Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9a8e1a96-4770-4e0d-bf9b-e00d01da35b7.roa
File: 9a8e1a96-4770-4e0d-bf9b-e00d01da35b7.roa (raw, json)
Hash identifier: VE3rD8AJTbw24ABOQexs24+dbCG8XXBn72rRp5MyeFE=
Subject key identifier: 6A:AC:AC:5E:35:A8:EF:1C:0D:55:38:8A:BA:00:27:BF:27:66:83:C8
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 1BCDC44F58E935954B8A1D7F926C04FFBEF9BFA1
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9a8e1a96-4770-4e0d-bf9b-e00d01da35b7.roa
Signing time: Thu 02 Mar 2023 00:00:00 +0000
ROA not before: Thu 02 Mar 2023 00:00:00 +0000
ROA not after: Sun 05 Mar 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:cd:c4:4f:58:e9:35:95:4b:8a:1d:7f:92:6c:04:ff:be:f9:bf:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Mar 2 00:00:00 2023 GMT
Not After : Mar 5 23:59:59 2023 GMT
Subject: serialNumber=d98ddbdc5bf5db3e0c7874238eca7707711a4b826617f80cbd2d01df4eef6f3c, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:13:43:6c:6f:2b:14:64:48:64:c0:e9:0e:ae:
4a:94:2e:68:74:83:1c:e7:09:8a:88:6d:67:2b:47:
27:09:86:ca:2e:83:cf:d7:73:e5:98:67:e4:9a:25:
48:9d:9a:a3:65:c6:9f:22:3f:31:4b:f6:18:80:0d:
e2:d4:06:4a:67:f5:8f:ce:b6:46:be:56:a6:c2:cb:
a1:bd:f0:0d:7c:d9:02:b1:54:05:3a:24:4e:14:23:
2a:38:9c:ba:c9:f1:9a:d0:4e:ae:6c:fb:66:c8:44:
0c:2d:ff:1a:6a:a5:db:1c:c1:40:f3:f6:4d:87:24:
e4:93:12:f7:0e:30:9c:38:71:e9:8f:b3:dc:1d:45:
a2:f4:48:bb:4a:6f:2c:5b:55:e9:8f:53:b0:4d:04:
83:a4:95:3e:ec:3d:50:99:da:65:0c:8e:56:2a:7d:
11:a7:04:52:b2:82:b2:ce:c9:e9:42:5a:4d:07:36:
1e:34:76:ae:03:58:c7:f6:20:2e:10:41:c9:37:40:
b0:23:c1:fd:9b:65:f9:22:ff:ac:ef:cf:bc:55:6f:
27:38:0b:f7:08:79:d0:30:77:c1:38:e9:c1:2a:73:
ae:23:eb:5f:04:09:f3:d5:c0:23:2e:f0:30:fe:c9:
0b:57:45:a9:58:59:08:fc:51:e1:84:42:d4:f0:06:
dd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AC:AC:5E:35:A8:EF:1C:0D:55:38:8A:BA:00:27:BF:27:66:83:C8
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9a8e1a96-4770-4e0d-bf9b-e00d01da35b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:af:25:73:09:e5:dc:f8:a0:01:7a:62:64:3f:a1:e3:c8:6d:
71:41:ab:ed:9e:f1:b8:0b:6e:c3:06:f6:16:52:f4:25:5b:48:
f5:42:6c:30:92:e7:85:79:39:f7:66:a5:f7:c9:97:6d:e7:df:
8e:c9:fc:f4:c1:4a:ed:ac:65:23:57:45:62:38:5f:2c:28:f9:
c3:33:b3:5b:25:6d:ab:2b:1c:bd:9b:02:95:57:bb:a9:aa:36:
91:ec:81:ed:a4:2d:83:c0:97:07:d6:a0:ce:9a:22:01:16:69:
78:48:d5:49:79:0b:d0:aa:4d:6c:9d:1d:e6:9f:8a:38:06:e3:
31:21:1a:e3:8b:1a:3a:b3:65:35:03:48:8c:f1:ad:95:b3:2e:
5f:ad:b2:a7:09:ed:49:10:86:aa:a3:06:d3:37:e6:50:d9:67:
78:f2:c3:7f:5d:67:d1:47:97:4d:b5:cb:f5:ce:7a:d2:26:c2:
6b:af:cd:e5:43:8b:5e:7c:fa:54:a2:36:1c:dc:e1:05:3f:cd:
62:be:e6:58:c5:50:22:d5:56:f9:c9:24:f8:bd:6c:4b:29:74:
c9:b1:c4:a3:8a:8d:12:4d:da:c8:f0:6a:c0:86:5a:49:f4:19:
df:2c:1d:08:fd:fd:ac:35:05:89:c3:ee:09:d6:fb:70:90:f0:
32:46:30:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:49 2023 by rpki-client on console-fra.rpki-client.org