Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c5e4bb0e-0c9f-497c-b76b-43b78e332a1e.roa
File: c5e4bb0e-0c9f-497c-b76b-43b78e332a1e.roa (raw, json)
Hash identifier: mFOnPPrPVXWmcyZuViplDWi82tCzf7M9ZDG0DUYSEV8=
Subject key identifier: 5F:4A:07:57:CC:12:91:91:C3:0B:93:C1:E9:07:08:E8:AC:08:30:EE
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 0AC2F5348810819C306B9639442C4E73FA7D65F4
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c5e4bb0e-0c9f-497c-b76b-43b78e332a1e.roa
Signing time: Tue 09 May 2023 00:00:00 +0000
ROA not before: Tue 09 May 2023 00:00:00 +0000
ROA not after: Fri 12 May 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:c2:f5:34:88:10:81:9c:30:6b:96:39:44:2c:4e:73:fa:7d:65:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: May 9 00:00:00 2023 GMT
Not After : May 12 23:59:59 2023 GMT
Subject: serialNumber=82c2e3687ecebe14bbb3cbf2a75e0d9c0e3dc80b893e204b7f4ee07ee63a6cee, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8c:9e:f6:04:8f:47:9b:34:23:75:07:d1:67:
6c:dc:e9:ec:84:d1:2f:88:0f:c5:ee:ef:69:96:9b:
88:f7:3b:09:2d:5e:87:df:69:aa:20:04:87:a6:35:
f8:90:aa:d7:5b:fc:e6:2f:81:59:56:1f:72:05:a4:
91:59:34:6d:7b:fd:76:0b:bb:b4:e1:20:7a:52:71:
e4:da:44:a0:47:1f:86:d1:26:ab:b9:0a:82:e8:3b:
b4:64:70:f0:44:ff:1e:9d:d4:80:a8:1b:6e:6a:d8:
5d:2f:aa:91:a7:4a:44:15:36:68:ec:55:7b:fa:3e:
06:b7:5c:78:3d:1d:a0:a6:31:ed:1e:6b:28:dc:7a:
5b:72:29:89:be:64:1d:64:14:3d:6f:ed:88:6b:2e:
58:9b:9c:76:8a:6c:b7:81:57:b5:c9:6a:ec:7f:22:
aa:6d:e1:d4:46:1f:2d:8e:9a:3b:78:99:f9:ec:69:
61:86:ac:d5:cd:bd:08:5b:c3:f1:a7:92:e5:8e:bb:
0d:f9:c8:93:bf:74:db:f5:9b:57:0d:71:a7:9d:44:
c2:5d:a7:f5:ad:1b:68:9b:5a:38:7d:de:2a:06:2a:
3c:70:4e:1a:c4:8b:a9:92:3b:dc:a7:3d:32:29:25:
e8:5b:ca:70:ff:8b:22:09:6b:9f:50:3b:86:71:4f:
b1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4A:07:57:CC:12:91:91:C3:0B:93:C1:E9:07:08:E8:AC:08:30:EE
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c5e4bb0e-0c9f-497c-b76b-43b78e332a1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
31:4f:a4:97:a5:67:bb:e9:53:23:05:b0:56:6b:e4:c8:39:d1:
2b:55:74:da:44:93:1a:18:b5:39:23:51:1d:81:33:ef:8d:9a:
07:1a:b0:41:3b:36:0b:a1:d3:86:56:2b:88:fc:3d:88:80:d9:
07:0e:4d:c9:b8:cc:25:75:18:9a:2e:b5:56:0a:d0:4d:a4:20:
e9:e9:a0:49:fb:d7:5c:eb:68:d5:52:9d:fa:4a:9d:94:4b:9d:
31:1c:59:b6:52:32:91:12:25:6e:89:0a:f6:c2:f9:9f:cf:a3:
8b:9b:43:27:ea:4e:ea:1e:31:be:13:06:c3:d4:a8:15:f7:f8:
78:4b:f0:14:25:b4:6f:97:db:dc:d3:f3:a6:15:63:90:93:86:
9a:23:18:4a:99:ca:cf:9b:43:bf:78:18:e7:29:80:54:8e:a5:
46:d3:25:b5:9c:87:fd:83:03:a1:c1:65:d0:27:24:22:03:7b:
3b:ca:99:9e:4c:c4:a2:05:1f:8a:1a:a2:ce:69:cd:82:6f:a9:
ba:a5:09:b6:82:75:ca:9d:28:25:d0:f4:62:ca:94:5d:16:4a:
14:34:6e:90:f5:ca:3d:35:31:df:5c:8c:ee:f1:54:77:4c:fe:
de:2a:5a:1b:85:34:17:4b:97:93:21:88:a6:c0:20:27:89:6d:
6e:5d:6a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:52 2023 by rpki-client on console-fra.rpki-client.org