Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5690251a-e9bb-4d60-9206-9fcc2ded7c42.roa
File: 5690251a-e9bb-4d60-9206-9fcc2ded7c42.roa (raw, json)
Hash identifier: lhP3mxR3sjrA5PXDombEKa2bKyNjrEUB7h7FuLOevmQ=
Subject key identifier: A5:22:0A:15:FB:11:3A:18:20:03:71:0C:DC:3F:68:EC:62:AF:AD:BD
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 63B2BA52DB8697CBDB72AFA4CBB10FE57F362A1D
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5690251a-e9bb-4d60-9206-9fcc2ded7c42.roa
Signing time: Tue 04 Apr 2023 00:00:00 +0000
ROA not before: Tue 04 Apr 2023 00:00:00 +0000
ROA not after: Fri 07 Apr 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:b2:ba:52:db:86:97:cb:db:72:af:a4:cb:b1:0f:e5:7f:36:2a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Apr 4 00:00:00 2023 GMT
Not After : Apr 7 23:59:59 2023 GMT
Subject: serialNumber=a9a7cd161e435d515d8032fedb083e75498df76d4ec554c45cd738af95a7a91e, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4c:85:d6:ba:af:d0:ca:c1:8c:fb:58:07:87:
6b:c8:f0:d3:12:56:69:57:69:4b:6f:95:8b:96:e5:
61:62:f0:8a:72:9b:86:9b:e4:e5:2c:25:07:c4:9d:
b4:b5:0b:e4:7b:19:83:30:31:56:55:c5:2b:6c:18:
c2:c9:b9:0b:4c:ff:7e:fe:7f:a7:e4:57:0c:60:7e:
21:62:b5:cd:ea:b8:f8:71:2b:3b:fc:e9:8a:08:54:
35:2c:38:6a:15:66:54:95:e7:bd:10:cf:38:6e:35:
2e:8d:78:9b:5f:1b:ea:be:38:d7:4d:27:fb:68:f1:
8b:0c:5f:d5:cd:01:11:2e:6f:3f:83:7d:63:b4:26:
60:af:b0:32:d3:cb:22:ce:e2:c6:f6:02:90:1a:ba:
40:1e:cb:e7:bd:58:82:1f:17:5f:c3:2a:ca:68:7b:
9e:b9:dd:c0:74:f1:6f:20:db:b3:fa:fc:7f:77:4e:
88:e1:58:5a:23:27:af:ea:7e:3f:cc:75:63:04:7b:
11:d2:ad:58:57:b3:4b:12:00:0d:38:a9:45:0e:d8:
55:9c:8c:44:6c:fd:aa:3d:de:89:82:96:1c:37:6f:
52:c2:a3:2c:d8:9b:81:49:72:be:02:5c:8c:44:fa:
b0:eb:69:92:56:a6:b1:6a:6e:52:76:de:19:6e:58:
d0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:22:0A:15:FB:11:3A:18:20:03:71:0C:DC:3F:68:EC:62:AF:AD:BD
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5690251a-e9bb-4d60-9206-9fcc2ded7c42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:37:c4:63:96:c1:04:df:f1:23:78:b4:8b:52:4e:d9:83:8a:
5a:d7:13:9a:5f:de:b5:67:c4:f1:2e:38:76:c8:83:79:d7:f1:
ae:20:cd:97:ea:e9:42:39:ed:45:22:a2:d4:f6:af:1d:85:91:
f2:1c:a2:53:6c:fc:68:9f:0a:a3:86:6c:78:aa:4a:a8:90:19:
bc:f1:8c:7e:3f:18:30:29:67:c3:d6:91:39:99:77:37:6a:24:
a5:c5:76:6f:38:74:74:2e:b4:e6:a8:ad:fd:c8:a1:f0:b2:67:
60:ed:e4:ec:9d:59:fd:8e:a3:3e:92:e2:83:84:21:eb:be:d5:
c4:56:f9:79:4e:64:c4:80:0e:a0:45:9a:48:9c:32:a4:d4:0f:
95:92:18:af:d3:31:4b:16:a2:4b:f5:ce:89:24:55:e4:52:76:
fb:97:a8:62:a9:51:4f:76:67:01:a9:98:90:6a:f2:f2:df:48:
e8:ad:75:7f:c3:33:29:91:52:7c:b9:94:4f:aa:96:6d:c3:69:
ff:e2:e4:b7:1c:a2:6b:d0:64:48:28:2c:40:a9:63:a9:e8:49:
62:d1:cd:2e:cb:59:67:bb:83:c2:03:dd:2b:8a:46:cc:e6:c5:
53:f4:87:d1:5e:27:b6:81:9e:66:f0:e5:2e:c2:ec:06:25:cc:
33:3c:b3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:37 2023 by rpki-client on console-fra.rpki-client.org