ad:e3:3f:ac:60:0e:3e:3f:d7:fc:
51:7e:c1:44:fc:5a:0b:89:04:53:9e:6e:bc:4e:a5:e1:52:ec:
de:7c:a1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:38 2023 by rpki-client on console-ams.rpki-client.org