Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/296a5095-0037-420e-bfa8-0aec7d88b259.roa
File: 296a5095-0037-420e-bfa8-0aec7d88b259.roa (raw, json)
Hash identifier: k8l69jlYWrnWHFE4LIYYEn3Gl3qmIJlHPe5Qyf1660k=
Subject key identifier: 33:DD:EC:4A:4B:5A:90:22:99:0C:61:64:77:8C:02:72:CC:6E:5D:A0
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 0178927DE794E6E93FA8E1C9F434B1147DE1248F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/296a5095-0037-420e-bfa8-0aec7d88b259.roa
Signing time: Tue 09 May 2023 00:00:00 +0000
ROA not before: Tue 09 May 2023 00:00:00 +0000
ROA not after: Fri 12 May 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:78:92:7d:e7:94:e6:e9:3f:a8:e1:c9:f4:34:b1:14:7d:e1:24:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: May 9 00:00:00 2023 GMT
Not After : May 12 23:59:59 2023 GMT
Subject: serialNumber=7b25973168584d71fce47e4c657542da36d2e6d6817af13d1ff841524beb3016, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:73:32:6a:48:6d:58:ed:cf:a6:74:39:dd:d3:
8a:90:22:08:2b:73:c3:21:70:b8:6e:74:5c:96:2a:
30:9c:e7:62:f9:7e:7b:a7:27:d4:bb:24:fe:24:53:
92:7c:5a:5a:76:dd:5d:97:47:1b:36:ea:6b:51:8b:
80:92:f2:e1:7f:ce:00:01:aa:76:f3:56:8c:99:cf:
97:73:dd:d0:18:65:18:76:5e:fe:01:cc:d4:58:c2:
c0:ea:3d:2f:f5:58:4b:9e:58:e2:18:58:11:15:9f:
01:71:05:5f:32:2e:be:61:88:fb:6e:b5:44:3b:3e:
84:2a:dd:c7:2d:63:04:ca:d1:ab:a1:53:92:dd:89:
2d:d9:d8:3a:cd:65:d5:36:59:6b:4d:6f:5d:98:ce:
aa:9b:77:ca:70:1e:08:a2:22:8d:84:2b:a8:c0:50:
78:78:e6:a6:85:89:dd:ad:98:53:36:69:62:35:20:
24:08:4f:8e:8f:6f:17:64:e4:30:85:ae:8b:9d:5f:
2f:e7:58:8f:f6:2a:4c:8c:00:4c:4a:5b:d1:d3:2c:
fc:36:a9:d9:10:2f:32:32:0f:7b:bd:95:39:73:9f:
80:19:0c:f8:c3:1d:28:a8:c2:c1:ed:e5:7f:78:7d:
28:25:cd:6d:00:be:67:f9:fa:64:0d:a2:c7:d1:23:
cf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DD:EC:4A:4B:5A:90:22:99:0C:61:64:77:8C:02:72:CC:6E:5D:A0
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/296a5095-0037-420e-bfa8-0aec7d88b259.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:c1:a5:ed:72:80:1d:27:59:e1:92:a2:82:d2:d3:bd:10:53:
09:68:ad:92:14:34:5e:5a:36:a2:5f:ba:45:ef:a7:82:f1:48:
f4:1f:6d:a2:73:a2:25:c1:09:07:1a:a4:8b:68:d7:1e:3a:f3:
55:5e:49:af:62:42:bd:82:d4:45:12:30:ae:7f:57:85:03:1d:
d7:a4:bf:81:63:7b:75:89:62:c5:0d:5f:45:44:6b:b0:89:7f:
b1:cc:2d:f2:59:6c:c1:8f:03:a0:b0:ea:6c:52:a0:00:07:9c:
ed:3d:11:26:02:ac:02:5e:66:13:64:66:c5:cc:f9:70:77:b1:
35:ac:7e:8b:41:94:51:29:26:b3:b7:81:ea:e0:45:cc:20:27:
43:48:bc:dd:40:1c:f4:a8:2f:13:44:0b:c4:28:da:fa:66:44:
e8:7f:1a:77:b9:14:ae:d7:93:39:12:4a:71:54:6a:16:3c:c7:
ee:ae:72:6f:bf:79:9e:59:75:98:34:8b:63:b2:4d:60:27:26:
dd:42:12:82:e4:ec:ae:d7:15:6e:91:f1:b5:79:8d:38:d3:22:
c3:6a:f5:dd:9b:be:90:d4:c4:3e:59:b7:1c:6d:d7:90:32:17:
6e:92:0d:4a:ff:2f:3f:1c:3e:30:92:78:a4:b4:19:d0:21:98:
a6:84:32:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:33 2023 by rpki-client on console-fra.rpki-client.org