Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/80c05301-6095-4f93-8833-6bb34b8c8e5b.roa
File: 80c05301-6095-4f93-8833-6bb34b8c8e5b.roa (raw, json)
Hash identifier: pCKdUqw7fYIMY6WccbPE01UXP+ALEx7OUGF7qTpSD5Y=
Subject key identifier: 58:45:99:2C:3C:2F:30:57:05:66:2B:00:8A:94:5F:1E:C4:8A:DD:10
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 0B6B41B8A08C23EE989D37349A012AE62A77B73E
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/80c05301-6095-4f93-8833-6bb34b8c8e5b.roa
Signing time: Mon 01 Aug 2022 00:00:00 +0000
ROA not before: Mon 01 Aug 2022 00:00:00 +0000
ROA not after: Thu 04 Aug 2022 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:6b:41:b8:a0:8c:23:ee:98:9d:37:34:9a:01:2a:e6:2a:77:b7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Aug 1 00:00:00 2022 GMT
Not After : Aug 4 23:59:59 2022 GMT
Subject: serialNumber=c62dd983dab9ae719162af751fefb9d1002d8bd68c03b93185929ecbd08c814a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:ed:45:a0:ee:e8:9e:d2:c2:2b:af:42:db:
b4:33:ea:8f:79:45:1e:5d:01:4b:78:50:cc:fa:76:
1b:63:88:26:98:ae:d0:2a:5c:74:db:bf:1d:77:cc:
59:f4:ba:33:6e:b3:09:ef:3a:fa:86:41:b1:3a:c4:
08:8d:18:25:55:69:c1:63:16:d7:2c:02:fa:dc:9d:
16:08:f1:b5:e1:89:d7:d4:b0:96:17:aa:be:c4:84:
fe:9e:39:12:0f:6d:b9:6b:92:e4:ca:52:13:88:8e:
2c:57:2a:b0:e4:2a:e0:0d:35:ea:2b:2a:5f:12:9a:
3e:94:5f:05:ef:74:8c:f2:e8:29:fd:8c:99:93:71:
bc:74:2d:dd:21:31:7c:26:82:bd:dd:08:ce:9b:bc:
8a:0b:a6:01:34:04:e1:fc:01:88:8c:ea:42:48:0e:
84:94:45:4c:09:f0:49:08:78:b2:4b:82:52:c3:38:
74:1b:b0:44:1a:75:8f:8d:45:13:28:2e:dd:69:23:
90:10:9b:b1:54:a6:0f:fd:70:c7:6b:2a:66:4e:c1:
4e:aa:4b:57:60:48:dd:3f:09:86:45:73:41:ff:f5:
15:2d:43:6a:93:09:49:71:ce:c1:e8:40:fe:ab:26:
db:78:03:45:b9:2f:bb:2e:48:33:77:f1:84:3c:49:
b8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:45:99:2C:3C:2F:30:57:05:66:2B:00:8A:94:5F:1E:C4:8A:DD:10
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/80c05301-6095-4f93-8833-6bb34b8c8e5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:87:8d:07:0b:2b:1d:49:bd:ef:2b:32:07:83:4c:24:09:9d:
a9:a9:b2:43:a3:ce:ac:55:69:f2:be:5b:df:f0:5b:69:f0:a0:
69:db:9c:60:8a:c2:f8:4a:a4:4a:95:7b:81:ac:a3:90:76:c6:
01:29:33:70:f1:30:fe:8e:1a:66:ae:e7:03:78:45:82:21:bf:
96:96:4f:0b:33:90:ba:8f:a1:8e:76:f8:07:3f:cf:56:c8:10:
77:57:6e:86:d4:cb:fc:58:f0:10:98:0b:34:5f:19:85:ef:0e:
aa:3f:59:e6:de:3f:f8:80:51:21:fc:24:a7:c2:80:1c:23:77:
ca:2d:9d:e1:f8:ac:d4:09:17:c9:66:f3:34:01:ec:f1:4e:6f:
48:ce:eb:8a:6f:90:7c:96:0d:f4:aa:2d:9c:48:d2:10:d2:b5:
bb:0a:a8:8f:80:6a:e7:dd:ff:57:39:63:15:36:68:22:ec:16:
de:fe:fa:84:bb:9a:15:94:59:bf:ea:a3:2b:26:19:54:c9:e6:
39:79:cb:2a:03:b8:9b:e4:74:67:36:e5:00:44:89:7a:1c:6b:
09:e0:03:c1:fc:92:70:11:3d:08:08:29:08:75:23:db:00:f6:
12:be:8b:41:28:c4:41:f3:26:c8:72:48:27:49:9d:ff:e3:26:
83:92:e5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:47 2023 by rpki-client on console-fra.rpki-client.org