Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/94ef359a-742f-4aad-8e4b-eae2738ddc89.roa
File: 94ef359a-742f-4aad-8e4b-eae2738ddc89.roa (raw, json)
Hash identifier: ttwR5/HmGX1W/9FUeYWD+IQRqK/GEkSzaP2tfYiR06s=
Subject key identifier: 14:BE:A0:18:62:D8:F1:29:C9:4A:C4:23:29:57:3F:DF:40:00:7F:62
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 3ECA1EE39AF96DA0D38B05DFD541EA58A026E305
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/94ef359a-742f-4aad-8e4b-eae2738ddc89.roa
Signing time: Sun 16 Apr 2023 00:00:00 +0000
ROA not before: Sun 16 Apr 2023 00:00:00 +0000
ROA not after: Wed 19 Apr 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:ca:1e:e3:9a:f9:6d:a0:d3:8b:05:df:d5:41:ea:58:a0:26:e3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Apr 16 00:00:00 2023 GMT
Not After : Apr 19 23:59:59 2023 GMT
Subject: serialNumber=977a728155c027f50309aac8f739c7b81c62ae15f479e257c91b7e498efd17fa, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d5:ab:07:db:56:11:11:2f:ed:a0:49:c6:ab:
6b:09:78:f3:e5:e8:1e:a5:8e:a5:f1:b9:97:4a:7c:
16:19:e5:95:05:b6:45:08:18:b7:98:d6:c2:b6:3f:
88:c5:a5:cf:59:36:cf:44:33:67:67:93:22:05:38:
ac:ba:f0:5e:19:2f:49:22:60:15:27:3f:cc:fc:d5:
0c:14:af:ac:db:1f:f8:26:5f:db:2a:19:c3:70:e1:
86:73:c1:16:cd:4e:2e:2d:02:6e:54:80:c5:51:99:
37:15:71:5d:49:61:4a:24:2a:ee:2c:a1:3c:36:3f:
f9:8c:a2:48:c0:fe:7e:d7:46:61:2b:e2:4e:69:bf:
cf:dd:57:47:a6:de:db:e3:6a:45:c2:bf:87:80:ec:
93:55:bd:0f:93:1d:d0:3f:3e:cd:4a:96:d1:34:6a:
a7:c8:db:84:12:22:54:8f:f3:39:8b:ea:d4:43:d7:
a1:8d:0c:45:20:b2:da:f2:4e:8e:99:46:68:92:b0:
2f:23:9b:a2:f5:a6:f7:22:5a:f8:83:60:a0:00:a8:
12:96:a2:2c:5c:cb:17:30:98:03:2c:aa:48:9a:3a:
73:2b:96:a7:67:23:27:3d:15:08:86:15:46:ee:3c:
8d:85:62:57:fc:2b:c4:b1:c5:5c:21:da:13:00:fd:
e4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BE:A0:18:62:D8:F1:29:C9:4A:C4:23:29:57:3F:DF:40:00:7F:62
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/94ef359a-742f-4aad-8e4b-eae2738ddc89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:0c:07:13:c8:64:5e:b6:19:0f:10:27:a6:bc:81:3a:70:df:
09:15:e8:22:dd:9b:5b:e5:6a:72:74:7f:83:57:50:75:b3:95:
e3:55:0f:b1:1f:27:e9:34:c7:e6:a7:c0:b2:25:7a:23:5e:06:
f4:11:e6:56:19:1e:96:49:1b:cb:e5:c3:8e:d6:f1:76:64:20:
7f:d9:db:2a:85:88:7f:1c:14:06:6c:43:81:47:66:d7:43:5c:
ae:b8:bd:a2:6a:6d:6c:8d:fe:1a:97:08:b5:30:c2:da:06:73:
67:64:5f:01:de:47:e8:01:e8:a7:77:4b:10:1e:a0:39:fb:60:
aa:5e:32:ab:54:89:ac:47:9e:e8:47:b9:82:54:37:48:47:05:
f9:12:7d:98:ae:db:93:cf:d4:43:80:10:06:80:d9:56:f7:e9:
e8:11:37:2d:ba:36:00:08:c7:30:a7:8a:66:60:64:df:51:14:
67:d7:9a:dd:1a:d7:8d:b0:ef:87:40:ee:26:c3:87:f6:3d:eb:
49:e5:a4:f0:1a:ff:7b:53:41:6a:91:de:48:40:ef:c5:21:5e:
9d:31:64:44:fd:ff:bf:f7:e6:7e:5a:ff:7e:53:95:9b:00:fb:
bc:71:55:e0:a5:b1:b7:5d:db:6b:24:c1:9a:cb:35:54:72:31:
1a:45:a6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:48 2023 by rpki-client on console-fra.rpki-client.org