Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/79c181bd-ad88-46bb-b734-512cb20ffdee.roa
File: 79c181bd-ad88-46bb-b734-512cb20ffdee.roa (raw, json)
Hash identifier: SyNszUx5AP9iM5OlqnA4AYlOKCOKgkRsD2QIp2OLLC4=
Subject key identifier: 43:02:06:0A:A1:6C:DB:20:03:74:2A:CA:47:BB:17:90:D3:54:EE:DE
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 6F5385028F1C80095786DEA06FD3B96D0F830F4A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/79c181bd-ad88-46bb-b734-512cb20ffdee.roa
Signing time: Fri 08 Jul 2022 00:00:00 +0000
ROA not before: Fri 08 Jul 2022 00:00:00 +0000
ROA not after: Mon 11 Jul 2022 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:53:85:02:8f:1c:80:09:57:86:de:a0:6f:d3:b9:6d:0f:83:0f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jul 8 00:00:00 2022 GMT
Not After : Jul 11 23:59:59 2022 GMT
Subject: serialNumber=d586b8683dfd4e804a24389082745714a48c2bed2c7d8baee8a489541b5d5919, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:30:fc:dc:14:66:0e:2c:63:57:25:35:b1:d1:
7a:d6:09:2d:2a:6b:20:03:97:e2:fc:50:0b:84:14:
76:d3:c3:e9:9b:17:90:55:fa:33:08:e3:4e:d5:16:
82:00:77:27:c2:3b:98:b5:ed:8f:97:7d:1f:0b:d6:
c9:06:f3:c3:f3:5b:6e:91:3d:0e:10:a0:41:ba:76:
7a:57:93:3a:7f:44:5f:74:1f:6a:2a:cd:24:5e:6e:
9c:40:43:48:b9:59:41:95:f0:ab:9c:f3:e7:c9:50:
41:9e:39:91:03:2e:3f:cf:3a:ef:10:dd:63:db:ec:
e8:37:fa:a3:6e:4d:5a:c0:7f:d9:5c:3d:62:aa:a3:
cf:6b:6f:a0:0a:49:de:a5:04:03:38:14:08:b6:9e:
4d:f3:a1:ef:c2:fa:d9:f1:23:97:14:90:8e:90:e1:
06:04:fd:0b:d0:20:0e:fe:e8:d6:5c:7d:8b:86:1d:
37:8e:bd:c5:5f:b9:16:2b:4f:18:68:bb:4e:7d:e7:
e8:bf:1b:9b:3c:2f:28:d9:b1:b9:c9:66:dd:dc:0f:
7a:b3:10:0e:d5:79:dd:da:13:b7:c5:63:93:42:f7:
dc:20:f3:d1:54:20:e1:02:de:ac:51:2c:d5:5a:25:
59:23:21:4c:23:34:99:80:94:93:3f:d4:d3:ce:fd:
5f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:02:06:0A:A1:6C:DB:20:03:74:2A:CA:47:BB:17:90:D3:54:EE:DE
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/79c181bd-ad88-46bb-b734-512cb20ffdee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:a1:f8:c1:fe:34:4d:75:a2:66:71:48:39:ba:6f:48:5c:d5:
a3:67:e8:ec:84:52:aa:24:fb:d5:6a:86:de:3c:23:79:87:bd:
ed:f5:9f:70:ee:ba:f2:8d:a0:b7:7e:31:ec:85:7a:92:d5:d8:
67:0b:2c:9f:d4:5b:a7:16:91:2c:06:ef:22:86:90:cb:d6:1d:
6a:c3:47:8b:b4:ea:47:42:cb:4c:40:ea:42:64:0f:f0:01:d2:
3b:7c:56:b8:54:e2:c5:d9:28:45:9d:b2:14:64:a2:94:37:56:
f1:2c:f2:a1:9d:37:19:f2:b2:6c:b1:16:1a:f5:96:2c:0b:1b:
71:0d:f0:de:91:23:41:ac:f9:b7:2e:5c:72:d2:6d:eb:4a:86:
a8:77:fc:b1:db:f8:83:5b:de:ca:92:1f:c9:70:02:e3:16:2a:
cd:8f:11:6b:af:6e:79:a8:e8:85:6b:ba:ac:dc:4c:74:e2:df:
d5:29:d0:fa:61:1f:e3:1e:36:b7:3e:ac:d6:af:c1:5b:7d:ed:
29:1d:9d:b7:53:2b:4b:04:f6:37:cc:3d:ee:1a:1a:03:b9:a4:
1e:8d:cf:39:ce:a2:59:17:f1:6d:a4:03:b3:d0:7f:70:dd:47:
36:f2:50:6b:99:40:61:cd:42:a3:d6:0a:b5:9f:fb:03:8b:0a:
94:b8:1d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:47 2023 by rpki-client on console-fra.rpki-client.org