Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b1ef3ff4-f50c-43d4-949a-29f57dc175ec.roa
File: b1ef3ff4-f50c-43d4-949a-29f57dc175ec.roa (raw, json)
Hash identifier: iwNVkz8GN2uNiGGJxMiLroKmkygQyluqJmfh1ZsOl+8=
Subject key identifier: F0:84:34:91:80:47:1E:44:7D:40:63:5D:B8:84:61:A8:99:46:C8:A1
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 78D856E99778049A44FA18C660D044372A946ED6
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b1ef3ff4-f50c-43d4-949a-29f57dc175ec.roa
Signing time: Fri 02 Dec 2022 00:00:00 +0000
ROA not before: Fri 02 Dec 2022 00:00:00 +0000
ROA not after: Mon 05 Dec 2022 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:d8:56:e9:97:78:04:9a:44:fa:18:c6:60:d0:44:37:2a:94:6e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Dec 2 00:00:00 2022 GMT
Not After : Dec 5 23:59:59 2022 GMT
Subject: serialNumber=cbf768bfbfefcff7dbdbf045fd8250fc0d05dc655504d40c3b33fce36c808443, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bc:79:de:70:33:2c:1c:e6:fd:53:68:d4:71:
a3:76:0a:0e:99:6e:7d:58:c9:00:82:1a:e7:b4:55:
61:17:2b:44:d3:80:a4:c4:81:cf:11:bc:c3:e4:61:
25:99:19:25:69:f3:e6:42:32:c1:ea:ce:ab:48:65:
39:10:be:f3:b8:96:77:4c:b9:af:0a:df:1d:ed:72:
c9:90:b4:38:f7:e7:21:92:0e:f1:1a:9a:a6:62:20:
e7:db:20:cc:63:0e:07:4a:6a:ca:57:75:11:08:85:
b3:46:ae:13:ea:69:1b:ae:f4:8b:8f:4b:d2:79:dc:
42:86:7b:79:f3:a3:4f:67:85:4f:9f:44:29:e7:9c:
66:b8:b6:42:83:42:a6:23:a0:98:57:82:b8:85:99:
ef:d7:59:27:6c:1d:02:bb:0a:f1:7d:c5:34:ce:bd:
a7:1b:35:18:44:fa:b9:bc:4b:94:95:fa:ad:93:08:
34:73:4b:ab:72:57:cb:7a:6e:45:3b:8a:d1:a7:52:
89:3c:75:bc:27:09:da:b6:78:01:ee:bd:c0:6a:90:
2f:7f:20:65:05:c6:6b:70:68:47:04:ab:66:ba:a9:
0e:6c:59:1d:2f:da:53:4f:10:dd:66:e4:68:66:2c:
d1:74:f9:5f:0a:63:88:26:15:a4:70:65:98:7f:dc:
b9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:84:34:91:80:47:1E:44:7D:40:63:5D:B8:84:61:A8:99:46:C8:A1
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b1ef3ff4-f50c-43d4-949a-29f57dc175ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:a1:bb:85:0e:77:e9:55:a6:c5:fe:1c:84:ec:93:ae:3b:17:
0d:e9:4c:bf:8f:a3:24:43:57:31:1f:24:cb:e9:80:cf:44:e9:
80:8f:a0:42:2a:a2:14:3a:c3:e3:8e:53:1d:c7:f6:da:b2:98:
44:26:80:30:9b:63:0a:2f:c9:01:91:4e:70:9f:66:17:ae:0d:
cd:6e:37:35:a0:35:c0:6a:af:22:67:36:f9:e6:66:0c:69:a9:
7e:9b:82:a9:48:65:4d:ba:05:f2:00:6d:40:2c:74:04:61:23:
fb:e2:e3:17:69:80:05:43:80:78:51:86:21:04:b3:a7:23:de:
98:c5:3b:3d:4b:66:a8:6d:be:fe:9a:5c:99:4d:8d:aa:30:43:
e9:07:e9:ae:c6:80:df:56:6a:09:20:b4:a6:33:11:8a:19:71:
fc:84:c3:66:b5:5e:07:8e:41:59:09:c8:58:1b:10:b7:e5:3e:
5a:3e:ac:7f:ee:db:42:68:76:74:be:5e:b9:52:de:98:40:4c:
c0:1c:dd:6f:e9:86:a5:95:d5:c4:5c:c6:23:5c:a0:9d:43:ca:
ef:d9:fb:72:c4:ae:19:ae:99:c3:a0:c2:bf:65:31:1e:ac:b2:
10:fe:fb:e0:d6:b6:ba:6d:1b:62:1c:66:d0:a9:1c:ac:6c:2b:
1d:e6:cb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:50 2023 by rpki-client on console-fra.rpki-client.org