Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3d3836d5-0dcb-4f06-a06d-8dfc287deeb1.roa
File: 3d3836d5-0dcb-4f06-a06d-8dfc287deeb1.roa (raw, json)
Hash identifier: FMRKj/BmNe9Z9HMZYTWZN1gQRMp3XuQRfWkGZn08SwA=
Subject key identifier: 8C:30:00:73:F0:B5:CC:15:68:51:F5:BE:FE:E3:23:8B:5A:7E:F5:6B
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 197905F2F9679C94D69F66C92E54CD711F5A78AA
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3d3836d5-0dcb-4f06-a06d-8dfc287deeb1.roa
Signing time: Tue 04 Apr 2023 00:00:00 +0000
ROA not before: Tue 04 Apr 2023 00:00:00 +0000
ROA not after: Fri 07 Apr 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:79:05:f2:f9:67:9c:94:d6:9f:66:c9:2e:54:cd:71:1f:5a:78:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Apr 4 00:00:00 2023 GMT
Not After : Apr 7 23:59:59 2023 GMT
Subject: serialNumber=84462122fa935b4dc307176674c9a6c7f96e4549c389b0a1a0bf28f4d60fa09a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d8:d4:0a:be:c3:ea:7e:4c:b4:c4:f0:4b:72:
39:5f:d4:6c:ef:21:6c:97:96:07:87:8a:24:9d:d2:
69:e7:39:04:57:80:cf:b8:15:ad:8b:6d:11:1f:4e:
e3:62:0f:a1:f9:1e:6a:47:c2:6f:de:87:b7:61:2f:
ca:9c:7f:27:17:ac:c9:c1:ec:81:e1:fe:5a:0d:90:
20:6c:00:7e:28:e4:f5:02:13:50:cb:29:0e:37:62:
bc:51:2f:68:57:d6:3b:21:40:a2:15:2f:3e:0d:6d:
78:f3:4c:2a:e7:0d:9c:3e:5e:55:fd:5a:8c:92:b5:
fb:40:b5:a0:1d:bd:1a:fd:5a:a6:d1:b9:b1:1d:af:
e8:d1:98:08:3b:a3:13:51:2b:20:6a:7b:45:28:5a:
52:f1:9c:33:9c:ce:36:e4:69:2e:70:be:0e:dd:43:
7c:38:78:25:99:77:18:0f:d1:2d:df:8e:76:66:0d:
d0:56:a5:f2:74:75:cc:1a:f8:4d:e3:f2:27:ab:13:
ae:cc:ef:c2:e2:66:47:1d:36:05:c6:f9:22:e8:8d:
5e:46:93:9a:2c:f7:20:ff:4b:ee:8b:5f:b7:9a:2e:
37:f8:22:9e:37:ce:7d:38:a2:e0:56:fb:31:56:a0:
85:bc:c8:2a:f1:b4:a0:c1:5c:16:e8:3f:54:d1:ee:
01:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:30:00:73:F0:B5:CC:15:68:51:F5:BE:FE:E3:23:8B:5A:7E:F5:6B
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3d3836d5-0dcb-4f06-a06d-8dfc287deeb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:1f:1b:dd:4a:ea:79:9f:b8:eb:90:c2:18:ab:1b:61:5e:33:
f7:13:71:45:39:44:4b:f3:85:b2:43:20:6d:62:d0:5f:b2:13:
14:8b:27:c1:c0:76:61:b7:5f:e9:1f:12:34:30:c9:7e:32:67:
42:79:b9:32:e6:b9:b8:af:b2:4c:dc:e9:c3:de:34:b9:6d:4f:
79:15:f1:1a:13:bd:49:29:2c:1c:94:20:b5:65:e3:9a:d3:ab:
a7:71:a6:f3:80:23:50:fb:ef:12:2d:c2:09:f7:00:56:9a:ad:
87:b4:dc:85:18:f7:aa:0e:23:ee:12:26:94:14:25:c1:88:54:
6b:12:54:99:12:fc:d0:70:08:69:61:05:2f:67:86:15:6a:95:
5e:a7:7f:97:96:23:fe:9c:c5:88:82:cb:9d:66:54:36:0b:4e:
cc:6b:6c:3b:6c:c6:6c:52:31:65:ec:37:54:4b:e4:96:2e:63:
76:73:54:2c:d4:b5:74:f4:fe:b8:f6:de:a3:9d:51:73:8d:61:
85:b0:44:31:21:ab:c5:49:9b:3b:18:47:63:2c:31:b3:ec:a0:
24:d1:cf:2c:5f:fa:72:ba:1e:4d:bf:45:8a:c7:01:2c:79:41:
e6:5f:0a:20:b0:c2:7d:0a:9f:01:21:c7:f7:30:59:ec:f5:eb:
5c:16:2b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:35 2023 by rpki-client on console-fra.rpki-client.org