Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2061db03-8efc-46f8-a660-7eaa6250fd52.roa
File: 2061db03-8efc-46f8-a660-7eaa6250fd52.roa (raw, json)
Hash identifier: Y/N8BmgfB7BA6EdwoNmktSXUs5qVV9giOhRt2CaN8Hc=
Subject key identifier: 65:2E:23:74:B4:11:24:44:DA:B9:91:CC:47:59:48:23:3C:3A:91:03
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 53D3F86BB3AB6FAF2BD9A835A97D22B50CF2A40A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2061db03-8efc-46f8-a660-7eaa6250fd52.roa
Signing time: Tue 06 Sep 2022 00:00:00 +0000
ROA not before: Tue 06 Sep 2022 00:00:00 +0000
ROA not after: Fri 09 Sep 2022 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:d3:f8:6b:b3:ab:6f:af:2b:d9:a8:35:a9:7d:22:b5:0c:f2:a4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Sep 6 00:00:00 2022 GMT
Not After : Sep 9 23:59:59 2022 GMT
Subject: serialNumber=e68bf30cb1feaadb20bfacf08e1332d1dfd288cab0022870aaa4f21ff92f9daf, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:10:e5:ff:ce:9e:c3:36:37:4c:f8:22:69:
af:49:41:7a:0d:5e:0d:e0:78:eb:f8:77:71:e7:95:
c1:32:13:04:c7:1a:89:b3:5f:b4:b4:51:7a:a6:ec:
f4:33:8e:c8:49:19:82:c8:8d:f4:7d:d0:29:92:cd:
cf:4d:9f:12:d3:d3:f9:a9:e7:79:19:4d:5f:48:2c:
f2:64:f0:ee:ca:36:16:5c:5d:1a:02:ec:69:8c:db:
2f:fb:e7:8a:a1:5d:e4:a6:fe:a2:93:ae:32:84:15:
ab:5c:67:00:13:13:b5:ed:23:ff:05:78:0c:2b:63:
eb:48:fa:5d:c2:f6:95:c4:59:ab:6e:ab:68:65:c7:
5c:be:e8:c0:b9:7c:81:4b:8b:75:97:70:56:26:d1:
16:4c:4a:2d:d7:04:0a:43:6a:b6:18:62:11:26:65:
b0:b1:24:6a:99:d5:11:e1:d2:59:e9:f2:b2:82:17:
6a:00:54:8c:99:66:0d:70:7b:18:e7:f5:e8:a1:bc:
86:9f:49:d0:9a:5e:6c:68:45:dd:75:e5:d7:db:02:
ee:15:b4:17:73:b3:88:53:4a:48:de:3b:3e:17:a0:
ab:ff:c2:e6:51:34:7b:51:10:90:fd:58:23:fd:ef:
e0:63:85:8a:b5:6b:10:55:6b:de:2b:c8:d6:9a:6e:
5f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2E:23:74:B4:11:24:44:DA:B9:91:CC:47:59:48:23:3C:3A:91:03
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/2061db03-8efc-46f8-a660-7eaa6250fd52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
49:32:7e:8f:63:9b:38:63:79:38:87:95:ca:fd:aa:bc:bb:3f:
4c:f9:bd:74:10:e8:9b:65:02:dd:1d:b3:55:b3:5a:6c:77:d8:
a1:8b:85:99:9c:44:c3:54:5e:7a:64:08:55:99:bf:64:01:55:
d6:0a:e7:5e:66:fc:ae:bc:a0:74:a6:96:f7:a3:78:c2:0e:f1:
f7:68:50:f1:bb:1a:51:46:25:fd:c2:ff:c1:df:f0:1a:ee:60:
0d:a4:24:8f:fa:1a:17:8d:6d:8c:29:1a:b1:30:49:d2:b6:05:
60:8c:93:d4:89:e3:70:a3:1e:1d:ee:89:c3:80:39:9a:94:9b:
73:68:b9:fc:34:e7:83:a9:40:5f:18:04:6b:e4:53:02:a6:d8:
71:0c:8d:a5:3e:84:f3:37:ab:b5:69:6e:37:ee:07:5a:c5:61:
1b:bc:cc:ee:86:5f:15:31:bb:34:70:bd:1f:f6:ca:e8:ca:21:
47:46:64:9d:8d:5b:7b:43:9f:8b:37:c5:56:7c:8c:1d:29:ac:
f8:5e:04:5c:79:b5:5f:78:8a:55:21:35:ec:13:d0:88:7b:27:
6d:55:53:05:ac:1b:f4:56:1a:ab:ab:a1:79:d6:31:62:82:15:
38:96:c8:2d:a3:11:05:33:4b:71:29:06:20:14:f4:ca:46:df:
77:94:a1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:33 2023 by rpki-client on console-fra.rpki-client.org