Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/84bc47e8-51f2-4b41-91d4-02ef762d30ff.roa
File: 84bc47e8-51f2-4b41-91d4-02ef762d30ff.roa (raw, json)
Hash identifier: f+0qJmT6Ch3HGLhTlK6IHojtWklAmX8JV1pmczPKc5Q=
Subject key identifier: 5C:E1:CD:7B:35:B3:E5:6F:D3:97:8A:FD:A6:70:EF:52:8F:60:DB:4A
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 1B85516581F462156FA9BE3A8BCAA7E3D38AA06D
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/84bc47e8-51f2-4b41-91d4-02ef762d30ff.roa
Signing time: Mon 05 Jun 2023 00:00:00 +0000
ROA not before: Mon 05 Jun 2023 00:00:00 +0000
ROA not after: Thu 08 Jun 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:85:51:65:81:f4:62:15:6f:a9:be:3a:8b:ca:a7:e3:d3:8a:a0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jun 5 00:00:00 2023 GMT
Not After : Jun 8 23:59:59 2023 GMT
Subject: serialNumber=9c34bdb14cee9c15004de91438ff0bc3cedaa763852922cd945d554cf711357d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:79:de:83:d0:d3:18:ec:26:0c:59:37:83:
8c:c2:6f:88:ad:d4:b0:53:c2:c1:fe:b9:d7:e7:c2:
ab:3b:80:a7:c8:7b:d7:23:45:a7:45:09:b1:88:00:
6e:43:1a:15:d5:97:99:73:6a:9a:0c:d6:59:5a:e7:
14:36:fb:b5:bf:ec:b3:e5:4c:97:85:b5:72:ef:52:
48:38:34:01:f7:1a:95:7c:16:d4:2f:65:4d:74:bb:
71:89:f6:9b:62:79:19:34:c5:ea:45:1b:43:f3:ce:
e2:04:6b:8d:36:ee:fd:91:45:db:bf:19:7d:d0:2a:
a7:d9:c5:21:a3:99:dd:b8:7d:38:91:bf:59:3b:ad:
16:a1:ff:3d:ea:11:20:b1:72:47:2c:de:4b:d1:6b:
65:44:3e:a9:34:04:66:bd:87:4e:7a:05:31:87:d1:
88:25:bf:94:30:a5:c6:6e:7b:d9:84:8c:02:17:db:
9b:aa:34:8b:3b:3d:cd:20:6a:d7:61:0d:fd:4d:55:
d1:0e:3a:40:92:b7:1a:9f:93:a6:05:5f:a0:88:68:
27:4f:c1:df:e5:4b:ad:10:6e:f7:33:ec:1c:0d:62:
bd:e4:aa:0d:11:ad:e7:1d:27:10:ef:85:8d:bf:3f:
8b:a2:6b:59:ab:a5:ed:df:14:16:0e:89:52:1a:08:
be:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E1:CD:7B:35:B3:E5:6F:D3:97:8A:FD:A6:70:EF:52:8F:60:DB:4A
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/84bc47e8-51f2-4b41-91d4-02ef762d30ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
12:6e:2f:5a:29:b1:39:27:3c:57:85:cc:ed:d2:8a:c4:55:2a:
62:ca:5d:c0:87:1e:5e:31:71:20:54:6f:0b:b1:c3:67:18:e4:
81:b8:13:3c:c1:81:43:80:db:52:a0:7f:05:d4:bf:8d:53:70:
36:78:a5:e9:1a:a5:24:2d:c6:4e:ec:e1:92:c1:fe:59:ec:ff:
c6:01:81:08:1b:e6:d8:aa:cc:1a:c0:0e:9a:3c:82:ec:e9:ed:
ed:a0:dc:f9:ed:3a:ce:f7:0d:e4:e6:9f:db:48:14:f2:39:64:
82:46:46:1e:2a:8e:8a:0c:6e:f9:a4:09:d6:30:80:2b:bf:07:
2c:83:7d:5a:1e:e1:43:ba:24:a1:3c:62:12:be:96:b9:98:ca:
83:91:ca:95:b9:6e:ac:77:68:85:5d:d1:58:e7:1e:91:92:46:
7c:b1:bb:01:6a:07:87:3e:e8:2a:e2:b0:04:d3:1d:42:17:05:
19:d4:38:45:08:1a:45:63:ea:78:4b:24:10:c9:62:23:67:d5:
5e:7f:01:a1:82:f1:1c:5f:1a:38:f8:76:d3:20:31:54:51:02:
7c:d3:83:27:54:24:ea:1a:9b:24:1e:37:8f:9b:6c:10:b4:14:
56:2c:11:8b:bc:18:8e:87:0c:1b:99:6a:8e:d3:60:04:94:80:
f6:7d:07:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:47 2023 by rpki-client on console-fra.rpki-client.org