Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6d67d559-e200-495d-bcba-bade310b440a.roa
File: 6d67d559-e200-495d-bcba-bade310b440a.roa (raw, json)
Hash identifier: V+xGW0rNbLXRkpqUroIX96uzHGVxWz+FH/E0juza/Kc=
Subject key identifier: 33:0B:25:E8:4C:7A:40:E5:F5:F6:A3:6F:5D:10:58:42:4E:19:38:31
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 22912AC09A8DBD1FB4ACEA4EA81129A63B035E49
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6d67d559-e200-495d-bcba-bade310b440a.roa
Signing time: Thu 09 Mar 2023 00:00:00 +0000
ROA not before: Thu 09 Mar 2023 00:00:00 +0000
ROA not after: Sun 12 Mar 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:91:2a:c0:9a:8d:bd:1f:b4:ac:ea:4e:a8:11:29:a6:3b:03:5e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Mar 9 00:00:00 2023 GMT
Not After : Mar 12 23:59:59 2023 GMT
Subject: serialNumber=03daa1a915566f55cd46d88df0b7bdb1a21d074dbb9bb05802cab4d5dc36007a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a5:e9:10:3a:59:0b:4a:b0:86:20:ea:bd:3e:
e2:b8:4f:d8:95:0e:eb:e7:3b:23:37:57:25:8e:31:
73:e9:28:13:78:e4:a2:21:a8:ff:ec:31:9f:bf:9a:
15:71:20:01:78:b6:36:7e:29:7a:a7:ce:52:16:ce:
3f:6e:01:54:47:db:ad:a2:ff:6e:b4:95:86:06:9b:
37:39:e7:43:39:0c:37:73:ed:b9:be:e1:e7:2a:eb:
81:68:68:4c:72:27:48:de:7f:a0:c7:7f:02:0d:35:
6e:58:9a:23:f0:f4:8b:09:d1:06:65:54:1d:a8:a9:
07:e5:34:16:08:a1:23:93:59:02:a4:f3:27:f6:19:
35:2d:11:df:b6:ca:0a:e8:30:45:90:ad:3a:99:56:
68:41:50:bf:6d:9d:10:58:77:7e:2c:c0:f6:35:d4:
c1:62:22:02:8d:a1:b7:48:c2:ca:a6:a6:68:0d:00:
1f:7d:c5:d7:50:1b:19:d8:ec:9a:26:db:3f:33:05:
5e:8e:f0:31:ea:c3:9e:c6:67:08:44:66:c5:db:84:
c0:9a:d3:f6:1e:41:81:cd:aa:ba:e9:e0:6b:76:44:
c9:23:50:50:58:8b:5c:af:ce:d8:a9:aa:6c:b8:f2:
f6:b4:f0:25:be:e0:03:22:d6:54:97:dc:74:d8:23:
02:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0B:25:E8:4C:7A:40:E5:F5:F6:A3:6F:5D:10:58:42:4E:19:38:31
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6d67d559-e200-495d-bcba-bade310b440a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ce:f5:d4:fc:0a:4c:61:d0:9c:30:70:ca:6b:bf:1b:49:e2:
a4:35:5e:1b:b1:a1:10:a1:9d:67:6f:c7:88:82:99:0f:1e:46:
02:41:07:e8:e9:3f:ec:fb:37:55:53:5e:d3:84:d5:6a:d2:78:
cd:cc:c5:48:40:a0:50:fa:23:fc:56:0a:3c:d7:36:4a:4c:6d:
95:29:cd:f2:c3:41:04:74:ad:01:88:7c:09:26:d0:38:e0:9a:
97:6c:e2:69:63:d3:19:5f:8a:65:12:4d:dd:be:ff:a7:85:69:
3c:b1:97:35:e0:af:ba:e2:99:90:5c:55:91:5a:7d:54:c5:c6:
be:67:89:5d:a3:3c:80:a3:6b:e2:04:1a:68:75:2d:55:c8:3f:
97:d5:de:52:8d:29:19:f8:ea:c1:32:02:10:1d:93:67:f3:6e:
be:58:0c:f1:2d:9c:9d:11:86:89:e3:53:98:ba:bb:30:36:20:
76:28:cb:6c:39:a6:76:11:92:87:1d:0d:08:8e:e4:d5:5a:d8:
fd:5d:59:db:07:8e:23:d9:61:98:ec:7d:06:a8:4f:31:bd:4c:
6c:fc:2c:b4:ec:29:b4:70:d9:ec:0a:28:d2:93:0c:27:82:29:
1b:fb:c7:84:0f:3e:df:6a:f8:75:6b:7f:96:0f:d7:b2:f9:05:
c2:da:65:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:46 2023 by rpki-client on console-ams.rpki-client.org