Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e37a3b2a-9b0a-4ca0-85ae-3d5b2f54ab11.roa
File: e37a3b2a-9b0a-4ca0-85ae-3d5b2f54ab11.roa (raw, json)
Hash identifier: 1dd+adV54EuLNPiPpotfwJnjKA75u2/Dj8d+GxKRmQw=
Subject key identifier: 2C:74:F3:53:70:6B:FF:34:76:DE:86:91:6A:BE:BA:30:50:FC:3C:33
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 1B8EE8FE556663BADB8876DA36D5C48F457C9B6E
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e37a3b2a-9b0a-4ca0-85ae-3d5b2f54ab11.roa
Signing time: Fri 28 Apr 2023 00:00:00 +0000
ROA not before: Fri 28 Apr 2023 00:00:00 +0000
ROA not after: Mon 01 May 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:8e:e8:fe:55:66:63:ba:db:88:76:da:36:d5:c4:8f:45:7c:9b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Apr 28 00:00:00 2023 GMT
Not After : May 1 23:59:59 2023 GMT
Subject: serialNumber=ee4756c47eecf1b44a45f6fe7331a412c650998e96c42322ec225c7b77d365db, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:08:ad:83:af:cc:52:26:a7:bb:ca:59:11:
df:49:b5:7b:35:7b:40:07:28:ae:c4:24:f8:b0:e7:
24:06:62:e9:82:31:03:d5:51:a5:73:fd:77:1e:86:
ca:4d:72:15:b2:58:72:27:15:d1:af:1a:f0:27:a0:
d2:f8:9d:a8:23:ca:f9:64:2c:5b:32:02:c7:ba:18:
52:e4:b5:1a:33:c2:43:9d:82:39:fa:64:83:50:60:
79:41:25:53:33:47:ca:ef:31:6d:de:b7:38:bc:cb:
2f:4c:ca:6f:c4:8e:e3:a3:1b:0c:ba:89:29:49:eb:
c2:d1:06:69:68:dc:9c:87:76:8c:a2:6f:12:38:8c:
67:c1:7e:08:28:a3:09:c5:61:e4:aa:a8:bf:da:c6:
24:74:dd:b4:63:cc:8e:23:3f:62:60:88:96:3a:28:
1d:64:a1:87:4a:b9:8a:6d:c3:ad:4f:56:f8:0e:26:
01:3e:a0:49:cd:0d:96:ce:c3:ab:94:37:88:0f:f5:
af:e8:47:f2:19:61:f9:d9:93:c2:04:5b:a6:89:17:
de:8e:28:c5:96:86:24:9e:d8:67:7f:5e:fc:b2:73:
05:d4:05:ad:80:9f:db:a3:c1:16:82:12:65:54:63:
e8:41:f0:fe:f7:96:9c:69:42:d9:e3:26:57:9e:cd:
26:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:74:F3:53:70:6B:FF:34:76:DE:86:91:6A:BE:BA:30:50:FC:3C:33
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/e37a3b2a-9b0a-4ca0-85ae-3d5b2f54ab11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
27:68:2a:b2:f1:51:63:72:ac:09:22:54:f3:22:1b:9f:d1:14:
71:f3:d5:63:cf:f7:49:85:74:63:c0:97:d5:6b:b4:70:da:6d:
dc:4e:a9:bf:9c:0b:52:3c:03:ee:25:1c:d6:4a:b3:f0:e4:3f:
3d:55:17:ce:1d:17:58:e7:a3:43:c6:50:a8:bc:62:cc:de:9c:
78:1b:c6:f5:84:ce:8a:ff:53:8b:58:ab:b2:5f:25:df:11:c8:
9b:33:b8:f1:28:47:7d:b1:fd:99:15:9f:d2:37:05:64:c0:71:
09:2c:0e:81:75:b3:9f:6a:fe:3a:1b:78:b4:92:f6:42:e8:ba:
2d:d5:4a:1b:a2:ef:ea:6e:32:49:0c:69:7c:5f:94:c3:76:e2:
86:c5:51:f7:bc:09:85:cb:fc:aa:8f:ed:16:e2:c8:c8:10:e3:
5b:19:1f:0c:23:ee:09:28:7d:ba:5e:95:d8:b4:24:6e:89:44:
9e:85:cd:43:b0:06:78:14:f0:21:0d:58:d6:3b:df:ab:e4:ab:
7d:e8:e8:84:5d:4e:a0:1a:73:8a:fd:0d:e8:32:2c:20:55:a1:
7d:3a:3f:ac:14:5a:7e:74:32:6a:7a:09:78:f4:13:85:13:b5:
05:a7:5d:7f:a5:80:0a:72:e9:30:35:80:3c:6a:97:de:c6:ad:
c0:ee:87:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:55 2023 by rpki-client on console-fra.rpki-client.org