Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d8ff6f6e-1f65-4b22-965e-78a27a5674a5.roa
File: d8ff6f6e-1f65-4b22-965e-78a27a5674a5.roa (raw, json)
Hash identifier: fglydoo4/4T1ehKK7JiqR5iloJFwdyAoVhRX3ZR0GyA=
Subject key identifier: DB:D1:7B:49:AB:E5:3A:44:D1:77:7B:10:65:E2:76:0A:33:81:77:0C
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 330FE841C728E9D914059BB7982E5BCC93A04A3C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d8ff6f6e-1f65-4b22-965e-78a27a5674a5.roa
Signing time: Tue 07 Mar 2023 00:00:00 +0000
ROA not before: Tue 07 Mar 2023 00:00:00 +0000
ROA not after: Fri 10 Mar 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:0f:e8:41:c7:28:e9:d9:14:05:9b:b7:98:2e:5b:cc:93:a0:4a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Mar 7 00:00:00 2023 GMT
Not After : Mar 10 23:59:59 2023 GMT
Subject: serialNumber=a88e6649bc283b17a8edd54f230184af730d24f305c0022e4039bd2ab0957dab, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:94:e2:5a:05:a3:ea:a2:8a:b7:02:5f:13:8b:
c3:18:fb:29:86:7f:3d:67:88:32:3c:d7:e5:b3:1e:
12:9f:9d:fc:a8:95:25:59:58:f9:d8:ec:14:ac:56:
b1:b6:07:19:3d:40:f0:28:52:70:7d:9c:15:84:32:
16:a3:b1:7f:ee:51:04:2e:49:1d:74:44:65:09:ff:
db:cb:e5:a9:0c:c7:70:63:bc:97:ba:13:32:cc:24:
55:7e:36:83:06:f3:6f:f1:3e:44:c6:06:69:2b:b9:
80:a5:a7:6f:9d:3e:88:ce:42:1d:15:c5:de:2e:29:
53:8c:bf:b1:79:c4:11:5f:cb:46:6a:ef:96:b9:a2:
dd:b3:1d:0e:5c:e1:fe:a8:9c:92:27:a3:ba:3a:e2:
4a:53:4c:e0:75:6c:79:34:3e:82:ce:f0:69:f9:de:
77:06:1c:e0:c9:cc:c6:1b:2f:5d:2d:6d:ff:8f:2e:
82:ba:47:a4:e8:ff:62:5d:b2:0c:db:b8:85:1a:9f:
b1:99:1a:6d:31:02:d9:3e:2d:57:95:f2:1c:00:60:
3b:b4:ba:59:18:7b:03:19:42:7e:25:c9:45:ee:68:
ac:bf:07:0d:5e:0d:fa:5e:7c:a5:5d:af:ad:2a:26:
fd:61:89:65:ff:44:75:de:05:47:1e:66:e8:e8:91:
93:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D1:7B:49:AB:E5:3A:44:D1:77:7B:10:65:E2:76:0A:33:81:77:0C
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d8ff6f6e-1f65-4b22-965e-78a27a5674a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:c6:6f:5c:73:9d:80:93:2e:02:43:ec:83:47:9a:ed:98:25:
a5:0c:88:35:4e:6c:b5:9c:9d:56:1e:c9:79:25:34:ad:00:b1:
cd:39:d9:aa:c9:32:05:b5:13:5a:a1:de:27:c5:70:b2:04:54:
00:76:e0:49:64:93:e9:8f:34:5c:71:6f:b6:ce:98:7f:b6:b8:
1c:66:52:04:72:a4:4a:71:e3:d7:c9:2d:09:1a:f8:31:8e:f9:
3b:1f:3f:3e:83:d3:9e:17:b9:99:ea:99:5a:71:ca:c9:3b:3b:
af:57:60:d8:d1:03:21:aa:62:1c:88:80:b3:ce:46:69:2e:c1:
66:bd:3d:f0:b7:63:ec:8c:16:f9:fa:f1:54:b9:c8:c7:9d:60:
24:c9:2f:2b:44:c9:1b:ac:6e:1c:1e:92:55:b9:49:30:f8:b9:
e8:ac:f7:18:7b:bf:ca:3f:0b:44:47:00:4c:f7:4e:f8:1a:01:
d3:e3:ad:0e:77:dd:90:7e:8a:e2:b3:73:bc:90:22:1a:e3:0d:
0b:db:65:61:9d:52:48:35:16:2e:c5:51:fc:86:87:d3:43:bd:
67:85:a1:47:63:6c:7b:bd:bb:72:35:ce:bd:c7:fb:c4:47:90:
e5:fc:37:a1:3f:f5:ed:c6:62:5c:15:55:14:ec:23:d3:a6:9a:
8b:f4:7d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:51 2023 by rpki-client on console-ams.rpki-client.org