Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/01dc475b-51a4-4d3a-8016-522f92c55087.roa
File: 01dc475b-51a4-4d3a-8016-522f92c55087.roa (raw, json)
Hash identifier: L9ZcnMe7wXczzpIX7ApZhxAK7r6E0jfnUTd57Zcv9TI=
Subject key identifier: 08:C6:C6:55:72:16:E9:59:A6:FF:7F:0C:8B:AA:C7:20:22:A9:D3:35
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3A759EFBC0106704C30739CF997FDBF818F51C18
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/01dc475b-51a4-4d3a-8016-522f92c55087.roa
Signing time: Sat 07 Dec 2024 00:00:00 +0000
ROA not before: Sat 07 Dec 2024 00:00:00 +0000
ROA not after: Sat 11 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:75:9e:fb:c0:10:67:04:c3:07:39:cf:99:7f:db:f8:18:f5:1c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 7 00:00:00 2024 GMT
Not After : Jan 11 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:39:78:07:eb:c2:d4:52:ba:7d:52:be:97:7e:
c3:e7:7e:d2:9f:f3:7a:39:31:28:a8:b4:52:91:0e:
8c:db:26:09:35:7e:17:59:e1:c8:d0:ad:ca:7a:b9:
3f:96:92:46:cb:41:ba:5c:28:2a:0e:e9:71:8e:bb:
ec:22:9a:41:b8:c6:6f:31:fd:fa:20:fa:25:aa:69:
56:e4:af:1f:99:27:06:16:9e:58:39:e0:18:a7:3a:
87:67:bf:e5:e8:92:a5:d1:7f:4c:25:ea:31:b9:9c:
a6:f9:8a:4b:d3:af:2a:6a:90:88:ae:22:a5:44:a3:
34:61:06:24:5c:fd:4f:9f:25:94:40:64:cb:f9:15:
f0:c8:67:64:93:92:d4:76:e0:d4:c3:ca:5c:cf:55:
cb:83:8e:f8:7c:5a:b3:87:fb:84:bc:b9:38:08:6d:
64:74:4f:8c:f3:2c:43:ca:f0:79:18:ec:7d:a9:37:
f3:92:9b:ba:db:da:95:3a:dc:74:55:36:ed:e9:0d:
d6:77:96:51:b2:08:cf:74:99:ae:fb:f4:5f:24:e0:
f9:2b:36:30:24:9a:e0:5b:28:47:c1:fd:a4:cb:e9:
26:be:81:6e:29:bd:cc:cd:16:77:93:bf:cd:ec:9e:
9a:94:de:44:5d:94:9c:f3:4c:f1:e3:44:b9:bd:b8:
2c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C6:C6:55:72:16:E9:59:A6:FF:7F:0C:8B:AA:C7:20:22:A9:D3:35
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/01dc475b-51a4-4d3a-8016-522f92c55087.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:59:ed:ad:bb:b4:1c:2b:03:d7:f2:73:73:d0:ca:c8:30:dd:
9b:70:55:3e:48:81:32:87:bf:88:ef:dd:0f:d3:50:c3:af:28:
dc:49:ac:c4:d9:85:19:ab:d2:07:09:d2:89:c4:51:0d:0c:bd:
03:4c:e0:c1:d6:57:ad:af:85:4a:81:47:97:5b:39:61:bb:c7:
f8:40:e6:2e:02:d7:35:c3:c6:ec:f7:bf:a2:15:b3:5e:8e:12:
e0:20:28:ee:93:d6:d8:17:41:7e:5a:74:85:96:c6:4d:a8:1a:
b1:90:8e:18:20:e0:7f:85:9a:2b:cb:f0:ed:e5:eb:19:75:67:
49:a7:ef:a7:ad:6f:9a:1b:ce:e9:89:00:0f:dd:4e:75:de:24:
0b:23:f8:94:15:be:4f:68:62:88:62:fc:37:65:1c:e5:6c:18:
56:a6:22:26:31:8c:77:c5:c6:d9:b9:46:28:5e:6a:89:cd:bf:
dc:53:78:ba:b6:cb:00:37:f4:60:d0:c4:0d:95:ab:39:06:46:
4e:4b:73:11:66:44:8b:67:ed:17:8a:39:f9:33:e7:fc:0f:e5:
fb:f3:8f:ce:a8:c9:bf:98:77:b3:60:31:32:aa:44:98:96:f4:
ed:08:2e:d5:ad:69:21:8d:76:18:c7:62:ef:50:b7:aa:c5:11:
cd:cc:3d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:45:52 2025 by rpki-client