Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/842597d3-dc67-4aab-a715-a9749e40ef7e.roa
File: 842597d3-dc67-4aab-a715-a9749e40ef7e.roa (raw, json)
Hash identifier: Rj6ltgJHGaOiLbtO1uYUe+QL8MgCs5YzS9d4qvGbTdA=
Subject key identifier: E1:27:04:8A:91:FD:8F:D8:FD:E4:5B:88:4E:AD:69:FD:07:FF:7E:F4
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 1A894C3D1E7878268A3AECA2154262B2D383D83C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/842597d3-dc67-4aab-a715-a9749e40ef7e.roa
Signing time: Sat 04 Mar 2023 00:00:00 +0000
ROA not before: Sat 04 Mar 2023 00:00:00 +0000
ROA not after: Tue 07 Mar 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:89:4c:3d:1e:78:78:26:8a:3a:ec:a2:15:42:62:b2:d3:83:d8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Mar 4 00:00:00 2023 GMT
Not After : Mar 7 23:59:59 2023 GMT
Subject: serialNumber=1fa48d85859b89e4a7c10e2cca99d8183fb0dc8ca1ba44254e7d244e7dd2cc6d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:5e:a1:d1:58:0a:1b:ef:7b:56:af:e5:c1:
78:64:66:28:f5:ae:0f:87:84:fc:76:70:d7:b5:13:
38:71:17:2b:46:61:93:e5:9f:b3:03:7f:82:a6:c6:
9f:3c:0e:fe:15:23:bb:ef:fa:8b:fe:a0:ed:9c:2a:
74:fa:e9:48:4a:58:66:c6:47:ce:65:1d:e8:fe:2c:
ed:68:f0:28:28:0f:13:05:94:21:38:37:50:bd:ae:
b6:f4:a6:f6:2e:29:c4:c0:b9:c4:1b:49:a5:71:67:
9e:aa:54:22:13:d2:45:31:19:f8:34:06:b3:24:ce:
dd:93:cc:b6:93:68:1e:92:e8:9f:72:d0:ee:80:e7:
c6:cc:35:2f:05:0e:33:dd:5e:e2:ca:4c:f2:85:32:
10:f6:fe:1b:15:fa:c4:7c:9b:eb:3b:35:ef:33:6f:
47:4f:7f:4c:3b:3f:52:48:24:c3:7b:f0:98:7e:79:
97:f4:fd:cb:01:3e:08:51:44:5d:f4:a4:3e:41:0c:
26:b1:6a:84:38:eb:cd:5f:54:d8:bd:76:13:32:dd:
f7:86:f4:e4:ff:b0:d5:a2:6b:86:47:f7:44:24:20:
7e:cf:88:d6:4c:fb:34:f0:6d:ea:2f:69:b8:9d:52:
bf:aa:52:aa:eb:e8:cf:5b:09:68:5a:34:2a:7b:7f:
a3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:27:04:8A:91:FD:8F:D8:FD:E4:5B:88:4E:AD:69:FD:07:FF:7E:F4
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/842597d3-dc67-4aab-a715-a9749e40ef7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
18:9f:e3:e5:a7:5f:45:bc:5d:27:4b:a9:cc:05:cb:de:0e:4b:
69:6b:a4:4c:8d:d2:51:63:84:df:12:a7:d8:4d:04:a5:b5:b2:
c3:f6:1a:37:76:2c:ec:76:70:8c:16:89:8e:5d:dc:31:84:98:
a1:7b:25:c8:81:2e:ec:0a:79:72:ed:a1:3c:81:81:a9:34:4d:
58:2f:6f:25:f5:3c:37:cb:03:5c:e4:55:8c:0a:79:a0:9e:9d:
26:99:77:54:41:0f:66:2e:21:09:38:37:56:67:ba:cb:f6:94:
2d:1e:1b:17:0a:52:86:8a:cc:cb:6d:87:ca:73:d7:4d:73:e8:
37:d0:6e:21:36:39:3d:a0:67:e8:4b:d2:32:e3:d8:ff:0b:e2:
83:b0:6d:36:2e:38:91:cf:4e:db:03:07:d8:86:79:d0:79:50:
35:2b:ac:49:65:0a:c5:24:93:53:16:aa:a6:5b:62:2f:1b:6f:
c4:1b:b5:0f:3d:75:70:0c:9f:22:6c:a3:1e:0e:a2:c0:65:1d:
69:90:a4:8c:3d:8e:0f:36:26:68:17:3f:e8:10:4e:ec:21:ad:
10:55:a0:df:0e:32:b0:21:3b:fd:66:ca:8b:aa:86:5f:54:ee:
22:83:73:49:f5:9d:08:71:e6:a5:0d:ce:06:6a:c1:85:48:a0:
6f:eb:4e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:47 2023 by rpki-client on console-ams.rpki-client.org