Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fe2608d2-2818-433c-8e81-ac7b48382aeb.roa
File: fe2608d2-2818-433c-8e81-ac7b48382aeb.roa (raw, json)
Hash identifier: isnAVYnZ9mV+5q4N0+c7XfjQOjhHGqybyeVkTE+uza4=
Subject key identifier: E0:37:EB:21:1A:EF:2E:27:47:43:D8:85:77:B1:B1:27:1F:6B:3E:98
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 369F708D61B3CC41F7425F7287DE3F768E9119B3
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fe2608d2-2818-433c-8e81-ac7b48382aeb.roa
Signing time: Wed 08 Mar 2023 00:00:00 +0000
ROA not before: Wed 08 Mar 2023 00:00:00 +0000
ROA not after: Sat 11 Mar 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:9f:70:8d:61:b3:cc:41:f7:42:5f:72:87:de:3f:76:8e:91:19:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Mar 8 00:00:00 2023 GMT
Not After : Mar 11 23:59:59 2023 GMT
Subject: serialNumber=95565ac2dfdacefcd57a3deeb9705c156033cba4a321d977415822512cbc2069, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:0b:e2:6b:9b:b0:20:fb:cf:a3:3e:54:a2:
6a:a5:12:66:ce:72:33:60:ac:32:1d:b6:7e:19:06:
80:67:62:7a:35:ba:73:22:b1:e5:78:7a:1b:d2:e6:
54:9f:e7:ff:2f:62:01:c2:b7:4a:3d:f6:77:b2:01:
c7:83:ec:7f:3e:11:ca:f9:d3:15:5e:99:a0:d9:4d:
84:ce:38:a8:5f:88:1a:d6:1f:49:d0:1e:74:aa:ba:
bf:b9:ae:ff:38:f3:a1:d1:9f:11:28:70:20:a4:17:
c3:96:92:fd:1b:15:02:0d:a2:ab:66:32:54:ee:8a:
8a:f3:70:29:a3:4e:5a:c6:6a:c5:f9:f5:72:fa:81:
ac:ac:62:14:3d:6e:fb:fe:b2:1e:6c:98:f3:0d:4e:
2f:b6:02:04:71:dc:57:d1:da:3f:29:8d:84:30:84:
df:a6:d5:6c:55:1b:92:e6:98:a5:31:5f:6e:9d:2f:
2c:3c:d2:15:ae:da:8f:c2:34:c0:32:bf:1b:92:08:
fe:a4:a8:e9:8a:e4:fa:14:7b:a7:1a:94:e0:f5:50:
a2:77:fe:94:a7:d8:22:84:8c:fd:b5:bc:b7:dd:37:
2e:c4:83:16:c2:1c:af:99:29:f7:4b:bf:d6:63:00:
90:09:1e:db:f4:80:3b:63:4c:9f:e3:c5:b1:7d:26:
df:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:37:EB:21:1A:EF:2E:27:47:43:D8:85:77:B1:B1:27:1F:6B:3E:98
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/fe2608d2-2818-433c-8e81-ac7b48382aeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:74:38:04:ed:de:e3:4b:3d:39:66:33:32:b3:84:34:98:18:
a4:97:12:65:ed:90:68:10:d5:1f:65:2f:b0:84:f0:31:8f:2c:
06:90:cb:54:2b:46:2f:fe:88:c8:47:1d:4d:4d:20:0f:6c:de:
3a:17:c7:3b:cc:c0:aa:c6:40:f4:7f:e3:d4:a4:69:d1:e0:de:
30:31:ee:e5:51:06:52:eb:80:81:0f:61:51:9f:ac:45:85:99:
43:50:53:f3:6a:47:a3:10:e0:99:58:02:48:22:3f:c7:54:74:
9b:ac:31:06:7e:1f:ca:21:36:90:01:ab:d9:d2:70:eb:4d:85:
14:d2:7a:1c:68:9b:be:49:d2:47:36:30:c1:2b:2e:fd:e5:13:
65:e4:f3:41:b5:4b:55:c6:4e:d6:d2:c3:fd:05:d7:8b:ab:f2:
29:a2:07:a9:f2:a7:e2:d5:1a:4b:c9:e8:74:a5:62:46:a1:12:
8e:17:d8:f5:de:34:a0:27:6b:22:88:83:cc:96:8d:8f:ee:79:
bd:2e:14:03:45:22:fd:e1:95:17:d7:50:f8:62:48:cd:30:29:
e1:ac:a8:2e:5d:a0:37:40:e9:39:9d:8b:a9:d7:4c:39:68:60:
b4:ec:13:42:42:5d:ff:06:c9:da:8a:bf:b9:36:b0:87:66:14:
c8:33:83:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:53 2023 by rpki-client on console-ams.rpki-client.org