Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ca005326-673e-4ba6-a358-dc251fd85421.roa
File: ca005326-673e-4ba6-a358-dc251fd85421.roa (raw, json)
Hash identifier: M91E+ud8zn1wNqSXzXHhclsgNskHZvyG+vyZS9TOduw=
Subject key identifier: 76:70:A6:BA:C4:D5:51:D8:76:A4:2D:B2:79:52:77:70:6C:AB:E6:5F
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 3119570F0E516BE32B160F874E0FD5805C65B87E
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ca005326-673e-4ba6-a358-dc251fd85421.roa
Signing time: Sat 04 Mar 2023 00:00:00 +0000
ROA not before: Sat 04 Mar 2023 00:00:00 +0000
ROA not after: Tue 07 Mar 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:19:57:0f:0e:51:6b:e3:2b:16:0f:87:4e:0f:d5:80:5c:65:b8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Mar 4 00:00:00 2023 GMT
Not After : Mar 7 23:59:59 2023 GMT
Subject: serialNumber=21d05453da7e74fae30329cfc6c9812a6cad3dc380bb7afa1bc815132b876a91, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:93:ff:aa:37:e3:9a:07:d9:e9:c4:0b:c8:5c:
50:d7:d0:46:4b:a2:cc:6c:78:c8:8d:b1:b1:b0:b3:
c3:fc:5f:b0:5d:d7:9c:3e:45:78:f5:eb:97:cd:37:
42:65:ae:08:8c:a3:a3:c0:0d:3a:3d:77:81:98:91:
0a:d2:a6:cb:f9:f8:9e:94:bc:a7:02:cb:85:c4:96:
0d:2f:55:fd:0e:d0:b0:f6:00:c5:2e:20:c8:b8:ed:
3e:72:7e:3f:09:90:14:0c:75:25:e8:0a:73:b4:de:
ff:f1:19:27:b3:56:dc:08:1b:8b:56:aa:2a:ab:ac:
2e:22:59:e2:5e:ca:b9:f4:df:0b:ee:fd:92:6d:08:
60:f5:0f:d9:27:f8:8c:4e:e8:68:40:df:6b:73:ae:
33:d5:c6:45:d4:fc:93:ab:6d:5d:bd:60:ab:1b:5f:
14:61:c7:da:fa:c8:e1:5f:87:51:7f:f0:ce:c7:7c:
43:c4:a1:fa:2a:07:fb:c1:2b:92:60:b3:b2:2b:ab:
cc:2c:15:63:d7:e5:20:ac:32:84:0b:46:96:b7:e4:
43:e5:42:48:75:16:b0:c7:23:a7:12:42:1e:62:18:
17:b0:da:3a:2d:87:90:3c:1f:34:29:1e:e3:45:6d:
bb:17:15:5b:b7:8d:0e:6a:d6:03:77:54:50:cc:40:
0c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:70:A6:BA:C4:D5:51:D8:76:A4:2D:B2:79:52:77:70:6C:AB:E6:5F
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ca005326-673e-4ba6-a358-dc251fd85421.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
59:4e:40:33:25:88:8c:a2:ec:82:cc:5b:96:33:48:5c:bc:ee:
83:26:cf:77:eb:58:70:7d:a1:bf:4a:06:df:c1:5b:7b:68:c7:
54:29:d7:f3:50:b4:a4:5f:d1:47:54:0b:e4:9b:52:43:7f:05:
31:a9:fa:f6:79:50:55:67:6d:09:ea:06:29:0e:2f:26:0e:d5:
83:20:41:d6:1b:ad:e1:4f:38:9e:a3:cf:98:10:14:21:0d:e8:
4c:59:1b:40:ee:d4:c7:5c:39:60:6a:2b:69:3e:23:65:20:00:
76:a6:8c:cc:36:60:2e:70:28:c1:6c:5f:55:ec:eb:35:1c:46:
41:b4:35:da:d6:14:49:e5:1d:30:25:28:53:ca:a7:10:e7:6b:
33:5a:e5:13:c7:72:03:39:1f:b9:0f:ac:41:d8:81:f9:7a:65:
a0:c8:7e:34:47:c8:9e:f9:c6:88:7e:cc:51:97:c6:1b:5c:0b:
fa:5b:fc:3b:51:86:89:06:6a:2b:a9:88:64:7a:97:a7:00:34:
e8:a1:47:a4:a7:8c:fe:78:7c:71:d4:8c:1a:23:16:5f:cc:58:
5e:07:19:6c:a2:76:15:46:bd:58:b8:ef:1c:65:0c:dd:ef:6f:
a2:fe:8b:3f:b0:9b:ae:bf:a9:c0:2a:6b:9a:4d:29:56:ce:ca:
7c:cd:2d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:51 2023 by rpki-client on console-ams.rpki-client.org