Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8c1b5f83-2397-430e-b3df-c48ae346e57a.roa
File: 8c1b5f83-2397-430e-b3df-c48ae346e57a.roa (raw, json)
Hash identifier: 9hfJFdLiK+UFtNZZy8eIIKSZOqPlMM3EMHda+++DjE8=
Subject key identifier: 6E:D9:56:54:2A:A1:81:B6:4E:14:23:82:AB:0A:14:BA:DA:A2:D7:B6
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 228F91542A05C37262467CF1A43AAEE3B86FAC9B
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8c1b5f83-2397-430e-b3df-c48ae346e57a.roa
Signing time: Fri 04 Nov 2022 00:00:00 +0000
ROA not before: Fri 04 Nov 2022 00:00:00 +0000
ROA not after: Mon 07 Nov 2022 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:8f:91:54:2a:05:c3:72:62:46:7c:f1:a4:3a:ae:e3:b8:6f:ac:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Nov 4 00:00:00 2022 GMT
Not After : Nov 7 23:59:59 2022 GMT
Subject: serialNumber=9d37952304c1cde4a55dafb08fd61c7b659cbb2cf79c8f066ceeace90e133176, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0e:c7:9e:85:27:9f:54:d9:f0:f8:bc:34:f5:
9e:e5:80:91:e7:be:86:54:25:c0:68:82:de:88:c1:
8b:88:c0:77:06:7a:34:11:88:f5:fd:eb:87:7b:f1:
06:96:06:40:0f:a6:a9:d4:31:01:06:1c:7a:02:a2:
b8:1e:64:84:db:84:e3:59:ac:f5:35:f7:2a:38:16:
15:0c:b1:0b:7a:d2:46:58:06:ee:f7:a4:8b:e1:21:
4b:bb:5c:32:8c:7f:29:15:23:46:43:1b:3f:72:bb:
ae:12:8b:37:60:f1:9d:37:58:f1:0a:50:e3:b9:2f:
69:0e:bb:90:08:41:36:c7:1a:81:89:d0:12:14:cc:
00:c9:24:db:66:e5:02:b6:f3:eb:ad:06:41:74:5f:
2d:9e:ac:1a:d2:ee:84:3a:39:aa:e2:dd:34:52:a5:
ab:49:0d:de:1c:1e:68:85:db:fd:76:6c:34:d1:b4:
52:ad:8c:37:44:b7:f6:d9:64:ef:c6:8d:71:d5:22:
7d:50:54:3f:53:c1:f3:6c:41:f7:29:ed:b9:fe:43:
3d:cb:db:a6:b3:8a:17:14:54:33:5a:5d:46:99:46:
2b:98:c2:50:50:50:72:ac:43:e5:8e:8d:4d:d4:9d:
4d:53:75:c7:4a:11:98:1b:e5:d1:86:db:04:88:3c:
c6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D9:56:54:2A:A1:81:B6:4E:14:23:82:AB:0A:14:BA:DA:A2:D7:B6
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8c1b5f83-2397-430e-b3df-c48ae346e57a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:fd:8b:f8:67:c3:07:20:cd:b5:ad:dc:82:59:07:56:d1:b2:
f1:d2:40:87:31:91:94:90:4e:51:93:2e:22:6c:c9:dd:1b:db:
89:7c:19:9b:f5:e0:82:8e:32:b0:88:b4:ff:a3:49:5f:38:c1:
06:74:4f:6a:0c:66:5f:9f:c2:aa:1c:ec:10:65:bd:cd:2c:17:
98:3d:3e:24:2d:60:83:89:a8:ed:2d:c8:cc:11:7f:4f:17:2f:
73:5b:ef:d5:56:67:19:d5:d7:8d:6d:2b:3a:a9:84:36:2a:8c:
e9:3c:f7:5f:1b:ca:09:31:2b:c6:6b:81:85:a3:86:e4:0a:e8:
71:e2:d9:4e:76:2e:18:bc:2a:3d:ce:4d:13:d4:83:1e:fc:41:
8c:5f:1f:67:51:46:d5:68:a7:30:69:ae:d2:92:e4:f1:b5:0e:
fd:c1:22:57:8b:ab:d5:00:9d:d3:45:88:ed:3a:4e:de:4e:1f:
05:f8:24:73:d2:07:b9:85:fe:36:ac:f2:cd:a0:2f:e8:eb:a0:
09:02:25:61:1b:92:6f:b8:2f:4b:eb:c6:93:97:e6:15:5a:8f:
85:d1:d1:b6:2c:1f:1d:24:7a:21:c8:d9:f4:29:7f:34:ef:37:
78:ae:e4:ea:8a:d0:f8:21:29:4f:cb:b9:d2:f0:27:46:26:69:
56:64:18:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:48 2023 by rpki-client on console-ams.rpki-client.org