Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/569d08cf-9548-4ba1-b075-3bb337ec3f6b.roa
File: 569d08cf-9548-4ba1-b075-3bb337ec3f6b.roa (raw, json)
Hash identifier: 90FhA1iogQz3JclOa8O+OCZFIma/Q3Kelrjk98/NB3g=
Subject key identifier: D1:37:D2:5B:CA:AC:48:FF:5A:83:3A:67:C5:21:DD:05:B4:84:EC:A9
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 14A31FE10D6A167FDB4592B3702FF4832DC794FC
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/569d08cf-9548-4ba1-b075-3bb337ec3f6b.roa
Signing time: Fri 03 Mar 2023 00:00:00 +0000
ROA not before: Fri 03 Mar 2023 00:00:00 +0000
ROA not after: Mon 06 Mar 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a3:1f:e1:0d:6a:16:7f:db:45:92:b3:70:2f:f4:83:2d:c7:94:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Mar 3 00:00:00 2023 GMT
Not After : Mar 6 23:59:59 2023 GMT
Subject: serialNumber=7a91fa92b9d9fc59d06daaccb3f1154093c536f616d2c0b4804e45097922cce9, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:ff:f8:7a:da:1c:86:88:94:0a:85:2e:fe:
32:e5:e5:f0:0f:44:6d:7e:f6:91:4b:3f:ca:60:91:
ea:83:12:63:02:7c:26:68:50:e3:64:46:c3:38:13:
44:2d:0f:b3:c6:d1:2a:19:e7:63:bf:69:ec:d0:af:
2a:82:a7:3a:e9:b6:91:34:d1:08:26:04:6e:f9:93:
c1:1d:d6:aa:12:51:48:34:8b:b3:f5:75:4a:26:c6:
9b:85:73:76:92:1a:2a:1b:0a:0e:bb:3e:b9:2f:78:
fc:8f:84:5e:09:56:36:26:13:99:94:a8:44:55:ce:
57:9a:a7:c2:4c:24:80:0e:c0:87:26:89:4c:63:aa:
5c:98:ca:cf:7c:a2:8a:9d:d1:26:9d:e4:67:93:17:
f5:dd:74:94:32:8e:37:a3:8c:5c:c5:5b:a2:43:cb:
dc:80:32:e2:33:bd:c4:d6:97:a2:eb:cb:31:0a:53:
a7:82:a0:5b:90:15:d8:50:3b:f7:d4:e9:f1:cc:e5:
10:39:53:7a:75:e3:58:fe:a0:29:59:a2:13:22:a1:
e3:c4:0a:ca:fa:f7:8c:5e:25:61:c2:8f:d5:d4:2a:
4d:c0:a3:00:8c:ea:4c:df:ca:bd:21:96:82:d2:49:
9e:95:4f:0e:9b:8e:db:f0:44:a0:bb:2d:62:fb:f7:
a1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:37:D2:5B:CA:AC:48:FF:5A:83:3A:67:C5:21:DD:05:B4:84:EC:A9
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/569d08cf-9548-4ba1-b075-3bb337ec3f6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
17:8c:61:bd:4d:e9:fc:53:89:b7:e3:23:61:59:e0:9a:55:5e:
38:d6:97:0e:58:35:79:b6:af:72:a4:e1:8d:e0:b8:f7:bf:20:
84:f5:6d:ac:64:f0:41:6b:5a:1f:c5:05:02:f0:68:01:62:ff:
ab:f1:06:92:08:bc:0d:35:3c:3f:3f:98:f2:58:2c:cb:43:c1:
8b:13:12:b2:29:0c:8c:0b:67:41:c6:15:9a:33:30:6a:c0:3d:
2f:db:65:9a:ea:6b:f6:cf:d4:af:45:e1:d0:3b:f4:92:1d:a4:
bf:62:21:bb:ba:c2:d0:a1:0a:97:d4:5b:dc:7a:fa:67:9a:33:
fe:86:d0:f0:c4:cf:b0:6b:8d:18:6f:c6:6d:7b:63:0f:81:52:
53:90:ba:be:b5:a1:f8:1e:1d:eb:66:a2:e2:cf:e4:81:7b:be:
80:be:52:db:b5:88:33:15:ed:7b:23:ca:61:29:68:cb:e7:f9:
29:a1:9a:e8:15:d9:d2:74:9d:8d:54:d6:93:8e:b0:da:cc:ac:
f0:f2:3b:99:a5:cd:fa:73:0f:4a:4b:18:0f:09:b1:6d:90:48:
0f:9e:4c:54:73:29:1c:71:21:05:fa:e8:a4:48:dd:6a:d6:97:
a6:17:a2:ac:91:d0:90:85:52:24:06:0e:a4:c9:99:1e:4b:70:
3f:a4:f2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:42 2023 by rpki-client on console-ams.rpki-client.org