Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9f33f770-ddb9-4326-b8f8-7b777e4c2875.roa
File: 9f33f770-ddb9-4326-b8f8-7b777e4c2875.roa (raw, json)
Hash identifier: 7CXJsuRRGL+jmrhiHtShZ4IGi7BrSELN/75oiHewnb8=
Subject key identifier: AB:4B:F0:BC:A1:59:12:A1:0F:CD:E7:58:DB:72:A0:3A:4B:10:DE:8E
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 199D0C6ED112F8FA04B9267B6DDBA7FB5905F61A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9f33f770-ddb9-4326-b8f8-7b777e4c2875.roa
Signing time: Wed 01 Mar 2023 00:00:00 +0000
ROA not before: Wed 01 Mar 2023 00:00:00 +0000
ROA not after: Sat 04 Mar 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:9d:0c:6e:d1:12:f8:fa:04:b9:26:7b:6d:db:a7:fb:59:05:f6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Mar 1 00:00:00 2023 GMT
Not After : Mar 4 23:59:59 2023 GMT
Subject: serialNumber=348ed5e34223800dedcdde6f62dd8c797f2786a34b2156b408e426b93ccbed54, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:02:e3:3a:15:db:77:1f:4f:1e:cc:1e:00:d8:
46:d7:16:5e:40:17:b9:e7:37:c0:37:a7:a5:6a:e5:
ed:47:e9:ed:4e:de:67:5a:f9:56:f5:09:a3:1e:ca:
36:56:24:ea:9e:ef:1f:04:23:6f:33:8b:4b:ed:df:
61:ee:e8:7e:ef:0d:3c:9b:84:a3:66:6c:08:32:87:
6b:bd:7e:eb:63:9a:3b:d9:f6:fe:28:51:89:86:e4:
44:b3:5f:05:70:aa:95:9a:f1:7d:e4:6e:06:8d:ba:
48:b3:4f:ba:ee:5d:57:f3:4f:a9:1e:d0:eb:23:ba:
5f:01:88:4e:21:38:46:cd:1a:44:fa:be:1f:68:b1:
bc:93:b2:86:02:48:9f:29:7f:09:aa:83:52:4c:5f:
17:0f:e1:9e:9a:90:60:dd:1f:d9:ce:4e:06:aa:d4:
39:8e:ee:a2:77:f5:0b:10:c7:8e:83:3b:39:80:29:
e1:aa:aa:63:95:63:9d:bb:4e:f0:b4:40:96:0f:66:
bc:1b:75:a5:1d:08:2e:0a:38:96:ed:d9:2a:35:e7:
8a:dd:0f:7a:95:d9:01:c6:dd:1d:4a:4d:5b:df:8a:
5d:19:ba:ec:35:43:fa:8d:25:ff:0d:cd:95:5d:1c:
70:51:fc:9c:6a:56:39:96:6d:19:8f:80:93:d1:c3:
53:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4B:F0:BC:A1:59:12:A1:0F:CD:E7:58:DB:72:A0:3A:4B:10:DE:8E
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/9f33f770-ddb9-4326-b8f8-7b777e4c2875.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
73:2f:81:0e:b7:bb:f2:5b:20:7d:20:09:19:ae:b8:0b:07:a7:
d3:fd:44:09:1b:b0:99:f9:77:f2:cf:4b:cb:66:bd:6b:66:a2:
47:1a:6c:d7:bc:51:a1:d8:b2:e9:95:3b:a5:a0:f7:7f:81:4d:
42:a4:5a:87:d7:70:01:b2:a9:94:82:ba:f4:02:7e:82:1a:1b:
61:49:20:86:2e:ef:c6:e6:b3:ea:6a:ee:1b:df:e6:48:57:f4:
07:53:f1:56:4a:bb:7b:14:a2:f0:85:57:68:8c:6a:67:31:e6:
b0:f2:60:b7:4b:69:83:2d:bf:dd:d1:c5:3e:04:16:fb:5c:b2:
ea:49:65:9b:f5:2f:77:ee:cb:46:37:8e:69:ce:af:2d:f4:38:
83:58:3e:9f:09:a1:17:53:d6:3b:47:e0:cd:0f:62:5c:62:dd:
dc:41:00:69:6d:6d:79:95:1c:a5:69:37:bf:80:85:62:73:38:
b5:8a:e1:69:d7:1f:09:2d:b9:8f:22:c3:d5:c2:92:57:df:ad:
69:b9:e2:19:24:0d:a2:52:68:17:96:c8:b1:d9:7e:96:20:a0:
5d:0e:2d:5d:1a:e7:de:86:c6:79:24:de:ce:26:38:00:e1:20:
62:eb:c7:e2:bb:a7:27:1f:98:98:ba:9a:47:6b:87:ee:44:b9:
5c:72:be:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:49 2023 by rpki-client on console-fra.rpki-client.org