Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f68178f5-a783-4dcd-ac34-ef55a3362a2c.roa
File: f68178f5-a783-4dcd-ac34-ef55a3362a2c.roa (raw, json)
Hash identifier: iPS2wu/byM2E7OqGyOpEvlYlklhIYDS9IBzwK5OfYTI=
Subject key identifier: E1:63:5E:90:A3:F4:19:7A:E5:10:4A:1B:D8:41:21:46:56:1C:03:2C
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 36419A474FC01A348D9F0AAD486CBEFFA09F2B67
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f68178f5-a783-4dcd-ac34-ef55a3362a2c.roa
Signing time: Sun 05 Mar 2023 00:00:00 +0000
ROA not before: Sun 05 Mar 2023 00:00:00 +0000
ROA not after: Wed 08 Mar 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:41:9a:47:4f:c0:1a:34:8d:9f:0a:ad:48:6c:be:ff:a0:9f:2b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Mar 5 00:00:00 2023 GMT
Not After : Mar 8 23:59:59 2023 GMT
Subject: serialNumber=6ddc5c90c818bf15df9c6ec041a37f4deba013f1d92c02f1eaed0c251e863800, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:55:d6:f0:7b:f6:01:08:73:de:73:44:4a:
91:43:fa:6b:af:63:de:91:a3:50:91:08:2d:eb:c9:
de:37:0c:93:cc:b3:27:ba:8d:23:4a:0a:74:83:58:
3c:af:ff:82:59:e5:2b:df:0a:66:90:6e:15:6e:ab:
96:32:93:d8:fe:77:48:53:cf:8f:4c:a0:c9:12:e1:
cf:8d:49:da:78:73:58:04:30:ca:d6:d6:ef:59:80:
71:84:d8:f5:f5:26:6f:4e:7c:15:0b:bf:29:d6:ad:
4b:e2:49:04:5d:b6:d1:5f:85:2f:11:73:9b:f6:47:
75:7b:96:f9:2c:5e:5f:50:45:a9:da:02:49:92:62:
c5:ec:55:99:45:56:02:76:6d:cc:98:9e:63:08:dd:
89:4c:af:a6:9c:cb:bc:bd:bc:a6:72:36:50:31:c0:
a6:02:e3:e5:34:62:c3:d2:a6:04:ae:21:1d:57:84:
1b:ee:52:32:05:af:9f:7b:c8:65:43:db:8d:f3:f7:
e3:37:5c:55:4c:7f:82:41:69:94:12:ce:3b:96:b4:
a4:4d:2a:5c:e0:7f:5b:69:5e:96:61:f6:7a:f4:f8:
dc:7d:b3:13:2a:63:9f:a3:86:9b:9f:9a:34:a3:52:
0b:9d:a3:53:dd:96:a3:a6:1c:6f:cd:93:79:fb:b4:
2f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:63:5E:90:A3:F4:19:7A:E5:10:4A:1B:D8:41:21:46:56:1C:03:2C
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f68178f5-a783-4dcd-ac34-ef55a3362a2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
40:29:20:ae:40:30:6a:a9:28:60:53:89:e2:39:e7:31:d3:6d:
94:f1:eb:01:0a:7c:99:cb:85:f6:53:26:66:0a:e8:b9:11:e5:
e6:85:26:7d:0f:70:de:f4:45:cd:a2:02:58:04:92:4b:70:1d:
16:65:3a:4b:64:2c:30:44:d7:27:6e:05:e3:3d:d5:83:e9:62:
13:9f:d4:c7:9d:51:40:fb:e3:5a:cb:4d:5e:93:9b:d1:a1:fd:
d6:a6:4f:aa:07:d5:a8:e0:02:ce:62:5c:82:33:2b:6c:f4:ce:
82:bd:bb:e7:87:75:14:4f:ab:50:5c:cc:e5:64:2a:cb:15:90:
1b:19:1c:b9:a9:c8:0f:fe:f7:8f:8d:55:4f:59:ec:b3:7e:16:
bc:f5:47:98:e5:82:be:9c:d8:6c:11:57:78:8f:f7:5d:07:4c:
ca:3b:6d:b3:b6:10:c5:51:b0:73:5b:6d:d5:66:82:f2:ed:33:
df:b3:68:5c:da:0e:43:a0:6b:eb:d5:f3:bc:b5:13:1d:bb:62:
d9:95:f2:f8:eb:f1:1f:94:db:aa:92:23:4a:45:99:12:d3:0f:
53:fc:9b:2f:3c:8f:37:49:d0:06:cb:07:d0:52:73:ff:d0:c3:
2c:d1:17:f6:3d:16:f3:af:f5:46:f0:c2:a6:8d:be:b2:9c:34:
79:6b:05:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:53 2023 by rpki-client on console-ams.rpki-client.org