Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3fa9855f-16f1-406e-a468-e020cd823183.roa
File: 3fa9855f-16f1-406e-a468-e020cd823183.roa (raw, json)
Hash identifier: tDN2MMqpcndcwB2HJNUNuXKFCFnECq/9PY26bqCjsSE=
Subject key identifier: DD:5A:F9:EA:67:B6:4D:48:62:9C:0C:C0:CC:38:5D:EC:D3:14:26:CD
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 4F14E578DFC2AEC4F8AC57854A4769CA8F8D6CB2
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3fa9855f-16f1-406e-a468-e020cd823183.roa
Signing time: Sun 05 Mar 2023 00:00:00 +0000
ROA not before: Sun 05 Mar 2023 00:00:00 +0000
ROA not after: Wed 08 Mar 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:14:e5:78:df:c2:ae:c4:f8:ac:57:85:4a:47:69:ca:8f:8d:6c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Mar 5 00:00:00 2023 GMT
Not After : Mar 8 23:59:59 2023 GMT
Subject: serialNumber=7f6075125a3a7e4abd74aa1136ab58e362169fa6266ddc723a8d23dedcd3a7bf, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:38:e7:cb:8a:0d:2c:1a:65:4d:3f:09:3f:
b2:ea:4d:00:14:ba:89:e7:12:4d:29:cc:54:c7:0a:
d1:6e:dc:96:99:5e:b1:e4:e1:7d:51:0b:98:c0:42:
b7:9c:e4:35:4b:0c:57:c8:fd:88:bc:b0:7e:85:1e:
44:33:26:f4:2f:ff:20:69:26:71:31:3f:1f:c7:30:
3f:38:e7:b8:dd:f5:13:ee:d2:b1:89:a2:fa:fe:fc:
43:d0:3b:23:ee:14:de:48:b0:10:38:d4:d2:03:47:
cc:8d:18:a5:87:d4:76:af:c9:22:f6:0a:11:da:be:
9d:ae:51:e8:23:b2:82:db:1d:e2:59:b6:a8:16:cc:
76:1b:bc:5d:74:57:b2:d1:22:8e:ac:7d:34:ff:26:
b9:fb:0e:e3:97:c9:28:3f:f9:0c:05:7b:c9:a4:47:
a8:2c:8e:34:fc:61:a4:a7:d3:81:6a:62:18:48:1c:
57:64:5b:b5:57:c9:fa:2a:41:61:ba:32:ae:3d:d7:
d6:51:76:56:23:a6:34:19:b4:e2:20:15:b1:62:bb:
1b:b0:69:35:9a:b5:f3:7a:37:30:b0:34:24:cc:e9:
76:f1:8d:19:58:6d:d7:31:7a:a1:3e:4a:f2:4f:e4:
a0:43:d1:3b:36:34:5f:8b:40:07:27:9f:73:d4:fd:
f5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5A:F9:EA:67:B6:4D:48:62:9C:0C:C0:CC:38:5D:EC:D3:14:26:CD
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3fa9855f-16f1-406e-a468-e020cd823183.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:c5:8d:9b:4e:4d:0e:e8:91:13:53:82:96:7d:b9:cd:f7:17:
9b:25:27:0c:e7:4f:26:0c:2a:e8:cb:84:b5:a8:77:03:3c:ae:
6e:ea:a7:85:dc:b7:bc:e5:5f:a6:ce:62:5a:c3:6f:dc:ba:9d:
30:87:2d:1b:52:5a:04:2c:01:2f:78:80:3a:15:16:e1:12:0d:
1e:c6:a3:8a:2f:58:55:ba:77:4b:05:31:0c:2e:95:25:1b:b8:
1e:6a:a3:04:07:6e:1e:87:06:12:b1:32:f8:d9:d9:51:05:44:
fa:e1:05:63:4e:ed:e7:54:d6:a4:ed:8a:b2:95:fa:3d:f0:ae:
ba:ff:b9:8c:a5:51:fc:bd:71:61:96:1e:c5:91:95:5b:c9:6a:
5a:14:ed:3d:33:ce:40:af:b1:90:8f:dd:d1:69:ca:74:7d:09:
a2:c5:a6:a5:13:45:ed:07:ba:5c:ce:3f:22:45:4a:c3:56:93:
80:ab:81:2e:d9:8a:6f:e7:e5:4b:01:17:57:be:4f:23:28:d6:
4b:db:f4:dc:ec:63:e2:eb:de:cb:70:05:29:72:e9:21:0e:fb:
42:59:52:12:50:45:fa:2d:72:9c:49:28:3e:ad:c9:22:96:d9:
32:68:c2:b5:b9:aa:f4:00:3b:28:14:a5:f3:84:a1:a2:9e:b6:
f9:6a:c2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:40 2023 by rpki-client on console-ams.rpki-client.org