Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/294909d7-7e6b-474a-aa67-a5f52fd3dc5c.roa
File: 294909d7-7e6b-474a-aa67-a5f52fd3dc5c.roa (raw, json)
Hash identifier: dCkIifdSCdvWRuFA9BzAsemOTwS2KBYr7Lc+CpwErk8=
Subject key identifier: 93:A8:F9:89:57:DD:89:D5:AF:F4:E4:34:2F:13:BA:ED:6F:E4:82:83
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 793F657A2192A7B5D565AAB87590E1B1AD357BAB
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/294909d7-7e6b-474a-aa67-a5f52fd3dc5c.roa
Signing time: Mon 27 Feb 2023 00:00:00 +0000
ROA not before: Mon 27 Feb 2023 00:00:00 +0000
ROA not after: Thu 02 Mar 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:3f:65:7a:21:92:a7:b5:d5:65:aa:b8:75:90:e1:b1:ad:35:7b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Feb 27 00:00:00 2023 GMT
Not After : Mar 2 23:59:59 2023 GMT
Subject: serialNumber=a06e4e22bb78664f189fec39267701d3e795544696a42398174fe1ac544754f9, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:c1:91:dc:ee:69:d7:c4:6f:27:cc:91:c4:
9d:c4:61:58:05:e5:a5:c9:31:32:23:61:bc:14:6a:
fd:eb:3a:58:fd:47:77:04:df:55:d8:93:0c:ea:dd:
6b:e7:91:24:cb:85:70:21:84:6e:99:6d:47:3d:dd:
c2:a6:18:95:e3:85:52:31:44:01:f9:3b:1f:01:01:
7c:d7:a3:7c:d7:a4:ee:af:f9:39:b3:b1:be:2e:78:
c3:63:62:75:6f:a5:ba:46:e3:e4:e2:72:09:f5:da:
6f:43:ff:3d:22:d3:6f:e0:c7:e2:4c:67:3a:61:d3:
bf:94:d4:06:d9:c4:6a:2c:8f:0d:6b:45:d0:72:5e:
5c:43:a8:a1:a4:75:dc:1d:dc:cb:aa:af:61:36:a9:
6d:18:e3:27:19:fd:8f:f9:ee:0e:3d:17:98:24:20:
e0:23:00:77:21:8a:3a:db:86:c4:ac:46:d0:5f:85:
bb:8a:f5:ae:88:fd:27:47:fe:db:2d:7e:7d:f0:c3:
af:46:83:47:c7:c9:ea:b9:46:6f:5b:16:e9:30:10:
51:1e:c4:32:a2:49:2e:16:db:8f:0a:4f:7d:13:c4:
09:6f:53:92:88:a3:18:33:66:ec:2e:60:28:5b:48:
a6:0d:5c:45:c2:89:f2:00:ed:cf:af:ac:c4:a1:b4:
a3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A8:F9:89:57:DD:89:D5:AF:F4:E4:34:2F:13:BA:ED:6F:E4:82:83
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/294909d7-7e6b-474a-aa67-a5f52fd3dc5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
33:66:45:6a:ee:b2:e2:dc:56:85:c5:8c:f0:22:bd:ac:24:57:
72:26:d6:37:4a:2e:41:0b:a5:66:26:73:89:df:20:90:ce:d4:
37:cf:2e:fe:7c:eb:6a:88:ad:ea:f4:bd:58:a1:35:d8:a9:2c:
9a:54:7a:de:e4:b4:13:fc:bc:8c:84:f5:f5:ac:25:ad:11:0a:
fd:b7:55:92:3f:a2:18:b7:14:9b:2c:9f:43:9c:73:72:3c:4a:
e3:a1:c0:89:06:a0:d3:e1:8e:98:81:59:8a:1a:5c:ce:fc:54:
84:84:49:f6:eb:73:59:dc:1e:b2:41:2f:94:07:6e:82:1c:44:
df:4b:17:39:fa:33:54:42:66:e2:f1:27:76:75:44:80:f1:9c:
20:48:69:54:53:93:e1:c3:0f:d3:14:76:2e:11:a0:16:8f:67:
c9:fd:aa:b3:ce:41:8f:28:b8:48:18:f7:ab:d9:d3:f3:89:20:
30:58:e2:64:2c:3a:b7:13:66:76:25:cb:5a:76:4f:55:b1:04:
35:cb:59:6e:6f:32:e3:66:6a:0e:3b:18:56:4d:5d:0b:9e:ee:
85:10:b1:04:1f:88:42:9d:b7:64:c3:d1:3e:41:a0:c1:2f:87:
0b:20:3a:ba:cc:7b:a6:74:bb:7a:7a:4d:6d:45:25:1f:e0:43:
9f:0f:57:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:33 2023 by rpki-client on console-fra.rpki-client.org