Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f5f1846b-3066-4744-b17a-bd946f82ca0e.roa
File: f5f1846b-3066-4744-b17a-bd946f82ca0e.roa (raw, json)
Hash identifier: ntjlj+GBpMdZbMosa9qtYHt7SH02BPj1GjWkZS5rj+M=
Subject key identifier: 9D:4F:2A:19:83:57:6E:C6:AD:4B:84:0E:8D:CD:45:81:A7:AF:8C:2F
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 04F27096A606A71EFD07CB1F018AB03BDD71C5C0
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f5f1846b-3066-4744-b17a-bd946f82ca0e.roa
Signing time: Mon 01 May 2023 00:00:00 +0000
ROA not before: Mon 01 May 2023 00:00:00 +0000
ROA not after: Thu 04 May 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:f2:70:96:a6:06:a7:1e:fd:07:cb:1f:01:8a:b0:3b:dd:71:c5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: May 1 00:00:00 2023 GMT
Not After : May 4 23:59:59 2023 GMT
Subject: serialNumber=326d8e3fa4abcbf61450b6bcaec0f6dae315bc606d6ccaef77ae84429ed5a8d6, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:26:c3:a8:d7:c2:4c:9b:e9:8c:fb:76:16:88:
da:69:15:34:cc:92:a5:0c:4c:0b:b8:ad:7f:25:f6:
91:38:74:97:00:46:e1:4e:1d:f0:7e:35:a0:7a:3a:
d0:9e:be:dc:54:b2:53:88:d5:35:07:cb:4b:1a:bc:
ca:64:cf:cf:ec:aa:d7:1d:41:c7:2d:81:db:72:67:
0f:aa:36:9d:f0:91:c0:53:ce:c6:a1:3a:57:62:59:
3b:31:8d:f5:d3:d2:12:7e:3a:e4:91:86:d2:3b:63:
8b:de:60:5c:c7:4f:9a:07:e2:e3:1c:df:ba:e2:ab:
22:c2:c3:92:b9:f9:e5:99:5f:67:58:a0:e1:c7:94:
4e:16:81:18:20:d8:e3:80:2a:96:59:6a:4e:ff:0d:
28:c3:a3:a2:cc:f6:58:ff:49:5e:37:b0:fc:c2:ec:
0b:cc:70:26:48:87:74:1f:86:c6:6c:62:ea:69:d8:
60:1f:1d:eb:08:a4:85:fb:90:06:ea:9c:c1:c5:b7:
a9:78:08:1f:78:42:ac:d9:c9:75:20:e6:65:de:89:
78:78:b2:42:be:70:33:fc:e6:40:38:b7:09:11:c5:
bc:bf:e1:21:38:03:67:e6:16:05:8f:e2:77:38:2f:
3b:12:3e:17:cb:a9:0d:d0:52:a4:af:14:cc:09:a0:
ef:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4F:2A:19:83:57:6E:C6:AD:4B:84:0E:8D:CD:45:81:A7:AF:8C:2F
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f5f1846b-3066-4744-b17a-bd946f82ca0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:9e:f1:46:fd:22:49:7f:3a:8c:a7:6f:f5:5a:36:21:0c:60:
f3:71:64:bf:4d:bc:5c:d6:9b:c4:0a:72:a7:c3:4d:c8:02:35:
cc:03:29:7e:f2:4c:c9:63:38:5b:6d:9a:3e:0a:ff:92:02:87:
51:ae:d1:ef:fe:7c:80:18:cd:92:a6:65:52:13:45:4f:df:15:
22:33:9c:0c:66:8d:65:51:98:c4:56:0c:ba:bd:99:38:ef:17:
26:2c:5d:e9:fd:90:39:64:b2:03:50:7f:95:82:de:1d:05:4a:
3a:33:6d:45:1c:9a:04:7d:e8:c7:fc:9d:aa:9f:c4:62:11:d0:
c1:20:e2:17:4f:ab:e4:7d:a9:b2:6d:6f:a2:74:73:16:9e:09:
b8:38:4a:0b:4d:14:99:63:b1:ba:7c:63:6b:86:d0:3f:32:52:
db:10:be:c1:3d:44:b9:2a:be:c3:74:1b:4f:4e:24:ef:49:fb:
5c:ac:1a:3c:07:09:fb:8d:13:54:1a:06:92:78:01:83:b2:32:
7e:b8:f0:96:25:20:e0:f8:00:18:a0:3d:ed:c0:c6:27:b6:e4:
bc:49:d4:9e:90:11:9b:fe:3f:e1:b2:5a:b4:8c:13:d8:b8:f6:
c6:f3:f3:62:29:8d:86:30:29:40:50:93:9f:5a:0b:84:f4:c1:
c6:49:c9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:53 2023 by rpki-client on console-ams.rpki-client.org