Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5b01ee0f-eea7-40f5-841a-12b2794e701b.roa
File: 5b01ee0f-eea7-40f5-841a-12b2794e701b.roa (raw, json)
Hash identifier: soOYu1uQwiquupBQzyZzq59gBTAC9bh2btzbkCMRlP4=
Subject key identifier: D3:BA:66:17:3E:17:B2:CF:58:95:9C:9B:B6:D9:E4:D6:BB:B2:DD:9B
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 284002FBBCD5C22B5E2841534D52C4116D2C0A47
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5b01ee0f-eea7-40f5-841a-12b2794e701b.roa
Signing time: Tue 08 Nov 2022 00:00:00 +0000
ROA not before: Tue 08 Nov 2022 00:00:00 +0000
ROA not after: Fri 11 Nov 2022 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:40:02:fb:bc:d5:c2:2b:5e:28:41:53:4d:52:c4:11:6d:2c:0a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Nov 8 00:00:00 2022 GMT
Not After : Nov 11 23:59:59 2022 GMT
Subject: serialNumber=cfe9cf25a5f1d2754cb91003a9566f1d680cadcc9810a153856ef63f28e4acd3, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:83:45:16:6d:65:48:6b:76:ff:39:d0:bf:8e:
15:f3:f6:ad:76:dc:31:1c:bd:0f:37:81:9b:10:6f:
61:5b:cb:65:0a:f8:70:43:ec:86:e8:cf:20:1f:25:
6b:f5:34:4a:ef:dd:41:d6:f1:17:74:f2:b3:6e:d0:
8d:36:33:d1:0e:3c:fd:2e:d0:af:8f:92:0c:b4:7f:
89:9c:77:a7:6a:11:a6:eb:57:19:35:32:30:8e:30:
e5:07:46:af:16:b2:29:45:bb:d4:a2:76:98:21:c1:
e6:43:db:d3:df:a7:7e:17:0d:53:4f:0c:e0:0c:7e:
4f:60:bc:d9:e1:f3:b0:61:a8:4e:8f:ed:e9:0f:af:
5d:fe:3e:25:d6:54:4c:16:12:70:6d:5b:57:18:3a:
2a:63:9d:00:2d:be:a8:0a:84:06:56:a0:a9:53:0b:
d4:b2:ff:f9:21:42:61:19:08:20:fd:0b:11:d0:90:
b8:65:50:7b:0f:f3:ad:ca:ae:df:47:ba:14:5c:37:
2d:35:8d:be:98:2c:3d:f6:09:77:b2:4f:de:ad:df:
6f:6b:75:07:a6:3c:7a:84:33:10:03:8e:69:e2:15:
a3:79:9d:a4:e1:30:01:16:30:52:94:63:ba:49:4b:
87:da:9e:0f:4a:a3:ef:e3:bd:63:af:b0:65:dc:c9:
87:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BA:66:17:3E:17:B2:CF:58:95:9C:9B:B6:D9:E4:D6:BB:B2:DD:9B
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/5b01ee0f-eea7-40f5-841a-12b2794e701b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
05:52:3f:57:09:0a:31:ce:44:e4:54:83:db:3a:b2:2d:fa:50:
59:3d:5b:c7:43:1e:8d:c3:91:59:22:06:7b:dc:b4:ad:25:64:
6c:12:4f:57:3b:78:80:06:77:ff:8f:5f:09:e2:d8:69:46:f1:
cf:ad:9a:6b:5e:c6:3c:0f:a7:c2:35:fa:60:d3:c1:ae:5b:f3:
96:4c:5b:ee:dd:c0:2c:01:9a:a3:48:5c:6d:43:07:20:d0:f2:
b7:0d:f1:9a:83:65:7c:07:a6:57:58:da:f4:f0:4f:70:8f:df:
8e:ac:a1:8b:d3:ee:99:1c:e4:0b:c1:ea:4b:e2:68:6c:28:58:
dc:11:a4:c4:e5:e4:38:b2:17:fe:65:37:70:4f:22:03:69:7f:
48:5d:09:56:0f:9d:c5:ce:71:77:55:2b:9c:18:e5:03:5a:7d:
54:1f:51:ad:28:56:44:7f:34:f2:38:65:24:91:71:5b:1a:61:
9c:a2:ca:29:b6:61:43:a9:b6:ce:00:95:72:3f:3a:ec:9a:bf:
01:7b:f7:5b:fc:6d:5d:11:b4:95:ac:6c:11:64:6d:5b:70:c8:
ba:d8:fb:c5:61:5c:8e:25:d3:29:a9:0a:26:4f:9a:5a:b5:bd:
cb:d7:13:c6:63:74:ad:cc:03:b0:4a:7c:bc:c6:30:66:23:dc:
e7:d0:30:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:42 2023 by rpki-client on console-ams.rpki-client.org