Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8c5d8e00-9e2e-45bf-869e-702239a10b68.roa
File: 8c5d8e00-9e2e-45bf-869e-702239a10b68.roa (raw, json)
Hash identifier: lyuebPhqyajpwCrYgSqVYca4Z8mmJaL53sVbCpST3L4=
Subject key identifier: 46:B0:DB:06:0E:1F:91:22:BF:DA:4D:97:CA:F1:FB:05:14:D2:61:FA
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 216B2815CEB6025C3680D70DA8ECB8B257C1D4E1
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8c5d8e00-9e2e-45bf-869e-702239a10b68.roa
Signing time: Fri 07 Apr 2023 00:00:00 +0000
ROA not before: Fri 07 Apr 2023 00:00:00 +0000
ROA not after: Mon 10 Apr 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:6b:28:15:ce:b6:02:5c:36:80:d7:0d:a8:ec:b8:b2:57:c1:d4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Apr 7 00:00:00 2023 GMT
Not After : Apr 10 23:59:59 2023 GMT
Subject: serialNumber=cc96a19cbcb6fe21827eec1b6e2161359429330ec27b62e7f112d6d621467ff1, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:1d:3c:3b:cf:b6:0b:18:9c:8c:ed:54:f6:
37:01:39:80:12:88:e3:a6:55:da:5f:d9:a8:78:0c:
bf:39:b2:90:32:e9:5b:7b:f3:d3:fd:73:3b:d3:98:
78:51:27:00:68:48:6f:ae:2c:5d:18:3b:5e:63:7f:
49:12:c0:21:e0:a5:17:41:b2:3c:e0:f2:09:0e:f9:
a2:79:ec:06:0e:15:db:a1:86:fd:65:1d:75:26:62:
a6:c8:98:69:53:56:4e:77:52:d4:a2:9b:66:40:0b:
2a:44:07:2d:d5:4d:5b:f8:74:b0:f8:6a:3b:c2:6f:
83:6c:c8:2c:68:70:99:81:3c:91:8b:13:a0:30:2f:
12:53:39:14:ad:fb:89:84:d2:cb:23:d1:d2:7f:63:
cc:ca:be:e2:a1:1a:a2:30:5e:09:2b:35:e5:e0:f9:
55:69:5a:d0:ee:53:44:9b:43:b3:70:cd:75:e7:bd:
6d:91:84:6b:af:d2:af:23:ae:29:79:f8:53:a6:76:
97:9d:b6:32:7a:08:84:cd:95:f0:4d:f8:25:b4:8b:
c3:98:03:52:78:4b:d9:c2:bf:7b:22:30:ac:40:d9:
a5:4e:68:84:91:11:45:83:06:e0:f9:36:43:c4:a3:
df:23:da:fa:7f:48:5b:eb:75:3e:3b:4e:c9:4d:80:
8e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B0:DB:06:0E:1F:91:22:BF:DA:4D:97:CA:F1:FB:05:14:D2:61:FA
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8c5d8e00-9e2e-45bf-869e-702239a10b68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
26:58:29:71:d7:97:07:85:59:bc:c5:1b:7e:85:67:c2:ad:bd:
0d:4e:fa:16:0a:4e:75:43:9e:1d:59:68:7b:a3:22:75:19:3e:
dd:80:c9:58:c8:58:e3:25:57:3b:d2:91:80:43:b5:da:97:69:
53:59:01:fb:88:35:06:8b:10:54:ae:3a:96:f6:8d:9c:9e:dd:
40:85:5e:b3:b4:ad:fb:b4:29:49:bd:23:54:7e:5c:ad:8f:90:
d6:89:ea:a3:52:b3:0b:d3:9c:f8:c2:70:a5:a1:8e:de:a1:60:
91:c9:3e:84:01:e5:27:54:cf:bb:07:78:bb:b2:00:47:94:7d:
f2:93:14:d9:16:b5:bf:03:7b:5b:cb:03:c0:83:99:cf:54:4c:
b3:f9:b6:34:50:a6:df:b8:95:98:c2:61:b0:95:54:70:47:c3:
97:b3:e7:06:bb:8e:6e:b0:c0:45:cb:06:80:de:d7:83:51:03:
70:22:6b:c5:ca:55:db:73:2a:b3:0a:1a:5a:b5:7b:8d:fb:57:
9f:4d:10:67:94:55:6e:c5:d2:31:db:54:16:9c:b6:ee:94:a4:
da:9a:3d:57:2b:b7:57:b8:d0:74:a0:e4:62:09:3e:f4:c2:66:
74:b9:a5:61:0a:20:fa:47:87:11:59:00:0b:2c:76:0e:9b:a7:
3a:3b:a2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:48 2023 by rpki-client on console-ams.rpki-client.org