Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cb701ffe-7aeb-42fd-99a2-1addfe597893.roa
File: cb701ffe-7aeb-42fd-99a2-1addfe597893.roa (raw, json)
Hash identifier: bOHZKfkH+6KuHwGVBTN2ckuu+fuSJtZHdCQf2ESfhe8=
Subject key identifier: 4F:63:6A:B1:AD:E9:EB:A7:EA:92:BC:54:5A:0A:6D:14:BE:37:C4:08
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 6EE2D2727C651BF651F5B94321788EE1734AC1F3
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cb701ffe-7aeb-42fd-99a2-1addfe597893.roa
Signing time: Fri 31 Mar 2023 00:00:00 +0000
ROA not before: Fri 31 Mar 2023 00:00:00 +0000
ROA not after: Mon 03 Apr 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:e2:d2:72:7c:65:1b:f6:51:f5:b9:43:21:78:8e:e1:73:4a:c1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Mar 31 00:00:00 2023 GMT
Not After : Apr 3 23:59:59 2023 GMT
Subject: serialNumber=84048a34cfaa0bcf231cdd82d6b99f25588959a4f2bf329a082d3815395890fc, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:d3:2e:1c:f5:fe:93:d8:22:bd:f2:fa:60:
8c:4e:01:83:63:70:de:9a:6f:8c:c9:2e:77:49:f6:
22:98:82:39:6c:ca:d4:b0:f0:64:62:25:c9:2f:74:
29:a4:e9:16:11:55:bc:34:a0:8e:fa:19:2b:fc:71:
f2:f5:aa:6d:c4:36:88:57:f2:41:cb:11:2d:9a:ed:
d1:a0:9b:38:2e:31:40:68:98:c6:3a:28:6b:b9:48:
5d:72:c2:0f:52:79:a2:0a:37:20:0c:05:c7:f7:1f:
bf:ab:ee:70:b7:9c:54:cb:0f:e0:8f:a8:3a:64:6e:
c2:9e:18:c1:df:8e:d7:54:63:b8:41:1b:78:82:44:
4c:91:c5:e2:6b:b0:32:2b:be:fd:23:96:6d:d5:30:
5d:21:42:34:7f:cc:29:92:b8:f1:4e:a6:59:22:11:
db:17:50:a6:84:0b:e0:3f:f3:dc:d1:03:6b:93:12:
2f:d3:cf:10:41:86:b2:aa:de:fd:45:44:1b:d3:93:
e9:9f:c1:79:bd:3f:0c:6e:dc:1d:37:f5:58:14:0e:
87:be:98:45:ff:3d:8b:75:40:9d:fb:0f:45:3f:f3:
4d:29:90:98:be:3f:23:c3:69:ca:0f:f9:57:34:02:
29:d8:56:20:c6:2e:52:83:02:75:8a:12:55:25:33:
07:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:63:6A:B1:AD:E9:EB:A7:EA:92:BC:54:5A:0A:6D:14:BE:37:C4:08
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cb701ffe-7aeb-42fd-99a2-1addfe597893.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ce:ba:c1:1c:bf:15:38:e3:69:c0:8f:2b:f0:59:80:94:d4:
b3:9f:10:ce:24:65:9a:d4:08:a7:30:46:00:da:fa:02:7e:0d:
05:6d:ee:af:45:f5:6e:4c:99:ec:db:1e:a6:82:73:c5:5c:16:
88:17:86:29:33:94:93:b0:dc:a2:6a:cf:50:83:4d:ea:32:89:
59:23:9c:d6:48:24:9d:df:40:60:29:cc:97:56:ad:35:36:1b:
3c:92:58:a3:f0:48:b7:54:89:56:2c:ff:9c:ff:d9:d2:92:09:
39:6c:d9:55:17:a0:d6:6b:ed:2c:ab:14:cb:64:76:e5:7c:70:
a3:06:ab:76:75:7d:29:02:c8:b7:d5:20:05:ae:1a:5f:75:79:
f9:4e:ea:e4:84:16:f7:66:2b:59:ae:1d:bb:24:cc:59:8f:97:
5b:f4:05:9d:b8:b0:bd:e0:ff:01:1a:8b:77:7b:75:be:5c:d0:
57:48:36:48:c5:bb:9c:33:de:64:38:a5:c1:84:5b:9a:0c:36:
8a:b8:50:d3:c4:d3:51:65:40:6d:d5:da:68:81:eb:f6:9b:fc:
7d:a0:23:b4:0e:70:be:01:c1:82:c0:d4:82:41:1c:7c:bc:4c:
8e:35:f7:ca:05:d0:24:0c:f9:b8:5c:fb:8d:6d:59:c8:b7:12:
f0:8a:a1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:51 2023 by rpki-client on console-ams.rpki-client.org