Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8da65a2a-eb20-45ee-95a1-d680c65a5707.roa
File: 8da65a2a-eb20-45ee-95a1-d680c65a5707.roa (raw, json)
Hash identifier: /TaGv7pbD1RQ4qoaCGnkb3mryW7yiyMNvCVIj7lhXYM=
Subject key identifier: 80:32:96:9C:D0:3E:99:DB:9C:6D:6F:B2:CF:9D:6C:98:40:60:CB:85
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 6C1C2AC727AE5AD5E038D00AF7A5DB11A156D84F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8da65a2a-eb20-45ee-95a1-d680c65a5707.roa
Signing time: Fri 07 Apr 2023 00:00:00 +0000
ROA not before: Fri 07 Apr 2023 00:00:00 +0000
ROA not after: Mon 10 Apr 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:1c:2a:c7:27:ae:5a:d5:e0:38:d0:0a:f7:a5:db:11:a1:56:d8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Apr 7 00:00:00 2023 GMT
Not After : Apr 10 23:59:59 2023 GMT
Subject: serialNumber=eb4b206027ae9592a70dd2c8d1873b0b86a087a05b56a155c4cbae454e37e6b4, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:11:9f:29:77:2f:20:66:c5:af:f2:f0:00:
2d:88:3f:fb:20:60:45:80:dd:50:8f:a6:f4:99:5c:
55:43:83:9f:d7:2f:c0:80:3f:55:ba:53:0d:1d:5f:
cf:aa:2f:84:b6:49:ca:ee:18:cc:ca:3a:58:85:c3:
c8:30:69:19:57:5c:74:5b:2f:bc:1e:d5:45:35:8f:
ac:b5:c8:63:d3:2d:5f:05:6f:60:99:d7:46:0f:f6:
d2:5c:8b:5c:8c:d3:68:02:ce:58:a2:9b:55:0e:5e:
da:43:ce:00:60:f7:be:46:2e:c3:3d:31:a7:b2:b6:
b3:c6:13:ea:6c:10:48:a7:76:b4:c8:a3:0e:24:eb:
9f:5f:e5:17:a6:3c:ee:09:78:e9:cc:69:d1:5c:cd:
1e:d0:45:62:30:58:55:a1:0b:d3:68:96:78:3d:c6:
1a:45:cf:17:5f:89:60:ad:6b:a4:3c:ec:b5:7f:9d:
71:5f:db:65:34:d5:ba:46:c9:d5:6c:d8:d4:f7:53:
b6:72:15:88:eb:d1:89:8b:77:06:52:7d:ed:46:25:
19:dd:0d:bb:36:73:93:a3:f6:06:54:7d:3a:54:41:
a5:5f:00:f5:75:8b:1d:86:6e:0d:89:b5:11:1b:b6:
c6:e5:84:65:d0:7b:ef:93:50:f0:e6:31:04:14:3a:
d9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:32:96:9C:D0:3E:99:DB:9C:6D:6F:B2:CF:9D:6C:98:40:60:CB:85
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/8da65a2a-eb20-45ee-95a1-d680c65a5707.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:e6:d8:7a:d0:d9:9d:19:0a:7b:88:46:67:4c:52:87:4d:ab:
40:bb:76:aa:ba:ae:85:37:bb:24:58:3b:c2:25:4f:22:3b:b1:
35:03:9a:50:8f:0b:f4:09:ad:79:21:2b:33:a2:bd:a6:4b:ec:
71:98:e2:97:f5:1a:f6:99:a0:9f:6f:48:35:5e:ab:58:31:a2:
c3:a9:88:f5:c8:f1:df:23:0f:a6:29:dd:d7:b0:73:7d:12:45:
78:21:1f:ac:81:1d:ed:1d:be:69:b2:93:ef:07:d4:0d:e6:c5:
dc:96:a1:d2:78:50:f8:14:71:af:37:67:62:74:b1:f5:67:98:
2a:6e:23:9e:12:7a:7a:5f:a8:05:1c:c8:3f:66:85:e2:a9:01:
cd:b9:d9:83:a0:b4:8b:19:6c:fe:b2:de:77:1b:2c:2c:37:fa:
bf:0c:54:28:37:05:51:be:c7:76:37:90:55:5f:77:67:a7:d7:
34:9f:fa:38:9b:91:0a:f7:6a:e0:cf:2b:70:a8:ac:4a:a8:de:
ef:07:f1:73:62:0b:44:0f:12:3a:0d:74:7d:63:c5:4d:29:c5:
84:52:8b:3e:07:4b:1e:aa:2e:f9:6d:0b:5a:44:4e:0a:7d:90:
03:3a:9d:4b:b9:dd:7b:78:01:bc:b4:8b:7c:91:53:11:3e:65:
a4:31:2d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:48 2023 by rpki-client on console-fra.rpki-client.org