Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ae145668-696a-4d1e-bab8-86e4bac9bbda.roa
File: ae145668-696a-4d1e-bab8-86e4bac9bbda.roa (raw, json)
Hash identifier: k/mSgCV8IqCE+MwxbDH79Xx/z81d2diDk+xDvecaLVo=
Subject key identifier: 9B:FC:21:4C:BE:97:CA:F4:14:2A:95:28:69:C9:62:1F:DA:D8:28:5C
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 052A80B3FE6867877C92B12818117294BDEC48FC
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ae145668-696a-4d1e-bab8-86e4bac9bbda.roa
Signing time: Mon 03 Apr 2023 00:00:00 +0000
ROA not before: Mon 03 Apr 2023 00:00:00 +0000
ROA not after: Thu 06 Apr 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:2a:80:b3:fe:68:67:87:7c:92:b1:28:18:11:72:94:bd:ec:48:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Apr 3 00:00:00 2023 GMT
Not After : Apr 6 23:59:59 2023 GMT
Subject: serialNumber=14c6034db3e1f0bd9fcdb40f6cb9dbb866dca93faaf4626bbf6f6e01f9b68bc2, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d2:2d:2e:7e:9b:c8:e9:de:83:44:4f:8a:b9:
e1:eb:3f:0a:14:8d:f2:db:bf:e7:02:e1:f7:0d:4c:
79:1b:9f:c0:01:90:ed:b5:bb:0e:fd:d8:5e:53:ef:
42:14:1d:2e:9b:46:09:03:d6:78:38:e5:94:1a:03:
8d:85:70:c4:28:7b:5f:5d:e7:28:23:20:0d:44:cb:
39:20:7a:28:61:c3:25:bb:99:bb:7b:ce:a3:00:44:
cd:6f:ec:a7:e2:ba:b1:fd:d9:ba:50:6e:e6:1d:ba:
89:45:5c:29:dd:ea:23:db:aa:55:3e:12:84:aa:99:
93:09:35:ba:99:87:f2:01:88:70:de:67:00:dd:4a:
aa:88:35:bf:25:85:a5:ff:fa:ef:e5:f4:c7:39:33:
a7:1c:57:bb:59:3a:79:10:95:7f:bf:14:fd:89:44:
c9:3c:5f:df:13:7b:05:54:05:75:07:bf:59:e4:cc:
34:83:78:93:dd:3e:bf:34:d4:36:e7:18:93:d1:38:
72:bf:59:5b:c5:6e:81:6f:d2:af:a3:ed:6d:0d:fd:
19:57:30:39:43:ae:60:66:2b:70:d6:4d:cc:a0:38:
bc:48:dc:fe:41:5a:80:98:12:14:49:4e:67:cf:66:
46:f2:0c:78:b0:69:73:b6:10:03:3a:b5:93:12:95:
a7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FC:21:4C:BE:97:CA:F4:14:2A:95:28:69:C9:62:1F:DA:D8:28:5C
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ae145668-696a-4d1e-bab8-86e4bac9bbda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:7a:8f:6f:3f:49:4a:6b:df:98:06:9e:55:44:9d:9b:be:fa:
e6:08:03:f3:ce:ea:a9:ab:eb:1d:5a:0b:47:8a:8c:64:77:03:
ba:f0:ba:a7:12:59:e8:9c:4b:2c:5e:d5:7a:06:3f:0a:0b:7a:
24:5f:09:fa:b9:4b:c3:6b:04:d0:d3:d2:8c:6e:37:1f:67:da:
90:57:52:36:f0:7f:78:9c:0d:ad:ad:25:ba:4d:5d:51:f1:ec:
8d:32:29:29:3b:b2:bd:0f:f0:88:fd:c1:75:3b:b8:4c:05:ac:
1d:58:c2:9c:47:f3:34:6e:76:b5:3c:ea:5d:48:97:61:d1:7f:
2a:10:a2:c8:14:b2:af:13:a7:d5:bb:26:34:ad:c3:d5:fa:9a:
35:d9:13:30:88:ff:24:79:28:66:dc:13:38:42:40:89:3a:e1:
2a:bb:d0:b6:4f:5f:57:1a:da:3f:b0:6a:b7:47:41:51:c3:74:
23:3b:90:92:1b:af:60:e7:be:f5:19:a6:a2:74:d3:f8:26:dd:
4d:92:c9:e1:70:41:44:e1:a9:48:90:33:bd:b5:2f:af:8f:4d:
36:36:b5:3a:f4:b9:fc:34:a4:2d:6b:b8:88:07:b8:86:0b:cc:
c2:92:a1:07:15:24:1c:44:c9:d9:29:58:45:7d:cb:24:35:14:
bf:77:95:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:50 2023 by rpki-client on console-fra.rpki-client.org