Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7a88a741-ac48-49f4-8596-8302d18eaf14.roa
File: 7a88a741-ac48-49f4-8596-8302d18eaf14.roa (raw, json)
Hash identifier: +fj303BH6hOEagB8KHvLdwXSgcYTf24Jab5KqpCW360=
Subject key identifier: 20:10:C0:60:68:97:4B:E0:08:18:71:80:BA:9E:78:D3:B1:92:32:37
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 28A708564BAA66DDDBE6746C167260A68007D99A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7a88a741-ac48-49f4-8596-8302d18eaf14.roa
Signing time: Sun 09 Apr 2023 00:00:00 +0000
ROA not before: Sun 09 Apr 2023 00:00:00 +0000
ROA not after: Wed 12 Apr 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:a7:08:56:4b:aa:66:dd:db:e6:74:6c:16:72:60:a6:80:07:d9:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Apr 9 00:00:00 2023 GMT
Not After : Apr 12 23:59:59 2023 GMT
Subject: serialNumber=9f496893719ff21b8af90b69c396bc3f7cc001b687b020a28731130fb1ec4cf3, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:ac:01:89:90:12:43:86:2d:99:05:72:cc:
cc:92:a0:3a:4f:b1:ce:bf:66:a1:0e:66:7b:b8:92:
88:d4:5d:ae:d7:f3:dd:4a:99:61:56:7e:02:87:bf:
eb:05:0c:0f:3e:22:3f:23:79:a1:a5:0a:4d:2f:80:
1d:b4:f2:dd:ba:1a:a1:63:33:d2:bd:87:eb:81:a9:
0d:fc:0d:c7:11:c0:4b:0a:f6:4d:f9:b1:d3:c8:a6:
7f:e1:ce:57:ec:1e:6d:a8:2c:20:18:f2:b5:47:cb:
c1:09:4c:9d:bf:43:d3:cb:15:24:28:75:2f:06:7d:
77:15:02:cd:cf:71:f1:45:35:99:f1:10:98:4d:d3:
1c:7d:a8:b0:c3:05:5a:6d:0e:3e:5e:54:34:ff:02:
af:c1:fa:99:e1:d1:65:ba:31:28:5a:6c:21:8b:ca:
4b:03:77:7f:14:e8:bf:78:2c:43:83:de:d6:5c:c3:
51:7b:d2:7a:59:ee:85:66:8c:b5:ea:27:c3:2b:35:
5b:e1:23:10:03:a6:9c:b6:48:14:ef:e0:3a:62:0f:
b3:85:55:d2:cd:3e:57:d7:35:40:34:3a:84:6b:7c:
e2:bd:cc:8c:6c:54:d9:eb:cd:03:2c:85:9f:ef:46:
23:e6:7b:b0:3a:13:6a:71:03:e5:8c:5c:f2:42:b7:
ab:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:10:C0:60:68:97:4B:E0:08:18:71:80:BA:9E:78:D3:B1:92:32:37
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/7a88a741-ac48-49f4-8596-8302d18eaf14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
07:52:02:cf:af:50:9d:c1:04:d1:91:c1:6f:9e:3e:87:d9:c5:
fd:00:9f:c1:ff:50:33:eb:ab:13:3d:3a:11:ae:b3:75:75:78:
1e:bd:2d:76:20:20:64:dd:51:a9:49:ba:5f:aa:77:c5:d9:d4:
6f:dc:dc:74:b3:2b:14:9e:2d:8b:c0:d3:5f:69:c5:e2:92:62:
33:10:bf:01:e6:3f:09:49:eb:f3:c6:42:0a:bf:cd:85:c3:ac:
9e:9f:ea:5f:2e:b6:54:5c:92:3b:10:a8:72:cb:37:3b:ea:01:
22:10:d5:86:3a:5b:30:0e:65:cb:34:17:d3:13:ef:d1:2e:46:
e8:e1:08:33:7f:65:2e:91:3b:68:93:d7:0b:39:b9:6d:00:ba:
08:58:e5:4e:e7:52:6c:c2:0b:22:d1:7e:2d:2d:85:42:52:7a:
f3:45:16:23:b1:57:aa:1c:b2:8d:ac:e0:02:04:44:43:2f:44:
79:12:98:b9:d7:2e:7c:df:5c:f4:18:8d:c2:18:05:e4:eb:f6:
4e:e3:51:e5:a4:c0:c1:97:41:dd:cc:8c:cf:5a:b4:ac:0f:1f:
31:00:b8:12:19:7a:04:61:18:48:1b:18:3b:04:a8:e0:fa:0d:
f9:e3:e7:88:40:7c:d5:49:50:07:44:88:3f:41:74:d6:6b:89:
76:71:d6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:47 2023 by rpki-client on console-fra.rpki-client.org