Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/202c3d7b-f658-4a23-a862-46f368e3c911.roa
File: 202c3d7b-f658-4a23-a862-46f368e3c911.roa (raw, json)
Hash identifier: VW6rrqhTg+cyjPpqd3Im5l+3TmJDo8g6oBmb03JZeaE=
Subject key identifier: E6:16:BC:22:18:3A:E2:34:A5:CF:60:70:4B:41:89:70:C0:26:E5:A9
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 3F3A1606E1F2BFDD737C89A9FA655B639DBD3505
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/202c3d7b-f658-4a23-a862-46f368e3c911.roa
Signing time: Wed 03 May 2023 00:00:00 +0000
ROA not before: Wed 03 May 2023 00:00:00 +0000
ROA not after: Sat 06 May 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:3a:16:06:e1:f2:bf:dd:73:7c:89:a9:fa:65:5b:63:9d:bd:35:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: May 3 00:00:00 2023 GMT
Not After : May 6 23:59:59 2023 GMT
Subject: serialNumber=7b11f7bc12e3d36df60cac819a308b01c3e6631840e3f6fdd3f389a63fc314f6, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:65:48:55:a1:16:bd:bf:fb:26:0c:f6:0c:
69:05:bb:cf:89:74:a7:55:bc:95:d0:78:e5:7b:56:
47:c9:9f:63:31:43:ed:cb:36:a0:f6:8d:0c:02:d4:
c9:3f:c0:75:77:58:2a:d7:a2:9a:e3:2e:90:2d:e8:
46:54:dc:1f:07:d3:51:bd:86:3d:70:6e:39:25:a8:
91:2c:84:bc:dd:0d:41:a8:a7:89:9c:76:ee:90:1f:
0a:64:48:de:70:63:cc:d3:e6:5b:b9:42:a4:e8:42:
27:2e:6d:71:90:6b:81:5d:0c:c3:60:f2:c3:63:10:
e1:26:2a:64:df:e5:1c:4a:bd:f0:e0:d3:1e:bf:62:
b9:e4:f4:ee:28:1e:e9:60:d2:83:0e:a3:8e:f8:9d:
97:84:fe:ea:e7:31:ef:90:5b:16:d0:fb:35:10:9b:
52:58:0c:9b:ec:16:67:84:1e:d2:da:84:f4:a9:40:
ca:22:b1:a6:6e:e2:68:5f:41:c7:73:7f:0c:10:78:
42:ae:54:88:88:8b:4f:c1:1f:10:98:98:15:32:bc:
1d:3e:b0:75:fb:d3:66:34:11:1f:28:e9:bd:00:8c:
cd:0f:90:7a:d7:05:6a:95:c8:3c:10:ac:77:9f:ed:
6e:65:57:46:59:71:18:a6:82:71:b1:cc:80:4e:fd:
4a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:16:BC:22:18:3A:E2:34:A5:CF:60:70:4B:41:89:70:C0:26:E5:A9
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/202c3d7b-f658-4a23-a862-46f368e3c911.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:48:cd:5f:8d:5b:0c:7d:ad:00:04:e7:9e:1c:ab:25:ff:69:
84:a7:0f:48:e5:00:8b:8f:5a:81:c4:87:95:62:2c:8a:ba:c4:
3f:82:ef:98:9c:af:98:36:56:2e:87:86:cf:21:bc:79:c1:46:
da:15:af:67:60:ea:8a:0a:b0:83:77:dc:8d:d2:c8:8e:08:35:
51:f3:c6:95:34:5c:d1:72:90:7f:b1:98:2e:1a:88:5c:8e:84:
0a:f3:a4:9d:85:f4:e2:c4:9f:56:81:07:1b:56:26:b8:7c:cb:
8b:7c:8c:90:d8:46:e3:cb:88:96:46:00:29:b9:3f:0e:90:07:
50:a5:ad:61:a5:35:49:01:46:9b:e9:72:77:43:f1:8a:37:2c:
05:24:84:6d:bd:a5:f2:d1:71:b4:0c:af:a5:77:75:79:a7:69:
ee:9e:1d:21:18:4a:c8:e3:9f:9b:86:53:86:e7:8c:2c:4b:f9:
2f:98:ab:e9:82:b7:cc:d5:71:bb:86:c4:4b:73:9c:f8:ca:28:
a3:59:74:35:46:e2:1e:a4:94:31:0c:b5:be:52:62:34:e7:09:
28:e4:9d:ee:b4:f4:5f:7a:4f:64:49:37:47:28:5a:ac:fd:39:
54:2b:c8:8b:1e:b6:5b:24:45:58:21:f0:7f:ba:e8:c6:20:8e:
93:e8:62:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:33 2023 by rpki-client on console-fra.rpki-client.org