Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3ff1816a-dc04-4f56-be2b-eb9da764725b.roa
File: 3ff1816a-dc04-4f56-be2b-eb9da764725b.roa (raw, json)
Hash identifier: QlJExN3MAZNHc46kutEip0bK/iwcZkG5J3qAjc1S/5o=
Subject key identifier: 95:D0:02:EC:5C:39:C9:DD:0F:93:A2:13:26:B7:85:E1:4A:B4:76:B4
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 0CCD68FFA4BD09638FE053DD0A21D50A41C8E611
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3ff1816a-dc04-4f56-be2b-eb9da764725b.roa
Signing time: Sat 03 Dec 2022 00:00:00 +0000
ROA not before: Sat 03 Dec 2022 00:00:00 +0000
ROA not after: Tue 06 Dec 2022 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:cd:68:ff:a4:bd:09:63:8f:e0:53:dd:0a:21:d5:0a:41:c8:e6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Dec 3 00:00:00 2022 GMT
Not After : Dec 6 23:59:59 2022 GMT
Subject: serialNumber=516ea5d6f9af2eed4d55fb5e2389c1fe5c92a242cbfc94a6b42f74cef4931aff, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:cf:27:9a:db:72:a4:ee:87:9c:5d:e1:2e:
c1:6a:20:9e:a4:46:23:33:4a:51:12:ab:ff:6b:17:
c8:fb:1b:a5:01:17:00:91:3f:e3:55:bb:d8:48:1a:
8b:c2:69:40:f8:e0:17:bb:b7:c8:3d:40:34:f3:37:
de:b5:a0:2d:df:c6:f9:ad:84:da:41:b5:12:60:9e:
6f:0d:eb:70:71:2e:60:70:fe:c3:f6:89:6c:b7:8c:
d8:5e:66:1b:b5:b6:72:af:c9:45:e0:c4:d6:90:69:
cd:fb:55:42:80:63:13:2c:60:aa:3c:41:b9:ef:40:
2a:c5:bb:3a:0a:ff:b5:22:da:77:05:bf:33:d6:a2:
3f:65:1f:b8:0c:b6:22:8a:83:85:7f:1c:e2:c5:c3:
e4:f5:9a:d2:a3:79:e8:75:9b:ba:9e:d1:8b:f1:e9:
e8:21:d7:9d:3e:f5:46:82:7e:ba:e2:2d:b8:ea:45:
b4:8b:1c:cd:a3:43:68:c2:b1:ae:3b:19:b2:01:aa:
58:10:01:82:1c:1d:80:b6:b9:8d:6c:a5:a8:61:c7:
50:24:99:c7:c1:72:4e:b9:c7:43:ba:a5:9a:16:f8:
e2:9f:3e:46:b3:a4:ea:fc:5e:a4:e3:0e:65:29:20:
2f:3a:e3:b1:09:2a:5c:0c:0e:1d:9f:dc:10:9d:e8:
0d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D0:02:EC:5C:39:C9:DD:0F:93:A2:13:26:B7:85:E1:4A:B4:76:B4
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/3ff1816a-dc04-4f56-be2b-eb9da764725b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:63:c3:7a:b2:ac:75:a6:4c:59:cb:19:fc:00:26:a3:ac:a7:
b2:e6:a1:3f:f2:f3:48:3f:db:ab:6f:10:d2:91:ff:dc:72:0a:
31:10:b8:fb:30:d3:e7:f8:f1:39:a0:c9:a2:65:e7:72:2d:b8:
6b:08:a3:ff:10:bd:1e:ad:55:cd:45:1f:80:9e:28:e7:4e:3b:
67:17:40:02:37:12:99:1e:4c:ed:ab:c9:ed:87:10:5b:ac:26:
63:35:b2:a3:5b:63:3e:97:b7:28:a7:af:1b:f0:ed:40:89:b4:
51:f8:a3:5c:eb:9f:9b:fc:2e:eb:79:a1:0b:b7:b4:6f:b5:cb:
40:5d:12:b7:5b:db:e8:82:ea:2e:27:47:3e:20:9e:97:17:59:
89:fb:02:68:1d:49:6c:a7:82:e1:b4:3b:a3:16:30:f2:29:19:
e3:d7:0b:45:92:c7:51:3b:bf:20:dd:e4:21:b5:8c:9e:fc:d7:
35:00:e9:2b:31:56:43:be:7e:07:78:f1:99:b6:6c:14:d2:89:
81:9b:b9:10:ca:da:75:55:3c:c9:d1:67:5e:19:1c:29:15:e4:
16:04:e2:4f:52:c7:7e:31:19:6d:92:08:a0:5a:f6:35:74:82:
e3:af:9e:3f:21:00:9a:38:44:dd:d2:44:98:4a:61:01:0b:09:
59:ec:e7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:40 2023 by rpki-client on console-ams.rpki-client.org