Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1b261ca4-b38e-49f5-ba5b-449504280a86.roa
File: 1b261ca4-b38e-49f5-ba5b-449504280a86.roa (raw, json)
Hash identifier: VraODdU4TUtKrF8OaDMdaYGQa/EFL+YnFbZ7f9k2ztE=
Subject key identifier: 90:47:EB:F9:62:CE:2C:F3:B7:1E:EC:80:DF:1D:76:81:72:3A:9B:A2
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 77999E38074A9A799F52729E4983DDA33FFD2129
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1b261ca4-b38e-49f5-ba5b-449504280a86.roa
Signing time: Wed 02 Nov 2022 00:00:00 +0000
ROA not before: Wed 02 Nov 2022 00:00:00 +0000
ROA not after: Sat 05 Nov 2022 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:99:9e:38:07:4a:9a:79:9f:52:72:9e:49:83:dd:a3:3f:fd:21:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Nov 2 00:00:00 2022 GMT
Not After : Nov 5 23:59:59 2022 GMT
Subject: serialNumber=9bc74df38bb867ca4c2e0ad0569d0c4acd117b7ebbf47d7bc312d7911e4153d3, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ac:81:80:5f:ab:7d:74:0c:5a:4d:b8:ab:75:
8e:a7:64:a0:07:68:9e:be:5b:f0:50:94:8e:72:52:
9d:13:4f:56:23:06:06:74:1a:f6:4b:cf:a1:6e:38:
46:87:04:20:d6:f1:52:34:cb:7c:ca:5c:14:da:0f:
d7:71:ab:ff:1a:cb:ce:35:55:64:a3:38:29:26:ce:
a8:42:3a:0c:7a:28:d4:b5:c5:c3:e9:d3:f1:de:3c:
05:12:bf:c4:54:b7:96:58:12:75:48:d1:4f:fd:e4:
23:80:c1:0c:19:f1:db:a5:e7:83:cc:c8:b8:f5:e5:
01:4a:b4:1c:3e:fe:e3:c7:55:46:3a:c4:11:ea:cd:
de:47:7f:13:3d:26:11:02:53:d5:18:a0:8a:ae:4d:
3b:bf:2b:ca:fb:da:2f:58:4a:b6:63:c3:9b:fc:50:
5c:aa:67:00:41:eb:70:73:46:96:99:7c:eb:cb:01:
0b:8f:30:d3:13:ee:de:25:2a:07:e5:2d:9a:1e:b4:
4e:4f:c7:15:35:7d:64:61:2f:31:68:fb:88:ed:ba:
79:48:00:5e:ad:4f:f6:f0:6a:e9:43:71:a2:6a:f2:
31:71:1c:6f:e2:0f:f8:c3:1e:ba:90:30:4c:5c:70:
fe:b0:f6:5c:57:9c:61:a3:9a:ab:5f:0e:19:8b:2c:
00:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:47:EB:F9:62:CE:2C:F3:B7:1E:EC:80:DF:1D:76:81:72:3A:9B:A2
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/1b261ca4-b38e-49f5-ba5b-449504280a86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:4d:8e:5c:71:e6:23:a0:ef:e0:13:23:3f:d2:31:df:23:75:
41:11:69:00:22:5b:0d:b7:2e:54:f1:64:6b:c4:06:1f:29:4f:
52:d0:de:95:9a:32:40:eb:ad:50:0c:29:e3:a1:83:02:e2:2a:
37:64:b2:12:ef:fc:91:0d:e1:60:91:8e:a2:50:fc:72:a1:0f:
33:01:39:30:b0:65:c3:a6:5a:81:b5:6e:a9:86:ea:df:f1:21:
ac:23:c1:64:1c:0d:a9:f3:0b:cd:d3:7c:ab:8d:5c:7a:ee:d4:
c0:08:13:42:3c:d7:a0:15:56:20:db:ba:be:dd:6a:79:ab:ce:
0b:ee:9c:2e:f0:fc:8d:79:f6:ad:06:aa:f3:12:be:1c:75:c2:
0d:05:4a:6d:40:46:b9:f9:24:0e:a0:fd:e9:89:3a:1b:b1:c8:
34:53:03:b8:ea:1f:18:e2:81:ee:cb:3e:65:61:24:ef:c3:75:
3a:ed:35:f5:75:74:68:22:9c:9c:58:61:06:fe:0b:c7:44:73:
67:2c:46:71:69:b2:7f:08:6a:0c:be:66:d6:33:10:7d:d2:0f:
15:e7:ad:16:10:5e:23:6c:1e:66:ac:bb:40:35:5c:7e:5e:80:
90:30:f7:73:cf:ae:4a:f7:6d:25:63:8c:76:7e:1a:0e:89:25:
30:8a:00:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:38 2023 by rpki-client on console-ams.rpki-client.org