Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d875d2df-5b9b-47b0-95fd-5de9ffb423b5.roa
File: d875d2df-5b9b-47b0-95fd-5de9ffb423b5.roa (raw, json)
Hash identifier: A23vasSPSO3dBfVA3ten2/Y7AHM5gWX+CAGJyNFZ1bY=
Subject key identifier: C6:69:43:39:39:1A:E1:98:67:D1:20:0C:B2:A8:7E:92:74:BE:20:AA
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 5C0B58053B5FD325E0071DF81A40B46B6890ACC0
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d875d2df-5b9b-47b0-95fd-5de9ffb423b5.roa
Signing time: Mon 03 Apr 2023 00:00:00 +0000
ROA not before: Mon 03 Apr 2023 00:00:00 +0000
ROA not after: Thu 06 Apr 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:0b:58:05:3b:5f:d3:25:e0:07:1d:f8:1a:40:b4:6b:68:90:ac:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Apr 3 00:00:00 2023 GMT
Not After : Apr 6 23:59:59 2023 GMT
Subject: serialNumber=8a1ecca2200964ea8bf7a63d4e27992d36f65ba27f2aa5f9ca87e7acc1c1b18d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8e:d1:09:ff:36:ba:e3:71:94:ed:37:cd:2f:
e7:c6:5a:82:28:69:76:32:91:85:9d:a8:8d:32:ed:
cc:14:55:08:c2:00:ec:37:28:93:c2:a4:93:1c:12:
75:aa:3f:ef:f6:85:45:0a:c0:aa:64:89:ad:dc:58:
a8:8a:65:1a:c3:a7:e0:64:b8:2e:b5:74:af:bf:0c:
36:fd:62:f3:1f:9b:bc:95:7b:4c:ab:82:b7:59:ed:
90:5f:a2:7c:30:d0:27:a0:e3:94:53:86:d8:85:47:
c9:4e:61:ac:ea:bf:27:2c:c2:4a:70:60:25:49:f7:
c1:e2:46:c1:05:24:d7:f6:30:18:3a:3f:2f:fb:62:
38:62:4d:a8:15:6f:1c:04:ca:1b:76:c3:65:26:3d:
7b:c8:a6:39:75:e0:4a:22:00:89:a6:52:eb:91:8b:
d6:e8:77:2f:8a:03:0f:fd:c4:9b:f9:cd:b2:dc:75:
e5:3d:3e:38:67:ca:3e:ad:6a:04:fb:4b:e6:57:0e:
0c:3d:45:b0:c0:74:98:42:e5:3e:c4:6c:bf:36:08:
35:25:f4:6e:3a:cb:34:6f:65:60:bb:1b:cc:44:a7:
f5:32:5e:a5:11:03:7b:33:53:fb:62:f9:6e:17:f2:
22:7c:07:b1:5d:0e:6e:8f:85:bb:7c:51:ff:a4:d7:
a8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:69:43:39:39:1A:E1:98:67:D1:20:0C:B2:A8:7E:92:74:BE:20:AA
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d875d2df-5b9b-47b0-95fd-5de9ffb423b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
70:55:dd:18:f9:b7:2e:0c:10:60:ad:ca:84:08:50:33:cb:26:
6c:dd:10:24:0f:fb:b6:45:45:46:a7:59:10:0e:e0:c3:81:cd:
5b:11:72:64:68:5f:e2:c3:8b:ee:58:1c:d6:c8:1d:df:08:e8:
5f:6d:de:77:5b:c6:b1:63:0c:4a:76:04:39:bd:59:ca:13:1e:
d9:0c:c7:c0:ec:2d:28:43:e1:04:71:7a:c6:85:44:25:ba:53:
b6:2b:2a:79:99:0b:5d:34:d2:9a:51:0d:8b:0d:30:95:2f:0d:
e9:59:f7:72:e5:21:9c:3c:96:4e:4c:47:2b:f0:10:16:a7:d4:
72:08:f7:21:77:c7:60:88:d2:cd:a5:ad:7d:a8:38:90:7d:2e:
68:02:20:4a:2e:e2:1b:e7:81:12:8e:a4:9e:8d:d7:e9:c5:ec:
da:f8:ed:8c:7a:40:ee:a4:3b:96:98:f1:c4:68:7b:84:ce:2f:
36:6d:67:68:02:23:08:58:73:e5:e5:8e:ad:f6:e8:96:12:53:
ae:6a:35:26:67:26:80:15:c1:5e:16:76:6c:18:b2:4a:69:3f:
8e:fe:94:8f:4f:6e:e6:cf:c2:62:83:05:65:d2:b1:84:6f:03:
3b:d2:aa:65:5b:80:1a:7f:83:d5:cb:e2:c1:35:6e:5d:02:05:
fd:e8:3e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:51 2023 by rpki-client on console-ams.rpki-client.org