Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/70e45e08-0f2a-4e0d-9e08-6c73dee6fd79.roa
File: 70e45e08-0f2a-4e0d-9e08-6c73dee6fd79.roa (raw, json)
Hash identifier: Sh3dPTGntlv6cP72V0qiuh3BYtIBBBEUMHRpKlfqR8E=
Subject key identifier: 56:C0:45:02:5B:4D:B2:BF:BC:CE:07:A2:04:83:DA:4A:00:61:CC:14
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 60A00E0B071C6FC7C20CE8095EA86ADC9C63AD55
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/70e45e08-0f2a-4e0d-9e08-6c73dee6fd79.roa
Signing time: Thu 08 Dec 2022 00:00:00 +0000
ROA not before: Thu 08 Dec 2022 00:00:00 +0000
ROA not after: Sun 11 Dec 2022 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:a0:0e:0b:07:1c:6f:c7:c2:0c:e8:09:5e:a8:6a:dc:9c:63:ad:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Dec 8 00:00:00 2022 GMT
Not After : Dec 11 23:59:59 2022 GMT
Subject: serialNumber=8801313e99bcd0987613a379e35bfd49b34015e9ca540c94ecc80ec24b7b003d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:90:5a:df:cd:0b:c9:2c:02:0a:0c:e0:e1:
a4:5c:11:34:f4:92:ef:50:ee:98:ea:1f:71:b1:1d:
7a:bd:46:3a:58:6d:7a:d2:45:20:4b:83:a8:35:7d:
32:db:a5:c3:07:55:7e:80:65:87:c2:0c:df:80:29:
ff:16:1d:ba:ea:d5:3b:bd:b0:14:77:6a:81:e3:49:
46:72:78:3f:ba:df:60:5d:4a:9d:3c:95:43:1e:45:
38:31:6e:51:d1:ad:fc:cf:45:d3:32:83:bb:35:64:
cb:bd:7c:bb:66:fd:63:79:15:52:b3:1d:b7:df:75:
76:0c:14:98:eb:96:c3:98:92:af:bd:34:30:ec:3c:
6c:01:80:f3:94:a8:af:26:15:e1:8b:b8:2d:70:50:
92:b7:2f:f1:59:af:1e:4f:3c:bb:50:c7:ed:48:82:
b9:b5:a0:c8:27:af:3d:b7:5c:a8:47:79:1a:4b:e1:
15:0b:c1:4f:60:33:a6:42:c6:32:52:6c:f2:21:ab:
4a:4f:bf:12:61:75:41:84:2a:9d:2f:f2:cc:19:24:
ae:b3:7d:03:11:d1:b4:68:15:4a:db:c6:26:e3:5d:
6e:00:52:7f:c8:be:81:2a:70:90:7b:58:3e:7f:db:
41:89:be:2e:9d:56:a2:80:26:aa:68:b3:c4:50:88:
e1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C0:45:02:5B:4D:B2:BF:BC:CE:07:A2:04:83:DA:4A:00:61:CC:14
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/70e45e08-0f2a-4e0d-9e08-6c73dee6fd79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:2c:72:88:ca:19:05:65:39:5b:69:3c:b7:b3:22:d6:ce:a5:
df:1d:72:c4:5b:f3:3b:33:83:11:82:b2:e0:53:8e:48:ad:53:
e2:9c:ac:f6:f9:0e:70:9c:62:3e:cc:68:50:b8:de:f4:52:c2:
78:fa:1a:9a:cf:9a:ca:71:fe:ff:ad:5e:e9:9b:6a:06:26:c6:
eb:bf:7a:2e:8b:c7:c0:8f:92:ce:2f:30:51:c4:5c:61:23:dd:
3a:ca:99:b9:34:29:4d:07:3d:0c:4d:c2:53:a0:0d:6e:3f:a6:
d1:db:cd:d4:c2:11:a4:6e:4c:c2:1b:35:a2:47:05:50:69:27:
49:5e:7a:14:76:f9:db:a4:26:eb:9f:80:b5:f3:ea:34:55:82:
91:bd:3f:6a:40:c6:de:33:4f:81:67:35:0a:29:b4:1a:a9:d3:
03:02:8a:1c:71:e2:ee:59:af:ba:1a:02:65:82:d0:0f:65:d3:
93:3f:81:b6:fd:9b:f7:be:c4:9a:3d:20:87:5f:82:4c:c0:b2:
3a:be:58:b5:34:99:4c:28:06:74:a9:9f:ea:34:a5:b3:d1:92:
c2:e1:56:18:fb:f7:23:91:81:e4:f1:8a:67:b5:93:94:13:37:
69:6d:d1:17:bd:91:9c:57:8a:7e:a0:96:ee:6b:4f:04:e8:b0:
5a:a5:bc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:47 2023 by rpki-client on console-ams.rpki-client.org