Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/20f8543e-60e2-4eb7-b297-0ead6b3a1e03.roa
File: 20f8543e-60e2-4eb7-b297-0ead6b3a1e03.roa (raw, json)
Hash identifier: JX9CjqMgGG+idMi8wmX1dNQFnx2b2ZN/OxQQWbi7Fm4=
Subject key identifier: B0:17:A0:AB:E6:64:D5:88:53:DD:1C:C2:AA:C0:58:B0:2A:99:32:B5
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 75DA6F5D275E32B55E40AD056EDB0BF224E9C619
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/20f8543e-60e2-4eb7-b297-0ead6b3a1e03.roa
Signing time: Mon 03 Apr 2023 00:00:00 +0000
ROA not before: Mon 03 Apr 2023 00:00:00 +0000
ROA not after: Thu 06 Apr 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:da:6f:5d:27:5e:32:b5:5e:40:ad:05:6e:db:0b:f2:24:e9:c6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Apr 3 00:00:00 2023 GMT
Not After : Apr 6 23:59:59 2023 GMT
Subject: serialNumber=7ae0cb76fb5ba46507c47756c03c17b60fe09e585b271edbebc2a4950c270f39, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:29:d9:69:36:e8:d6:5f:bd:b7:d0:a6:27:a2:
47:f3:30:92:1a:45:67:59:d6:ad:99:a5:25:9b:33:
15:0a:e7:cd:57:50:3e:7f:a4:ac:cb:04:e9:18:d7:
46:3f:b7:7a:4e:ad:66:10:89:cb:42:da:93:b9:4e:
b5:f9:d4:6b:08:51:65:b0:50:68:59:c9:e1:03:6d:
06:b0:15:aa:12:4e:2b:23:db:a5:d4:ef:37:3d:89:
c2:83:1e:99:aa:00:f7:34:5d:4b:c8:28:a3:81:50:
ee:2e:5c:19:5e:d5:8a:df:90:fc:34:31:c3:93:89:
06:37:a0:e5:c2:bf:40:31:f4:d0:bc:c4:92:6d:43:
22:cb:e3:18:39:06:a8:68:31:a0:69:20:b8:22:d6:
74:cd:b6:17:75:86:4a:1b:41:93:30:bb:cd:be:a4:
d9:73:77:8f:1e:b1:2d:8c:42:7e:04:58:0e:bc:4b:
2d:38:be:2c:a0:d0:fd:aa:ca:b4:16:37:b7:3d:d4:
c2:e0:19:a8:9f:bc:aa:6f:89:09:a0:6d:40:c6:33:
cb:5e:0b:7e:5d:11:34:9f:69:be:58:d4:d8:94:8d:
c4:a2:87:96:21:d6:bc:30:d8:97:ce:3c:55:43:06:
1a:2b:e9:68:0a:15:19:d6:fb:30:d1:d4:1b:6a:41:
64:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:17:A0:AB:E6:64:D5:88:53:DD:1C:C2:AA:C0:58:B0:2A:99:32:B5
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/20f8543e-60e2-4eb7-b297-0ead6b3a1e03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ae:b0:35:50:51:a7:e1:4d:e8:46:10:b3:a8:ea:ac:96:6e:
1d:4d:33:83:d8:34:58:f1:50:e9:19:1c:0e:19:2e:f3:c1:37:
5c:da:22:41:86:09:3d:61:1d:b7:62:5a:c0:bb:e4:87:67:2d:
6d:b5:53:e3:67:ce:1e:db:10:e6:c5:1b:a2:16:3c:ce:1a:ad:
d9:b4:e5:bc:38:67:34:ac:c1:94:5e:b8:2c:58:77:dc:ef:2c:
5b:b7:ac:d1:e7:a0:b6:04:de:8d:60:0a:10:c7:12:fd:2b:7e:
a4:da:f4:41:b0:25:cc:4a:83:94:8b:09:06:5f:cb:13:5a:42:
61:57:e0:56:fe:b4:b5:1a:49:36:12:f0:72:c0:03:aa:f1:4c:
cf:f9:bd:86:2a:ad:d0:d8:ad:ef:c4:2c:8a:d7:de:44:78:59:
93:58:6d:24:2a:69:ef:99:fb:2d:3c:a9:0d:ed:b4:7d:88:ec:
aa:e3:47:04:76:30:16:d3:74:2a:7f:8f:f4:0f:e2:ac:86:3f:
c1:2f:76:a9:41:8f:91:a7:e1:e0:02:60:8e:72:31:e7:65:1d:
2a:ea:59:b6:02:e6:87:6a:76:d2:32:36:bb:04:d0:3f:c5:a2:
73:06:83:59:28:dc:2f:46:58:01:f0:8c:56:da:a7:ec:48:af:
fa:fd:91:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:33 2023 by rpki-client on console-fra.rpki-client.org