Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6a16cc4a-e6fa-46fb-9523-f8e28b0fbfad.roa
File: 6a16cc4a-e6fa-46fb-9523-f8e28b0fbfad.roa (raw, json)
Hash identifier: wGcKm8R1ctXapclZMgNBR44q8nZGhWXDdekXnk9TjvA=
Subject key identifier: 50:EF:D9:5D:3B:AB:44:65:D5:9F:08:41:6E:E8:9F:AB:55:AF:19:D8
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 33703A8B88C8915694C5454BA5BEF9EC8D47CDF0
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6a16cc4a-e6fa-46fb-9523-f8e28b0fbfad.roa
Signing time: Thu 09 Mar 2023 00:00:00 +0000
ROA not before: Thu 09 Mar 2023 00:00:00 +0000
ROA not after: Sun 12 Mar 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:70:3a:8b:88:c8:91:56:94:c5:45:4b:a5:be:f9:ec:8d:47:cd:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Mar 9 00:00:00 2023 GMT
Not After : Mar 12 23:59:59 2023 GMT
Subject: serialNumber=5e6f434cc3250c25c9d5f00e027bb2ad61e883d920694eb29365876dab21fc83, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5c:a4:78:50:ea:45:69:7b:3e:1a:53:43:0d:
01:6c:6a:d6:11:76:1f:11:30:25:1b:54:f5:86:06:
25:c7:f8:75:ba:85:c2:d2:91:6b:99:e2:63:b8:54:
b7:63:28:05:65:88:0e:e3:e9:3f:f9:fe:7a:12:dc:
99:9d:65:53:92:4c:b1:b1:7b:43:74:54:ab:e5:c8:
dc:08:db:7a:ff:ab:10:af:74:26:19:8e:e8:71:6a:
a7:c3:bf:b9:01:04:2f:46:b0:ca:1a:b2:ba:89:71:
b5:a2:58:80:5a:53:2e:e8:95:a3:96:53:1a:1e:38:
c4:0b:b6:09:4c:a6:97:d7:5e:fd:cb:54:c5:c5:9c:
9b:c9:68:85:a4:ea:33:ee:2d:77:a2:ce:aa:7c:02:
d9:17:7a:ff:e0:24:8f:f0:82:94:2b:1f:08:24:12:
d1:22:01:e1:49:01:90:73:e4:c9:b7:db:6a:d0:67:
83:58:5d:19:29:a2:8e:f6:3b:27:a8:9c:f0:1b:07:
cd:bf:a5:da:1e:37:41:ee:e5:f6:0b:fc:f0:be:b3:
f7:8f:90:d2:40:c1:d4:70:11:3c:27:39:29:ef:a9:
4f:41:26:0c:1c:4b:07:9f:f1:68:d8:3a:7d:a4:ef:
08:b7:56:26:e0:03:67:a2:1d:7d:fd:f9:a3:67:67:
fb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EF:D9:5D:3B:AB:44:65:D5:9F:08:41:6E:E8:9F:AB:55:AF:19:D8
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6a16cc4a-e6fa-46fb-9523-f8e28b0fbfad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:8f:f5:b4:d6:2e:f1:1a:50:40:52:ba:2f:59:5f:0c:16:80:
87:c5:ac:44:ea:43:ed:09:cc:55:b5:20:1d:57:f4:4d:aa:17:
30:04:20:f8:44:24:b3:54:90:ca:4c:4d:1a:76:af:f6:53:ac:
e6:97:d1:0d:aa:06:c7:45:ed:5c:e7:9f:a8:2b:a9:d6:7c:a4:
b2:6b:67:ec:94:94:24:44:85:60:7f:77:0a:cc:9c:eb:ff:3d:
90:fd:d4:9c:99:0f:1d:6e:28:ef:d6:13:9a:e7:d0:a0:18:2e:
8a:cf:5c:18:e7:57:b5:d5:70:66:aa:2d:47:17:ea:b8:fa:85:
ec:8a:a5:f6:98:34:0e:ef:79:cf:73:39:80:e6:c7:6b:1f:c0:
38:3e:79:e8:39:66:bb:a5:e3:61:d0:8c:d0:0e:eb:9e:41:9e:
47:05:c0:44:a5:a1:41:1b:c7:66:44:d8:e9:93:15:86:47:46:
fb:9c:d8:a2:d2:8e:c9:1a:6a:0a:32:3b:f0:99:66:c9:e8:6c:
87:8d:0a:66:a9:27:cc:86:f1:e9:eb:39:b9:9c:83:2d:6e:77:
81:f0:31:d2:c0:f5:ec:b2:5b:7d:3a:f5:74:0e:f1:37:93:ba:
00:2c:90:86:a7:02:6b:e0:bd:66:dd:ee:4d:8b:96:a1:f6:90:
b7:14:e2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:46 2023 by rpki-client on console-fra.rpki-client.org