Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ed72b26e-3242-4162-bb59-5bdb9b9041d8.roa
File: ed72b26e-3242-4162-bb59-5bdb9b9041d8.roa (raw, json)
Hash identifier: ekKQaINIQ52yArdLx2WKEV78VC6Xq1HJC9C8FaK510U=
Subject key identifier: AA:BC:98:EC:2B:65:6A:87:98:91:C9:51:11:96:A8:1D:D8:6E:85:1A
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 7BD72F2F653431645878EA856F7AFE49E85F27CF
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ed72b26e-3242-4162-bb59-5bdb9b9041d8.roa
Signing time: Sun 04 Jun 2023 00:00:00 +0000
ROA not before: Sun 04 Jun 2023 00:00:00 +0000
ROA not after: Wed 07 Jun 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:d7:2f:2f:65:34:31:64:58:78:ea:85:6f:7a:fe:49:e8:5f:27:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jun 4 00:00:00 2023 GMT
Not After : Jun 7 23:59:59 2023 GMT
Subject: serialNumber=b3a4e079d90e19b5acecd525fe35d86b4c350e6235549823fcd23af19e713831, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:01:3b:dd:d1:26:5d:a5:d9:7a:00:3f:ea:
32:73:90:5e:97:69:dc:4e:be:b9:9f:40:7e:8c:ed:
cf:68:95:0d:77:0b:ab:a8:0d:48:d4:ac:6f:7d:da:
8c:7a:95:a7:af:80:30:ca:c0:5c:53:80:7d:a1:95:
c7:4f:be:30:64:35:81:05:e8:fd:a2:73:fb:60:dd:
2f:8b:22:7a:fb:3a:c2:54:84:8c:fa:8e:00:aa:33:
fb:1c:74:fc:e0:f4:d0:1a:11:d9:c7:d6:e6:4a:90:
41:64:05:e0:c3:2e:2e:45:6a:e2:50:7c:92:5e:d6:
aa:1b:b3:bc:e8:d0:fd:29:0d:25:0d:9c:23:fd:9f:
6a:49:be:eb:83:4a:40:f4:5a:03:d2:7e:69:d9:23:
bc:c3:de:c1:88:b7:25:52:39:c5:6a:04:33:4f:93:
f0:0d:03:30:e1:2b:d9:02:47:ae:90:df:11:15:2a:
34:e6:08:10:0b:4b:a3:96:65:38:de:9f:91:27:87:
18:24:70:70:b4:e6:fe:18:d3:cc:cc:10:ba:09:b4:
ac:ca:a6:c7:2a:04:38:5e:4c:db:6a:96:24:ff:2f:
b8:c0:03:ce:2d:c9:49:3d:59:e8:b3:2c:27:ad:b0:
54:41:11:10:12:88:e2:f3:23:6f:d0:41:06:71:01:
e5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BC:98:EC:2B:65:6A:87:98:91:C9:51:11:96:A8:1D:D8:6E:85:1A
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ed72b26e-3242-4162-bb59-5bdb9b9041d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ae:26:ac:ca:66:1e:4c:f7:24:e3:a8:48:87:ea:1d:92:cf:
a0:67:b2:4b:87:c4:f1:90:1e:c3:f5:48:ad:0e:38:fa:5c:28:
19:77:8d:30:aa:97:28:92:20:88:70:76:53:ba:63:3f:af:87:
08:a2:d5:a6:85:72:96:c2:ab:ff:50:34:b2:55:07:1a:f5:2a:
07:2f:22:48:24:e9:fb:57:b0:8c:be:2b:d9:76:26:b3:c3:21:
9c:7f:27:9b:8e:f5:48:72:ac:ff:b4:23:8f:66:47:ff:f7:d5:
ef:42:cc:0e:69:e3:24:dd:84:0a:bd:7c:ee:48:d8:88:62:60:
ac:eb:28:f6:d5:75:a7:b5:4b:71:c2:66:6c:c7:b8:cf:57:9b:
7e:cd:a6:5d:63:cc:05:0c:7f:51:d4:24:50:03:1a:e4:f5:26:
93:0f:a7:99:62:c7:98:9e:8b:bd:ec:45:00:bd:03:62:ff:83:
ae:5a:1a:72:55:97:6b:a3:2a:76:36:6e:66:e0:e2:23:53:b5:
c2:ba:23:a8:2a:5e:7a:d4:d7:72:b1:e2:b2:d0:53:b9:fb:61:
bc:40:c7:7a:3b:e0:11:55:a7:2b:bf:15:9a:85:68:22:37:04:
14:cd:22:9c:79:ee:76:c0:ab:76:17:52:58:e2:f9:ca:c5:b8:
34:d6:af:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:52 2023 by rpki-client on console-ams.rpki-client.org