Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9d0ea597-966b-4829-bd17-a25beae57b22.roa
File: 9d0ea597-966b-4829-bd17-a25beae57b22.roa (raw, json)
Hash identifier: ZX2zpRZOvPgst6H2VhVwpTVmkmHD5ZLqGOPv8kTeyqA=
Subject key identifier: 1F:5D:B5:65:19:1E:4A:C0:10:16:A2:34:B8:25:3E:E5:69:DC:F7:52
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 1CC1DF5D06024008264645CE2F0D1AFAFFD45FE2
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9d0ea597-966b-4829-bd17-a25beae57b22.roa
Signing time: Fri 09 Sep 2022 00:00:00 +0000
ROA not before: Fri 09 Sep 2022 00:00:00 +0000
ROA not after: Mon 12 Sep 2022 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:c1:df:5d:06:02:40:08:26:46:45:ce:2f:0d:1a:fa:ff:d4:5f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Sep 9 00:00:00 2022 GMT
Not After : Sep 12 23:59:59 2022 GMT
Subject: serialNumber=82ad9bfea5d626fedd828ad0c8f9c229d727f6240fc25ab947bec99746abc4d7, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:32:1f:a3:53:ab:c5:bd:d6:d1:77:0d:06:d9:
bf:4a:b8:6d:c8:c4:2f:cf:a3:77:ce:ad:0d:90:1c:
86:30:d0:e3:b2:d7:38:52:6e:fd:7e:69:0f:21:22:
92:85:ea:3f:54:52:35:92:7f:43:e7:71:6a:6c:19:
7e:92:92:ad:5c:10:d1:4d:ee:f5:88:11:d0:30:af:
c3:64:81:f2:c0:8f:54:5b:aa:0e:bd:48:af:2a:09:
aa:0c:69:84:0d:6c:b3:ba:c7:3d:a4:c7:d0:58:5f:
e9:53:cf:02:4d:3b:57:0e:2e:8e:4c:8e:f0:70:65:
06:ae:95:17:b3:4f:da:db:91:1a:32:a8:c8:d6:57:
00:63:0b:3f:79:bb:c1:83:54:b4:fe:6c:ce:19:18:
36:c3:0d:38:d2:25:e7:f7:ce:3e:79:af:b6:9e:e7:
ec:dd:c9:35:71:3a:87:29:33:48:8e:83:e6:d3:58:
33:f2:f2:5d:05:fd:bd:0a:23:09:ae:3f:29:ec:05:
b3:66:12:12:ba:5c:1d:7c:87:08:7e:46:0f:07:c4:
37:6e:b7:97:0d:5e:a7:a7:72:c0:f2:a6:91:5b:36:
6b:90:9a:a8:0a:a9:58:77:af:18:3c:14:9f:1b:8e:
d9:dd:03:00:5d:c4:43:08:f8:bc:9f:95:38:57:53:
8d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5D:B5:65:19:1E:4A:C0:10:16:A2:34:B8:25:3E:E5:69:DC:F7:52
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9d0ea597-966b-4829-bd17-a25beae57b22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:72:cc:13:dd:26:b7:1f:2e:14:46:0d:70:72:45:36:17:90:
05:1a:fb:a0:46:57:73:4b:a5:ad:68:f8:96:df:b9:e5:85:46:
0f:39:d3:67:35:e1:78:78:82:06:8c:43:99:cd:6d:3e:cc:24:
d5:dc:cf:47:a4:4b:15:48:e9:71:84:84:ad:e2:b6:6a:68:86:
a6:0a:c6:d1:47:2b:88:07:89:ed:8e:e2:ea:13:35:93:b4:d8:
bc:f1:e6:92:37:5b:fd:e7:83:ed:1f:15:7b:53:cb:79:21:08:
04:9a:ae:71:be:97:84:cb:6c:84:50:a9:87:70:f5:07:ef:e9:
78:0f:a1:2a:5c:1f:65:a1:c8:40:b3:73:d8:48:d6:2b:1e:b2:
90:6e:3b:0a:c1:99:83:d6:d0:cf:cb:36:d3:14:7c:f3:a1:74:
08:88:13:67:b2:0c:18:d6:5a:4b:74:ee:ea:6c:9c:71:5e:0e:
00:6d:97:d9:f1:a0:c7:42:ef:2c:07:d6:39:70:6f:30:d4:f7:
25:84:89:2d:b9:a6:2c:6a:ed:33:10:1d:c5:2f:2b:7a:92:cd:
a9:e7:45:68:25:16:a2:1d:ec:8e:91:b5:4a:75:2c:7f:30:40:
73:d7:b6:a0:57:d3:5f:d2:ac:a9:13:ba:12:6a:09:21:18:26:
0f:65:04:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:48 2023 by rpki-client on console-ams.rpki-client.org