Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7a46d148-b6cc-4ef9-821b-96e16f5681ff.roa
File: 7a46d148-b6cc-4ef9-821b-96e16f5681ff.roa (raw, json)
Hash identifier: 3/vOa9JzJxA1kzvPV51BlMP6G5WzbwqjoPxTaOussOc=
Subject key identifier: DC:35:B7:F9:6E:CC:0B:92:7B:6B:58:88:2B:BA:B7:86:F6:8D:E7:4E
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 2E8F486EC33435F863177F31C6C1150607692C97
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7a46d148-b6cc-4ef9-821b-96e16f5681ff.roa
Signing time: Tue 06 Jun 2023 00:00:00 +0000
ROA not before: Tue 06 Jun 2023 00:00:00 +0000
ROA not after: Fri 09 Jun 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:8f:48:6e:c3:34:35:f8:63:17:7f:31:c6:c1:15:06:07:69:2c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jun 6 00:00:00 2023 GMT
Not After : Jun 9 23:59:59 2023 GMT
Subject: serialNumber=7f43111da1a6eb81e3217c0f5f0b6244f8095910a9e8b7cf16f5d7c953834019, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f6:80:19:89:cd:95:95:dc:8b:1d:3a:e2:28:
ae:28:65:b6:21:19:c3:d3:ba:6e:9e:e6:d2:08:3f:
be:89:84:44:76:3b:48:59:42:48:ae:9b:97:93:d6:
42:33:2d:cf:31:90:58:ce:a7:a3:1e:fb:ad:2c:bd:
ad:5e:d1:85:58:6b:a1:63:8d:4c:39:45:e1:88:b7:
9f:9e:03:03:ff:0f:c9:a2:c0:0b:67:8e:8e:c5:d0:
7b:07:42:20:a8:c3:cd:94:84:13:5d:7e:49:6d:1e:
b4:20:81:3d:13:ba:a4:6e:57:b5:d6:af:8e:3d:42:
24:52:b9:2c:81:4f:85:9e:5f:dc:4b:27:49:3f:2a:
cf:21:89:9e:1f:61:f0:ca:4a:83:e3:91:78:df:03:
a4:83:91:30:bc:98:87:06:9c:fd:36:be:88:97:ff:
92:ff:99:49:86:b5:73:7e:ad:0a:25:6d:85:bd:4f:
39:87:20:36:f4:6d:32:59:1e:72:02:42:8d:d0:b0:
a1:4b:b6:b1:ae:24:a4:cd:b0:8d:3e:ab:31:be:27:
9d:cc:ce:3c:e7:05:ce:f5:0d:09:a9:7a:7e:38:ac:
19:d4:9b:49:7b:8a:94:ad:b4:66:e5:26:62:20:e9:
41:bd:d9:3d:26:5b:84:28:35:97:8d:14:a6:ab:3d:
92:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:35:B7:F9:6E:CC:0B:92:7B:6B:58:88:2B:BA:B7:86:F6:8D:E7:4E
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7a46d148-b6cc-4ef9-821b-96e16f5681ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:43:3d:b0:a6:e9:71:42:2e:38:d2:d6:4b:d5:89:33:d2:87:
6d:85:1a:60:af:77:78:4c:b0:f1:b5:75:c4:2a:4e:5e:43:cf:
db:9a:d5:d6:84:5d:0f:8d:74:c8:0f:b0:57:90:0b:10:32:77:
36:18:d1:14:ed:f2:26:e4:61:c8:31:43:27:81:f8:81:a6:51:
90:c2:ba:e2:90:21:86:3c:29:aa:c6:78:d1:1a:7f:6b:e8:57:
e3:f7:67:d1:b4:b9:e9:8a:70:4c:59:d6:56:fe:8c:75:d1:72:
73:4e:86:bf:6f:61:09:a4:b9:89:c4:35:2f:49:49:41:47:a9:
f8:16:bc:61:d1:61:2e:a1:8d:2d:4d:1e:db:ce:76:02:b9:94:
8f:db:30:b8:cd:e2:b5:0d:e6:7d:9f:69:27:dc:62:06:8b:32:
bf:43:43:84:7f:9a:4a:d7:80:6f:72:a2:19:86:f0:aa:a0:f5:
00:b8:dd:5e:20:d4:06:e2:e7:85:fc:81:d6:39:5a:a0:f6:27:
3c:cd:32:19:44:4d:06:b5:82:cf:68:8e:d0:69:b8:7c:40:bd:
9c:59:2b:35:68:cd:50:9f:1a:04:cd:f1:da:17:76:66:08:b4:
b2:0e:f4:6f:34:23:0d:e3:54:aa:14:4b:db:34:fd:0d:ad:7f:
17:36:06:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:47 2023 by rpki-client on console-fra.rpki-client.org