Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bf25b52d-ab84-4d9b-b98e-5bb70eac5787.roa
File: bf25b52d-ab84-4d9b-b98e-5bb70eac5787.roa (raw, json)
Hash identifier: mF0Eg3tUKmv3luRCckGjxnyO9BskMBCmvilnqxK2NoE=
Subject key identifier: FE:EE:A6:BE:F0:FF:94:10:9E:87:B6:51:5E:14:0D:24:C4:B6:BA:8B
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 441B5E9CF541D9CC719402BB4066EA5BE521ED88
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bf25b52d-ab84-4d9b-b98e-5bb70eac5787.roa
Signing time: Tue 09 May 2023 00:00:00 +0000
ROA not before: Tue 09 May 2023 00:00:00 +0000
ROA not after: Fri 12 May 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:1b:5e:9c:f5:41:d9:cc:71:94:02:bb:40:66:ea:5b:e5:21:ed:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: May 9 00:00:00 2023 GMT
Not After : May 12 23:59:59 2023 GMT
Subject: serialNumber=e29671443b843c22935ba4d6d169bb2cf3e27e74d93ea6c8f4da64dcdb12dd6b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5e:d3:33:58:3f:e8:4a:ab:91:4c:51:ac:b8:
91:f9:fe:07:30:4b:4b:01:99:04:09:1e:a0:7b:bd:
b4:fd:b5:1f:8c:8a:b6:a3:58:1a:5e:f9:05:fd:6a:
0a:7d:da:da:dd:37:0d:c5:0e:cf:eb:8c:72:15:50:
4d:ec:d8:3a:6f:5c:9d:87:9d:1b:80:07:22:13:8e:
06:4b:a1:c5:a1:97:ce:27:03:51:32:7d:63:1a:d8:
0f:05:6e:3e:4e:23:5b:19:07:c2:93:94:82:02:aa:
a5:8f:f2:9f:fc:ad:f8:27:e6:ea:88:f4:17:35:3a:
2c:20:4d:72:72:ac:aa:62:ff:3e:aa:1a:9f:06:8e:
28:68:2e:bd:6a:3c:41:90:2a:54:17:bb:cf:7b:00:
4d:37:e0:fb:b7:58:36:53:b9:5f:1f:9a:ee:3f:cc:
01:3b:23:38:89:51:37:a1:e5:f5:d4:39:68:28:c6:
7a:7e:3e:15:98:34:57:b6:43:23:72:63:8c:02:36:
f2:19:65:90:f8:28:c5:0b:e2:d2:da:f5:2a:5f:31:
31:8f:16:19:36:19:a7:06:64:73:86:0b:a9:66:b1:
b0:35:b5:0f:6a:6b:e4:6e:e4:49:79:ef:19:35:f7:
7d:cc:44:a5:ec:a1:14:1d:a2:04:ae:4e:52:28:4a:
d5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EE:A6:BE:F0:FF:94:10:9E:87:B6:51:5E:14:0D:24:C4:B6:BA:8B
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bf25b52d-ab84-4d9b-b98e-5bb70eac5787.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
70:61:41:d8:88:8d:1a:f4:eb:9a:d6:c9:b9:87:16:54:77:9c:
c1:4f:bc:c8:4c:77:b2:b9:30:40:99:1d:88:ef:d2:4f:a4:82:
da:71:94:9c:07:03:01:de:73:03:dd:57:71:24:11:ca:52:d9:
42:36:00:6d:45:64:bd:8e:18:6a:b4:76:2b:30:6a:d9:09:8c:
01:4c:0e:47:c4:25:55:14:72:53:66:f1:84:55:0c:02:8d:17:
94:b8:7e:13:79:13:66:c3:6a:34:cd:59:aa:98:54:cf:f9:16:
bb:ae:e4:16:58:7e:5f:5b:ec:85:07:e9:e4:9e:be:3b:1f:49:
40:a4:e1:11:e0:4a:e5:fb:5a:ff:f8:c2:f7:4a:54:92:26:9a:
be:16:63:66:a7:85:36:15:3a:d6:66:9d:87:99:37:7c:7e:57:
06:77:41:4e:49:55:16:c9:dc:54:aa:eb:aa:53:51:7e:9b:47:
2e:99:18:e0:f0:f0:95:65:ce:e5:5c:64:e4:6f:47:c0:a2:17:
9e:55:70:50:cb:25:89:f9:e7:48:4c:28:f5:1c:66:94:af:37:
c0:ac:c5:6a:0e:3a:58:52:73:ef:53:7b:88:1f:88:40:a6:d7:
0a:ca:b0:d1:a7:da:b1:87:ff:58:5a:ef:a2:62:9d:76:62:f2:
09:b0:fd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:50 2023 by rpki-client on console-ams.rpki-client.org