Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9d0e7ce7-4e01-4f2d-ad0d-eea499186617.roa
File: 9d0e7ce7-4e01-4f2d-ad0d-eea499186617.roa (raw, json)
Hash identifier: fr9rheIbYHGKDe37bCf1LYY2cEiaKUKN41GsBrpmC9A=
Subject key identifier: E3:2F:E8:FA:32:0F:35:96:D7:3A:8B:DF:AA:99:B2:BF:AA:71:72:FD
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 608DB7F38970608561AF2F00594331F684B5F4EB
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9d0e7ce7-4e01-4f2d-ad0d-eea499186617.roa
Signing time: Sun 03 Jul 2022 00:00:00 +0000
ROA not before: Sun 03 Jul 2022 00:00:00 +0000
ROA not after: Wed 06 Jul 2022 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:8d:b7:f3:89:70:60:85:61:af:2f:00:59:43:31:f6:84:b5:f4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jul 3 00:00:00 2022 GMT
Not After : Jul 6 23:59:59 2022 GMT
Subject: serialNumber=97713f5319c9d06ec543f8e07fd222ffa361fba9c105de14cac59ccc88e7d35d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:61:69:5d:18:b2:64:bf:5a:9d:20:dd:cd:66:
70:71:f5:20:2f:64:b8:83:25:37:69:ae:5b:e2:74:
6a:86:b5:e3:05:28:38:44:cd:2d:70:be:1a:1e:04:
7e:52:cf:01:e5:81:46:c2:c0:f9:19:38:14:fb:e9:
60:a6:3b:13:30:1c:dc:a8:05:4d:d8:cd:81:63:99:
93:d0:4b:11:63:5b:23:d7:bb:69:9f:b8:23:c0:b2:
fd:59:b4:94:15:be:a0:e9:72:f9:cd:ba:13:d2:56:
46:31:e8:96:f4:0a:46:5d:09:6b:ec:94:5a:aa:e3:
ea:e8:28:53:b7:dd:85:d7:81:62:95:30:2b:da:f1:
a4:b8:e2:7d:cd:af:28:91:e5:3f:c1:e6:41:16:1a:
75:7b:c6:6a:c7:95:76:cc:eb:88:d9:7b:45:56:da:
a0:99:20:c2:dd:4d:f0:88:80:74:ff:94:3d:d7:08:
82:ce:37:74:3d:d2:8c:3f:80:e0:55:0e:43:fa:c5:
53:6c:e8:a1:f4:d6:a8:86:b3:9e:b8:72:03:39:35:
e1:c1:74:b6:57:4a:a4:74:d9:00:31:40:65:82:03:
6d:9c:d0:23:f5:6a:9f:c3:4a:a8:b4:cc:71:b2:99:
8a:fb:49:c2:ec:59:20:99:6e:0c:33:09:42:f7:4b:
fb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2F:E8:FA:32:0F:35:96:D7:3A:8B:DF:AA:99:B2:BF:AA:71:72:FD
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9d0e7ce7-4e01-4f2d-ad0d-eea499186617.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c5:c9:db:07:86:02:7b:73:3f:b4:ea:b8:97:de:0f:16:f0:
8c:9b:df:3b:2f:e7:8e:7f:8d:c8:46:e9:88:b2:96:ba:7c:f8:
e9:d5:c3:6c:9b:cb:d9:8b:dc:ea:46:d7:22:a3:33:7e:2a:50:
c2:67:c2:a9:12:ba:62:b8:b6:45:09:b9:a0:6e:28:62:3c:71:
cb:da:45:ed:76:2b:ca:31:50:95:b4:5b:5e:38:54:ac:1b:11:
8d:7d:53:82:a0:60:30:33:94:23:df:91:3f:3f:03:5f:89:4a:
cf:3e:ff:ed:24:ab:e1:ac:74:f2:c1:93:66:3c:b8:90:17:ee:
ad:eb:70:56:f9:10:79:2a:01:bd:43:67:e5:5b:4e:cc:0b:50:
61:50:00:0b:b5:1c:15:00:a7:42:93:6b:96:24:e5:89:f9:72:
33:d2:c9:7a:29:4d:24:e3:b4:bc:79:f4:83:59:6b:c3:d2:50:
66:d0:3a:75:36:6d:d6:7b:4a:3f:8b:ad:6a:2d:41:5a:a8:15:
45:93:ca:41:9f:27:61:1f:48:4c:9f:40:ae:0e:e5:01:a4:d2:
2a:fa:1c:a0:5d:b0:dc:51:a2:bb:12:6f:15:3c:0a:64:f0:80:
13:77:d1:a7:8e:dd:ff:1a:78:79:ed:49:46:fd:8d:7f:bb:61:
4f:09:9c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:48 2023 by rpki-client on console-ams.rpki-client.org