Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f70cdd79-682e-4e4f-9f81-29b4bd68d73f.roa
File: f70cdd79-682e-4e4f-9f81-29b4bd68d73f.roa (raw, json)
Hash identifier: Ol9v4vRRzrfK1c0JKzHNh3WvE5u0qUQ+0SW0qP1Hmeg=
Subject key identifier: 3C:7E:70:E4:8E:8D:95:0B:B9:E5:15:7D:44:8F:05:08:C8:BA:4D:77
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 2D0871F8A4AE1871ED78CC58DB0152D273511199
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f70cdd79-682e-4e4f-9f81-29b4bd68d73f.roa
Signing time: Fri 30 Dec 2022 00:00:00 +0000
ROA not before: Fri 30 Dec 2022 00:00:00 +0000
ROA not after: Mon 02 Jan 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:08:71:f8:a4:ae:18:71:ed:78:cc:58:db:01:52:d2:73:51:11:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Dec 30 00:00:00 2022 GMT
Not After : Jan 2 23:59:59 2023 GMT
Subject: serialNumber=d229766f5154830c09e39de8c735ed089590c6c9ad497f38b632c8360773f5f6, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b1:df:8f:65:45:e9:a0:99:f1:97:d1:5f:88:
92:0e:81:bc:0f:67:1b:62:6a:ce:ad:ff:3f:1f:7a:
d9:28:89:76:8b:4f:ce:3b:4c:3c:a7:90:bc:ae:c8:
a1:86:13:20:cc:e6:52:aa:ac:78:7f:31:de:39:f0:
30:98:50:9f:e3:89:70:cc:d2:6a:b6:be:b1:a0:9d:
fe:2e:13:5a:1b:13:91:1b:70:b1:c4:f2:46:e6:5a:
e9:ab:b4:cb:e8:c7:d2:1d:0c:65:e0:b8:6b:3a:e9:
74:d9:04:10:aa:1d:5c:e7:76:56:5d:7d:af:96:41:
0e:e5:c9:f8:89:a8:c8:cc:81:11:db:ec:7d:44:5a:
9b:90:c5:4f:fd:6e:f7:64:ed:52:91:c0:f9:14:86:
e7:b6:f8:6e:9f:da:be:40:aa:e9:3a:7a:27:0c:ff:
74:e7:fe:7b:2e:86:f2:ed:16:46:f7:58:c0:40:cf:
98:27:86:b3:d9:ea:30:d8:da:ef:22:89:da:19:7a:
08:c6:99:a3:f4:35:d0:fe:36:cc:1b:aa:85:8b:68:
e3:c1:d4:6f:c5:1c:42:8c:46:c1:06:38:f7:66:d1:
cb:3e:d8:d0:c6:93:68:2d:27:ba:ef:f2:56:03:5b:
93:bc:42:17:5c:ad:ef:92:bc:91:10:49:ad:d8:dc:
53:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7E:70:E4:8E:8D:95:0B:B9:E5:15:7D:44:8F:05:08:C8:BA:4D:77
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f70cdd79-682e-4e4f-9f81-29b4bd68d73f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:99:0a:d5:b4:b9:85:d6:60:61:01:36:7c:96:60:f7:0f:38:
12:40:bf:1e:28:ab:f5:ad:77:f3:f0:46:f5:cb:ad:75:4b:43:
eb:a7:b6:5e:5f:8c:50:80:ee:88:a5:d2:78:15:cc:8a:c5:8c:
9e:6e:aa:c2:08:79:8e:c6:4b:ba:b4:89:77:a5:4d:a1:c0:8f:
a4:03:a5:6d:06:be:87:17:81:5e:a8:6b:12:5a:43:33:b9:9d:
07:78:77:3d:13:24:b0:a1:81:9c:91:57:31:36:e1:a7:a2:a9:
35:a7:59:97:da:9a:e4:31:d4:30:ad:51:da:b7:34:8a:50:a7:
70:ca:88:fd:ef:bb:5f:3c:25:bc:e4:8e:80:ae:04:e0:1e:fb:
f7:69:55:9e:ed:6f:6d:cc:cf:f6:48:56:12:29:b5:d9:0f:ff:
90:7e:8c:69:6b:de:2c:fe:37:16:b8:8c:ac:13:e6:fd:85:24:
8d:18:7d:75:86:65:fa:21:52:4c:07:00:70:d4:8e:40:50:c4:
de:73:52:78:ba:a2:2a:37:6a:ff:0b:00:c7:ca:b6:19:c0:36:
36:84:0c:89:9e:ef:4c:30:cb:89:18:78:ff:f5:8d:01:da:8e:
31:13:6a:cb:9d:3d:f7:fc:d4:12:d8:33:77:a0:ac:af:6e:4d:
40:da:bc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:53 2023 by rpki-client on console-ams.rpki-client.org