Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9c729701-2764-44b7-bd17-bb4b275ebaf0.roa
File: 9c729701-2764-44b7-bd17-bb4b275ebaf0.roa (raw, json)
Hash identifier: LAQFLmwx2tz9d2r1osV6KIjJ8nQbf8C95fusCSO2MiM=
Subject key identifier: D7:5C:F5:96:FF:8A:08:AF:05:41:49:78:80:6F:32:AE:79:08:07:4E
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 7F5C80A8F94F5B41741A67470777A0156D74AFEC
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9c729701-2764-44b7-bd17-bb4b275ebaf0.roa
Signing time: Sat 03 Dec 2022 00:00:00 +0000
ROA not before: Sat 03 Dec 2022 00:00:00 +0000
ROA not after: Tue 06 Dec 2022 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:5c:80:a8:f9:4f:5b:41:74:1a:67:47:07:77:a0:15:6d:74:af:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Dec 3 00:00:00 2022 GMT
Not After : Dec 6 23:59:59 2022 GMT
Subject: serialNumber=60bf045b7a92c3ab9002db1f74eaef949ebbd0b9d86487c2111ec2d30284b236, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:af:f1:3d:74:57:c3:86:a8:cb:ba:d5:1c:b7:
03:80:17:71:01:d9:af:55:cb:68:33:b4:40:a7:8c:
ec:a6:28:4b:1d:10:3c:52:af:ff:72:16:ef:b7:73:
95:94:d3:e9:99:a4:e2:f9:c5:72:92:71:b8:3a:2c:
06:6d:0c:ee:7e:23:f7:ef:d5:bd:2e:ae:f4:aa:a6:
a0:82:e8:d4:15:7b:9c:f0:29:b1:8e:7e:f5:b9:93:
46:4c:28:d4:cb:d8:b3:a8:5f:12:4d:82:97:3f:9f:
2b:72:9a:af:63:21:f2:7c:8a:19:97:d1:8f:87:d7:
f4:a7:8a:b1:cf:bf:42:2c:a2:3d:ff:c4:fc:cb:e9:
d5:59:ca:a6:a3:fa:eb:6e:84:9e:1f:43:7c:d9:45:
71:52:1c:7e:0c:0c:5c:ee:db:c6:66:a5:d3:47:92:
f6:a4:b6:e7:0c:7a:ae:3a:2e:90:66:02:5f:ec:4d:
d6:17:88:91:f5:46:3c:0d:69:a5:fa:6e:cc:f2:ff:
96:78:40:63:af:18:9f:fc:ee:34:3b:36:13:f2:61:
52:c6:e9:b3:6d:7e:89:bf:1f:ad:24:62:25:ae:5b:
cc:ee:7c:0f:df:b8:b8:d8:a0:61:2d:24:b9:5c:51:
c3:75:ee:36:90:b4:31:88:96:79:82:ad:37:39:89:
f4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5C:F5:96:FF:8A:08:AF:05:41:49:78:80:6F:32:AE:79:08:07:4E
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9c729701-2764-44b7-bd17-bb4b275ebaf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:66:02:b4:e0:b1:96:22:c5:f0:00:c7:13:dc:1e:fd:38:16:
02:93:8b:f7:6d:77:d0:c2:42:d2:a7:f1:e7:0d:f5:a2:93:14:
9f:9b:d6:fd:e4:fd:f4:18:df:4f:11:4e:99:50:ff:13:4a:ca:
d6:b1:bf:81:0a:9a:dd:2b:b2:6b:64:2b:5d:bc:62:c4:5c:bc:
65:bc:28:15:89:39:a6:6f:75:83:57:76:9a:5a:e3:3c:e7:57:
d2:2b:3a:26:74:24:96:b8:b8:28:d3:21:fa:3a:f2:ca:1a:99:
4b:c8:ea:9f:74:0b:c0:32:9a:31:13:4f:22:4e:1e:d0:03:2b:
66:4e:7d:5b:78:65:58:b1:88:f7:33:41:63:99:2c:cd:fc:17:
16:7b:b5:31:be:16:9b:5e:43:f5:11:d3:9c:03:f5:e0:34:e4:
5a:8d:e7:26:4e:a1:59:db:64:a5:d7:b5:57:75:f1:90:53:c2:
8e:5a:8c:69:bc:5e:9f:eb:f0:91:f5:44:31:da:f2:48:73:11:
11:ae:16:9b:ed:63:5f:2d:ea:77:14:87:a6:02:f8:00:44:70:
07:86:ce:1e:ba:54:3f:b3:a0:65:a9:b8:91:39:85:36:43:bc:
57:4d:66:56:7a:7b:27:5d:18:a5:95:46:ba:03:fb:58:45:39:
6b:cb:c4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:49 2023 by rpki-client on console-fra.rpki-client.org