Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8d8670db-a7b7-42eb-a788-91cd62ca4751.roa
File: 8d8670db-a7b7-42eb-a788-91cd62ca4751.roa (raw, json)
Hash identifier: QUTPbysNBeR4pqCqst1DDdRUiX0rA40s/0t4dfbqp7I=
Subject key identifier: AB:01:66:38:0A:2D:9F:B8:E5:62:4F:65:C0:30:7A:0E:04:77:3F:74
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 2D8DDF64E577C1F70FB4696FA0570C7D1ACFB659
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8d8670db-a7b7-42eb-a788-91cd62ca4751.roa
Signing time: Wed 31 May 2023 00:00:00 +0000
ROA not before: Wed 31 May 2023 00:00:00 +0000
ROA not after: Sat 03 Jun 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:8d:df:64:e5:77:c1:f7:0f:b4:69:6f:a0:57:0c:7d:1a:cf:b6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: May 31 00:00:00 2023 GMT
Not After : Jun 3 23:59:59 2023 GMT
Subject: serialNumber=2b92dc77704724ddca23a174157f477ddb9f3c0f3eeb92acf9f2eded0f409551, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:66:07:9b:bf:32:2f:65:c3:9c:b5:8e:f0:8e:
7e:1f:87:ab:23:6b:48:f2:11:7c:2d:38:c2:b0:51:
7e:20:b1:91:b6:da:b3:c1:81:4b:ee:6c:7c:ec:eb:
29:9a:86:5a:b3:97:95:93:0f:d4:c6:56:80:aa:de:
68:44:54:d3:cf:7e:64:be:89:05:42:f1:a7:e4:c3:
b3:eb:f4:9e:7b:e6:22:69:6c:ba:ed:7f:e4:65:ad:
87:31:7e:88:b5:ee:51:fc:1a:19:39:77:7c:50:a6:
14:db:0d:28:cc:c2:d7:58:ad:3a:65:17:c4:d5:ae:
28:89:d2:ed:9b:1e:1a:b3:ea:05:ed:09:a7:44:95:
59:0e:af:f8:47:09:4d:4d:04:f2:6d:7c:17:35:62:
20:bb:3f:33:c5:3f:ee:bb:7d:ed:53:6c:65:37:87:
73:3a:d1:54:3f:78:79:b4:63:e4:d4:81:b7:51:43:
da:e2:2b:59:30:07:c8:ff:e2:d2:6c:fc:e8:bd:3b:
48:93:4d:f4:94:d1:69:68:f6:57:64:45:a9:49:36:
eb:50:25:ea:7c:50:f8:e6:08:2b:25:f2:61:86:7d:
6a:fc:62:e3:a4:c5:d5:31:ac:94:95:1d:a3:26:68:
08:b2:be:79:91:2c:b7:1e:79:ed:c8:2f:c0:13:d3:
3c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:01:66:38:0A:2D:9F:B8:E5:62:4F:65:C0:30:7A:0E:04:77:3F:74
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8d8670db-a7b7-42eb-a788-91cd62ca4751.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:2f:4c:a1:64:ed:89:19:f5:19:4d:90:cb:5e:6c:11:32:65:
f3:27:44:5b:2b:be:f3:af:6c:b2:76:eb:ec:a5:58:bb:08:72:
e0:ae:f7:16:65:3f:38:8b:cc:2d:c5:c4:90:5a:05:27:87:ed:
88:e9:11:c3:3e:04:a2:32:93:de:09:c8:ca:5c:63:67:3d:5b:
fb:8a:c5:1d:5c:0f:6e:7c:9c:92:9c:95:bf:e2:52:86:3c:39:
88:81:a7:5f:4c:a1:48:fd:cd:a0:49:56:1f:01:0d:99:5f:d0:
d5:f4:e5:d7:9b:1e:e4:cc:78:d4:39:a0:03:0b:02:de:bc:6f:
a8:c0:ad:c2:36:ed:d7:c2:ca:b1:7d:18:58:1f:dc:ef:cf:62:
1f:e6:0a:e6:47:7d:26:e0:9d:90:58:93:e1:38:db:37:b2:55:
4e:17:f0:6a:d2:6f:16:83:66:ff:3e:6f:33:f1:40:ae:8d:5e:
36:88:8f:86:4f:c8:2d:44:43:c2:c0:8e:7b:27:01:af:c5:18:
b3:13:4d:b3:5c:eb:ba:3f:fc:1f:11:3b:fe:7e:87:9b:a4:6f:
f7:bc:36:ec:34:cd:2c:da:a6:c3:3c:e6:75:c6:e9:6a:4f:f1:
65:24:7e:d2:53:13:94:b1:31:9d:6e:00:88:2f:92:c7:b2:54:
f7:19:d1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:48 2023 by rpki-client on console-fra.rpki-client.org