Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/707e8e23-eee3-4696-b3b9-faa227bc6d74.roa
File: 707e8e23-eee3-4696-b3b9-faa227bc6d74.roa (raw, json)
Hash identifier: dqAEaWztCxvOGZgdzAdrfjYDBeX5jo6qdED6Ad5eZ/E=
Subject key identifier: BC:2C:FE:6F:B8:B4:1E:8E:CC:D8:DA:76:BA:D9:2D:8D:62:B9:A2:AC
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 3F32488B8928FA20D456E4FFAB9B9919DF599967
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/707e8e23-eee3-4696-b3b9-faa227bc6d74.roa
Signing time: Mon 27 Feb 2023 00:00:00 +0000
ROA not before: Mon 27 Feb 2023 00:00:00 +0000
ROA not after: Thu 02 Mar 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:32:48:8b:89:28:fa:20:d4:56:e4:ff:ab:9b:99:19:df:59:99:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Feb 27 00:00:00 2023 GMT
Not After : Mar 2 23:59:59 2023 GMT
Subject: serialNumber=946759e09ba63f4be23a6c19906b69d028f93ce2b3786883e284e5357791afa1, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f3:3b:40:2c:f8:66:21:c1:7c:d1:dd:f0:fa:
bc:8e:19:36:0c:90:32:b2:20:da:88:fb:e3:ec:0e:
1e:9a:19:b9:82:ca:63:ef:df:7b:33:08:00:66:5c:
97:6e:a1:ee:d8:24:6a:5b:92:bc:c4:2d:76:4e:7e:
28:0a:21:95:fc:fa:a5:b8:64:6a:c9:ff:e3:cf:38:
79:93:ff:ea:0d:c4:91:75:e2:d6:b0:39:4e:50:73:
78:b4:c0:92:b4:ef:9b:f7:73:15:87:fb:56:2d:ed:
c1:03:20:fc:98:9e:aa:6d:b7:ec:9f:7e:a0:cf:16:
df:a6:1b:a5:7c:d4:c8:87:e4:62:ed:ec:a5:ed:73:
96:26:a6:b5:22:bb:83:9e:42:6c:a9:2a:9a:fd:bf:
4c:d1:45:bf:87:b5:2a:9b:ef:ca:62:5f:f7:b6:50:
4e:10:3f:65:ef:a0:d1:aa:a5:06:11:82:b3:e9:56:
46:85:33:3b:10:20:f5:ac:1c:90:51:00:38:ac:4b:
70:0d:92:26:9b:49:df:2e:ac:9b:a8:93:27:2c:92:
59:a0:44:36:21:84:8e:b4:73:6f:5b:b5:0d:1c:e5:
5c:7d:89:8e:d7:4e:07:9b:7b:3f:b5:22:4e:4c:34:
ac:45:94:86:32:e2:b8:4e:8b:48:77:b4:28:89:a4:
42:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2C:FE:6F:B8:B4:1E:8E:CC:D8:DA:76:BA:D9:2D:8D:62:B9:A2:AC
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/707e8e23-eee3-4696-b3b9-faa227bc6d74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
34:63:b2:5b:a8:49:cb:ac:3f:3d:ae:f3:90:28:59:45:32:9f:
93:61:76:85:4c:45:bd:38:f6:44:42:c1:3a:93:c5:02:42:15:
59:27:55:8a:03:9f:15:87:03:22:5d:58:15:33:8d:cd:da:e7:
c0:ae:65:c7:3d:9f:bf:7a:74:6e:da:84:54:7e:b2:eb:47:38:
e2:1a:a4:76:18:07:24:49:df:ce:b2:23:9c:09:08:d1:06:70:
2b:7e:82:b8:40:6a:9c:2e:a1:df:71:0f:4c:17:c3:61:93:b1:
14:fb:f5:d0:d7:8a:d9:18:7b:f2:91:37:56:32:5b:90:e4:c8:
3f:17:b1:07:07:94:cd:2c:fd:58:ec:04:25:08:8c:0f:34:43:
73:66:77:31:09:f4:bc:3e:20:27:34:ed:2b:06:4a:29:45:fd:
e3:ff:11:9f:4e:a9:d3:f4:b7:d3:f1:11:3d:a8:79:25:72:ac:
69:4b:fd:64:bd:91:22:1e:e7:b3:0b:d8:4b:52:85:1a:84:8d:
f2:e6:d1:ee:db:5d:1c:4a:de:9c:4f:81:f3:d8:34:f4:b7:34:
32:cf:89:ad:40:3c:56:61:5e:2a:76:80:1f:67:12:bb:fa:cd:
e0:cc:ba:30:58:93:06:5a:66:c6:b9:6f:de:09:b7:69:c0:4c:
cd:1c:c4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:47 2023 by rpki-client on console-fra.rpki-client.org