Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cb6ad51e-34be-4573-8c48-f0f9680ea7f2.roa
File: cb6ad51e-34be-4573-8c48-f0f9680ea7f2.roa (raw, json)
Hash identifier: vsvET1R3J35qWajjSotx/Nz7l/pLkXAI2bqXg/3nTLw=
Subject key identifier: 78:36:D4:35:C7:89:8E:41:6B:80:68:7B:BE:EB:22:4E:2A:37:71:B2
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 5D73A74F16F3A8C127DEE7980A0DB41C7FBDAA94
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cb6ad51e-34be-4573-8c48-f0f9680ea7f2.roa
Signing time: Tue 06 Jun 2023 00:00:00 +0000
ROA not before: Tue 06 Jun 2023 00:00:00 +0000
ROA not after: Fri 09 Jun 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:73:a7:4f:16:f3:a8:c1:27:de:e7:98:0a:0d:b4:1c:7f:bd:aa:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jun 6 00:00:00 2023 GMT
Not After : Jun 9 23:59:59 2023 GMT
Subject: serialNumber=8bfcd318796bcb821ee9ad7f52719788f651f124b90040fcafe5ed5d029a335e, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4f:dd:62:26:9d:1a:32:88:fc:5c:f0:ee:af:
ed:a8:f0:05:7c:f9:e1:b7:68:cf:57:7d:8d:36:53:
6b:ca:cb:c4:ba:62:68:a8:10:75:7d:4a:4c:3f:45:
bd:35:16:06:69:5c:f5:45:2e:a4:33:e0:5b:cd:8b:
74:2a:60:ca:15:c5:92:48:c9:f2:f9:b5:6f:5e:ed:
ac:75:57:f0:b1:d4:16:69:02:a2:12:cb:6f:02:18:
ad:b7:ad:7c:fb:f8:2c:ed:28:fe:fa:c8:bf:1a:56:
f2:86:df:eb:58:42:fb:7b:f6:40:fa:8a:e4:5a:5f:
57:b5:c4:a9:e7:83:36:7c:41:a8:3c:52:11:d1:43:
bc:fe:03:08:0f:95:65:42:85:93:d7:44:c9:77:2e:
1f:43:5e:f4:11:ab:5f:dc:df:c6:4f:f2:26:f9:7c:
15:1e:ca:84:e5:b4:c9:e5:12:3b:a8:aa:90:2f:40:
94:39:5e:3a:3b:df:d1:88:53:b8:25:84:ac:5b:03:
b9:c6:01:36:08:17:b8:ec:81:e1:cd:bb:da:02:f6:
62:ee:1c:bd:aa:73:ea:a2:7d:c9:43:98:98:d6:91:
a8:21:18:58:b3:94:dc:13:9c:44:38:87:a9:a3:6c:
62:71:ae:2c:64:40:12:79:1d:f3:42:77:a6:e2:69:
c4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:36:D4:35:C7:89:8E:41:6B:80:68:7B:BE:EB:22:4E:2A:37:71:B2
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cb6ad51e-34be-4573-8c48-f0f9680ea7f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
77:77:69:72:7c:d7:b8:5e:af:99:37:2e:62:0e:cc:00:cf:e4:
4d:56:d1:00:7e:05:43:e7:46:7b:00:b5:28:b3:67:5e:ad:90:
27:d8:0f:d8:8d:dd:77:2a:4b:ad:b5:c7:69:77:ee:c9:92:7f:
b4:5b:cf:e0:34:20:20:1d:3e:ec:a2:2a:60:5f:53:fd:16:6b:
9e:fb:7b:a8:76:cb:b2:5c:ba:68:12:43:ed:16:6d:50:6a:aa:
73:a5:25:7b:ea:e9:c6:34:a7:59:b8:66:cf:c7:54:4b:65:a2:
e0:a7:b1:fa:14:27:7d:ff:d0:94:f4:52:7c:db:cf:4e:1b:8d:
96:80:cc:dd:00:42:dd:8e:3a:e4:aa:d5:45:4a:9d:17:c1:f1:
0e:ae:2a:e1:c2:3f:24:20:f1:5d:b0:a6:3f:17:3c:a5:43:e4:
9a:af:7d:07:af:a6:45:14:e7:20:71:1f:9f:96:d5:79:d6:1a:
b5:12:17:31:d8:cf:ed:16:00:50:24:f2:00:06:30:d9:13:cd:
9a:2e:70:a7:9d:31:8c:6b:75:f6:c1:8d:d3:ef:92:58:30:7f:
fa:d4:9d:8c:82:88:6d:35:3a:5d:be:ab:c2:47:ac:0f:15:b5:
27:77:bf:0f:9e:c1:d1:5b:b4:b2:d0:89:b0:be:84:d2:a5:ef:
7a:d0:85:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:51 2023 by rpki-client on console-ams.rpki-client.org