Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a80fa8a8-a86a-4d02-b53c-f4d8a06822d1.roa
File: a80fa8a8-a86a-4d02-b53c-f4d8a06822d1.roa (raw, json)
Hash identifier: eT5CZKuZH3ijbIxDhNxUYr/7mqP+LVIBgc+KfVekbHo=
Subject key identifier: EB:34:3A:51:F2:12:3F:66:AC:D0:14:5E:30:65:59:2C:42:DA:33:24
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 65E29DB2E5A23CA42BC52BFA392341CE7FDD6563
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a80fa8a8-a86a-4d02-b53c-f4d8a06822d1.roa
Signing time: Tue 28 Feb 2023 00:00:00 +0000
ROA not before: Tue 28 Feb 2023 00:00:00 +0000
ROA not after: Fri 03 Mar 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:e2:9d:b2:e5:a2:3c:a4:2b:c5:2b:fa:39:23:41:ce:7f:dd:65:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Feb 28 00:00:00 2023 GMT
Not After : Mar 3 23:59:59 2023 GMT
Subject: serialNumber=2ff4d013f176cdb210db92d8672f425f048210e080043ba23f7c3c44d416075e, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d8:c8:da:aa:49:8d:7c:75:6f:be:da:e6:31:
c2:04:93:ec:9a:02:d8:fe:f2:82:d9:34:c7:8f:04:
9d:c0:74:2a:13:cb:49:1f:92:8a:e8:73:52:07:98:
45:e4:0b:c9:a9:e6:a8:62:e5:68:72:6c:25:8e:88:
40:c9:d7:20:ff:a1:83:ec:16:2e:3c:01:23:dd:a8:
e5:14:05:fc:6c:e1:60:c6:88:8e:43:e3:c4:39:7f:
72:ff:bd:1c:e9:db:80:37:67:c7:4a:e6:5b:68:43:
2e:19:16:8e:38:29:05:57:a5:51:8f:51:87:34:7f:
7f:c7:c4:9c:a8:09:fe:26:16:04:7d:5e:96:64:b7:
e6:74:41:3d:9b:de:58:d9:19:d6:8a:2d:f6:96:a1:
b2:52:bc:eb:5d:3a:b3:fb:e2:51:30:b1:14:59:bb:
ba:44:04:e9:f2:0e:4e:31:34:df:80:ad:12:a8:05:
6d:80:21:41:58:71:d1:24:ce:c5:b2:eb:03:2d:f2:
13:20:2e:82:76:8d:6a:48:d2:00:50:a1:c1:6a:eb:
8b:dc:f1:3b:51:37:5a:77:39:c4:2d:b9:60:02:9a:
ca:8f:bd:3d:76:ed:77:95:08:8f:f8:9a:bf:ab:d2:
1e:03:c2:dd:1c:c0:bf:08:fc:e4:fb:03:b0:ac:99:
d2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:34:3A:51:F2:12:3F:66:AC:D0:14:5E:30:65:59:2C:42:DA:33:24
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a80fa8a8-a86a-4d02-b53c-f4d8a06822d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:07:6f:3e:c2:e3:5a:49:af:fe:be:f0:96:48:73:7d:3d:a1:
1e:11:a2:5c:b9:22:8b:0f:02:03:2a:11:cc:53:0e:e1:8a:74:
62:3f:12:61:14:4d:c1:97:2d:c0:69:7a:e3:98:fc:4a:2c:ce:
a5:bc:7b:8b:03:47:94:0f:b4:c1:ea:11:de:57:2c:1c:c4:1c:
ca:f3:4d:c1:e2:c4:d5:d7:94:eb:9a:b6:1a:68:9c:5e:f5:c7:
91:e8:96:b6:54:de:c7:51:04:9a:89:22:d4:5f:6d:1b:ae:03:
65:0a:d5:f8:80:cb:32:b8:2a:98:a3:21:6c:8c:49:ba:87:da:
db:a6:d9:03:64:22:e4:1e:9d:70:26:cd:48:5a:3a:bf:02:e9:
0f:9f:49:4e:df:93:88:4e:7e:fe:a7:82:4e:e8:66:ac:f7:d7:
68:0c:aa:cc:98:44:06:41:7a:87:77:22:5d:f9:e1:6b:54:cb:
7f:6e:7e:c6:95:7c:61:14:e1:7c:b1:20:b3:af:9d:09:a2:7f:
ff:2d:6e:53:30:c1:89:f0:93:df:46:ad:21:14:e4:9a:65:ee:
c6:f7:de:e3:7e:f9:47:fb:0f:15:6f:99:e1:6a:78:59:59:e5:
9a:3a:7b:53:e6:cf:85:7a:ab:bf:c8:29:44:7f:72:56:e0:b3:
22:a2:ba:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:49 2023 by rpki-client on console-fra.rpki-client.org