Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/43ecc8bc-88e8-41c5-b17f-b7ec33e58115.roa
File: 43ecc8bc-88e8-41c5-b17f-b7ec33e58115.roa (raw, json)
Hash identifier: YWeH9mLUN4axk5S97qqLmpa5/hGbG+Yn1ICQyUcigic=
Subject key identifier: 62:6D:A6:59:5C:0F:41:EE:69:2A:34:AC:CD:3D:3F:01:5C:D0:FB:82
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 06BC03C58E8527AAA47CB03158F8B930E25569C0
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/43ecc8bc-88e8-41c5-b17f-b7ec33e58115.roa
Signing time: Thu 09 Mar 2023 00:00:00 +0000
ROA not before: Thu 09 Mar 2023 00:00:00 +0000
ROA not after: Sun 12 Mar 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:bc:03:c5:8e:85:27:aa:a4:7c:b0:31:58:f8:b9:30:e2:55:69:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Mar 9 00:00:00 2023 GMT
Not After : Mar 12 23:59:59 2023 GMT
Subject: serialNumber=6977d9056493d62c54149f6ba30ac5d3a4b7b701a8baaafa8d4b068eb08d71c6, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:83:da:ce:63:95:50:56:d5:12:89:79:f7:
ee:40:b1:3c:cb:ea:91:e1:4b:a8:30:6d:f2:e4:8e:
63:4c:a0:4c:28:5a:aa:6e:12:15:98:7d:05:d1:d9:
8b:5c:4c:83:37:19:a2:39:d6:ea:70:1d:64:79:1c:
33:12:2c:a6:40:0f:8a:be:75:92:2c:14:f9:08:2c:
dc:a6:e9:42:c7:f4:a5:8d:35:2d:8b:eb:3e:1e:39:
16:7a:05:b0:f6:c2:97:f6:fb:0d:4f:7e:d6:a7:65:
4c:c8:16:6e:af:18:71:b5:94:41:46:69:c9:ac:89:
7b:99:2e:7e:8d:d2:89:60:6a:f3:11:35:de:f3:90:
74:72:6f:02:57:87:23:47:e1:b2:c7:ca:11:72:f8:
bf:af:c8:7c:dc:58:ab:27:be:68:63:a6:64:68:e5:
e1:19:d5:00:31:0f:e4:96:b7:7e:67:46:a1:4a:96:
ba:86:fb:05:e0:35:1c:c7:13:b5:b1:a5:24:b5:67:
32:ac:00:2d:31:56:b9:2b:da:e1:57:a5:36:42:88:
80:89:7c:ca:f9:1a:9a:e8:13:39:2a:9e:66:48:29:
9c:f1:55:3f:cb:b9:e5:9f:54:49:de:89:7f:b6:99:
a3:57:c3:9b:09:f8:9e:d0:33:ca:5d:82:5e:c0:a9:
6d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6D:A6:59:5C:0F:41:EE:69:2A:34:AC:CD:3D:3F:01:5C:D0:FB:82
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/43ecc8bc-88e8-41c5-b17f-b7ec33e58115.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
48:bf:1f:12:08:3e:e3:20:15:af:7e:99:01:bc:25:85:1e:91:
57:3b:a0:b6:dd:1f:1b:3d:78:60:86:02:01:39:f5:dc:66:e1:
af:a2:25:33:12:07:a4:af:b5:e0:74:34:0d:94:b4:a2:59:6b:
06:ef:cc:a1:eb:94:45:16:b4:a5:66:0b:70:c1:da:5c:33:d4:
48:88:48:70:8a:53:43:cc:65:3d:51:18:58:77:00:81:58:d3:
00:22:af:da:05:16:fd:08:81:4c:4d:39:28:33:82:24:72:80:
90:b2:1f:64:41:d8:1b:1b:0a:18:b3:d0:ce:5c:77:26:03:78:
18:20:41:f0:db:b7:ce:99:37:b6:85:75:89:59:d0:eb:46:37:
db:bc:56:53:af:d5:a7:59:6a:09:8d:e3:0d:94:96:9b:f0:08:
b9:49:f6:bf:44:79:92:33:1e:04:f9:e2:e0:54:44:59:c1:6c:
e4:9c:e3:a5:44:72:67:81:21:6e:53:37:1b:20:e6:7a:bd:b0:
bb:16:10:43:7e:80:a3:f8:a3:bc:f0:60:4f:d4:d7:cc:b5:d9:
d5:6d:9b:ff:cc:a0:ff:3f:8b:30:a5:c1:07:18:f2:bc:f6:92:
2e:96:a0:97:f6:c5:d8:47:54:c8:59:25:57:4f:b1:d1:be:32:
f8:48:d3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:36 2023 by rpki-client on console-fra.rpki-client.org