Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/36888db2-e418-4f86-abf5-5db5faa70a75.roa
File: 36888db2-e418-4f86-abf5-5db5faa70a75.roa (raw, json)
Hash identifier: yaWEuT0a1HAtzun2rkurdpQGtoyZz3EW0aTBXEoRCR8=
Subject key identifier: 58:50:A8:94:24:17:29:34:A4:4C:C4:49:DA:9B:8A:1F:F2:CE:66:7E
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 134555CE544E06E1A1BFE1FE81C5ACFBCDE7E825
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/36888db2-e418-4f86-abf5-5db5faa70a75.roa
Signing time: Mon 27 Feb 2023 00:00:00 +0000
ROA not before: Mon 27 Feb 2023 00:00:00 +0000
ROA not after: Thu 02 Mar 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:45:55:ce:54:4e:06:e1:a1:bf:e1:fe:81:c5:ac:fb:cd:e7:e8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Feb 27 00:00:00 2023 GMT
Not After : Mar 2 23:59:59 2023 GMT
Subject: serialNumber=89262d7330681625f3f5210021d18b0c7ba348c7649bb3e42d7c9f006cd3afc5, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:62:2b:ec:40:1a:03:c0:1c:61:45:65:16:e8:
a8:c1:87:aa:91:40:00:07:27:98:06:7a:21:8a:d5:
75:c4:c6:6a:37:99:99:b7:b8:bf:63:71:60:79:e7:
41:56:0e:d3:e0:60:bf:74:f4:be:71:11:f1:9b:c4:
d8:c6:94:8e:1c:e0:a1:be:46:33:94:5f:88:6a:f2:
4e:1e:91:d2:a3:89:26:7c:64:e6:91:a7:68:db:c2:
44:e1:39:5b:9c:1d:a0:ec:cd:c0:29:d3:44:d6:7e:
23:a9:a3:cc:57:19:91:f3:c9:91:a9:ad:ae:bb:d3:
21:01:39:21:8f:f7:b2:3c:7e:5c:41:6f:a1:a4:b7:
ea:8a:ef:7c:c4:76:95:aa:56:79:52:94:62:05:1a:
3c:f4:f3:47:a0:8e:60:e2:be:e7:59:61:63:f9:81:
84:f1:ac:35:03:90:bc:75:e9:f7:26:53:d2:fb:df:
8e:0b:13:2e:e8:f3:ff:b1:d2:15:1e:8d:9e:eb:a7:
1e:36:7d:b2:e1:6e:5a:9a:b0:7b:42:fd:24:d4:04:
71:bd:a8:ed:45:f4:e6:9e:13:c7:56:87:bc:4f:43:
9b:45:b0:8f:eb:f6:3a:c3:c8:e8:f4:7f:82:2c:01:
01:c4:72:97:28:9d:09:79:f9:4f:e9:53:ee:8b:83:
15:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:50:A8:94:24:17:29:34:A4:4C:C4:49:DA:9B:8A:1F:F2:CE:66:7E
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/36888db2-e418-4f86-abf5-5db5faa70a75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:a4:18:c5:d2:17:96:1b:04:5c:f0:de:63:2f:b5:0a:d3:8a:
21:f4:5f:9c:85:ca:5f:28:17:d7:af:d8:9c:91:e2:14:7b:cb:
17:14:52:d1:e2:e5:8e:ce:46:fd:94:85:da:bd:4f:47:56:8d:
1b:48:d5:51:6d:6e:32:cc:3f:0b:f7:0b:00:3d:4a:99:a3:e2:
98:7b:71:27:5e:36:f3:9e:22:12:9f:a7:2a:e3:65:3c:65:0e:
84:f4:4e:7c:c9:e1:42:eb:a5:d2:8c:50:20:01:57:c1:18:ac:
27:ae:70:1b:eb:07:ce:f7:f7:95:07:09:79:40:bf:ff:23:bb:
d4:64:12:32:fd:ac:0d:90:25:95:10:21:cd:13:00:c0:c1:5e:
cb:5c:c3:bc:bf:43:5b:59:b7:35:37:aa:32:8d:6d:cb:d1:a2:
6e:26:1f:e8:c1:75:75:f4:60:43:b4:c1:06:c0:2c:36:b9:31:
7d:4e:f1:f7:e0:04:24:56:d5:40:62:d0:fd:c7:94:ca:80:0d:
71:d2:94:78:ec:c7:db:a6:fb:a5:85:a4:9a:94:94:02:f4:ae:
ce:7b:43:ef:97:2a:7e:33:07:98:ff:54:48:33:8d:ac:2f:98:
1b:e5:6f:36:32:63:e2:5f:4d:1d:f3:99:6b:2b:b4:2f:d5:12:
4b:87:d5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:40 2023 by rpki-client on console-ams.rpki-client.org