Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bb18caa3-8a79-4e46-a4ad-f258ac12de02.roa
File: bb18caa3-8a79-4e46-a4ad-f258ac12de02.roa (raw, json)
Hash identifier: fA1mrzIARV53MS/YaAh4Zm0OkNtwpYQrDIeZ2X12u+Q=
Subject key identifier: 1D:80:12:47:C5:A7:6B:32:28:86:F8:95:02:33:24:4D:47:76:C0:5B
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 734874EF7A1AB280F6B9F24A0DC33C51C852251C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bb18caa3-8a79-4e46-a4ad-f258ac12de02.roa
Signing time: Thu 02 Mar 2023 00:00:00 +0000
ROA not before: Thu 02 Mar 2023 00:00:00 +0000
ROA not after: Sun 05 Mar 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:48:74:ef:7a:1a:b2:80:f6:b9:f2:4a:0d:c3:3c:51:c8:52:25:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Mar 2 00:00:00 2023 GMT
Not After : Mar 5 23:59:59 2023 GMT
Subject: serialNumber=f011eb92a11f9f5078c0d2528fe83db8c560d8a77db762dbd13a4b9ceae4f148, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:af:5f:e3:63:61:72:f9:03:2a:51:22:9c:ca:
9f:70:c8:fa:f7:24:1f:96:12:37:84:82:d3:d9:2e:
bb:49:9c:4d:2e:53:09:09:ff:d0:a1:ca:5d:83:0f:
39:06:d5:c6:ca:81:d2:a5:be:92:77:3f:8e:40:3c:
08:d0:53:b7:c7:73:b8:f9:5a:95:1f:4a:a2:53:7d:
da:ee:92:cc:44:c8:3b:07:76:96:6b:a0:db:15:52:
d5:3d:52:4c:46:f3:b3:0e:ed:ad:93:a4:66:07:2e:
a6:77:99:22:cf:b0:bb:64:b0:06:9c:f1:63:af:ae:
c5:4f:3c:4f:7f:11:8a:c6:48:86:2c:d8:1d:49:bd:
e0:94:cb:28:ca:34:35:78:46:65:65:2f:bd:c3:c3:
59:e6:66:a9:8a:22:d8:16:cd:1f:2c:3d:bb:d5:ea:
a6:96:4c:f1:b2:52:37:1c:de:a7:f3:4c:45:58:d1:
04:a6:b4:32:92:f0:f0:dc:7a:c1:26:83:12:05:66:
8a:eb:09:20:28:3c:c9:be:54:ec:7c:ab:c0:a8:6f:
b2:bc:8a:ea:e7:48:50:a7:5b:6e:af:04:43:1d:de:
dc:24:21:c6:f5:71:2a:fa:69:6e:7d:fd:0b:45:d2:
19:31:f4:60:6b:d9:4e:68:00:5a:13:6f:9c:de:64:
12:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:80:12:47:C5:A7:6B:32:28:86:F8:95:02:33:24:4D:47:76:C0:5B
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bb18caa3-8a79-4e46-a4ad-f258ac12de02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
31:b3:49:ac:bd:ae:13:0e:11:51:9e:99:87:f0:f7:af:9c:5e:
6a:4c:24:61:ce:15:da:55:02:98:4f:bb:2c:76:df:6d:07:a7:
ec:8a:5c:ad:26:f3:f4:25:41:55:db:00:c1:20:bd:66:58:61:
f3:8b:f2:09:c0:da:21:ea:9c:8a:4d:2a:93:07:30:72:3b:68:
51:5f:4a:76:35:69:2e:08:cc:d3:5b:0b:4a:a0:4b:ff:96:2d:
a1:07:49:46:3d:c9:c9:6f:f3:10:67:29:f8:10:e3:b7:67:eb:
3c:c6:1c:b2:b8:e6:df:11:79:1c:ab:f5:ac:e0:8f:4b:0a:16:
a3:96:f5:a1:aa:2e:64:26:66:7f:dc:9a:12:f7:3c:36:cb:84:
6d:ba:c1:1e:cb:9a:96:ee:4b:ff:34:62:8a:ac:54:c7:1b:bc:
fe:30:b5:a5:81:1b:a5:7e:aa:18:a9:73:08:ce:8a:c3:13:6f:
20:af:d0:d9:d0:a2:8a:ab:e8:0d:58:78:8c:f7:70:c9:18:76:
66:53:bd:6a:52:93:8b:4e:bf:99:ad:e4:14:fe:9d:06:42:91:
89:5f:4d:cc:42:4b:ec:c7:1f:7c:a0:a5:6b:90:5e:30:b0:a5:
fa:09:55:e4:20:f8:81:85:59:60:ba:64:ce:b2:a9:c8:4b:00:
ed:ff:f3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:50 2023 by rpki-client on console-ams.rpki-client.org