
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/02f237f4-2284-4d30-8d0f-8e6c7572cffb.roa
File: 02f237f4-2284-4d30-8d0f-8e6c7572cffb.roa (raw, json)
Hash identifier: fEX3z8TSEZ7s49BfUXvnYUWMZye+SyxZRjF2yX3hVNY=
Subject key identifier: E4:E9:85:48:B5:E3:AD:2F:07:C6:F6:F8:5B:07:C9:B1:00:33:FB:6C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4E47F21BB0CB4E06E9977516D41CDD6F6A203E7E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/02f237f4-2284-4d30-8d0f-8e6c7572cffb.roa
Signing time: Fri 28 Jul 2023 00:00:00 +0000
ROA not before: Fri 28 Jul 2023 00:00:00 +0000
ROA not after: Fri 01 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:47:f2:1b:b0:cb:4e:06:e9:97:75:16:d4:1c:dd:6f:6a:20:3e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 28 00:00:00 2023 GMT
Not After : Sep 1 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:32:cd:2f:e7:5c:61:b4:13:f2:d8:c6:2c:
98:f8:0d:8c:7e:25:44:63:e0:6b:3f:d3:d6:f6:2a:
aa:be:68:a4:a8:0f:ed:be:3b:2d:f1:78:31:b7:d1:
5f:b0:fe:bd:b3:5f:a8:02:19:98:5d:56:fc:35:b0:
3b:8e:fc:f6:af:59:ba:82:a8:75:1d:00:0f:1d:a3:
93:c2:5d:12:f5:1a:df:5c:0f:4e:20:78:b6:7c:99:
62:7a:c0:9b:f8:4b:61:48:c2:e3:e7:39:cb:72:7a:
cb:cd:bc:38:11:30:6f:13:f5:ac:d2:b0:ef:78:1d:
3f:8c:0b:2f:2f:86:1e:ac:f3:c6:15:1b:0e:d1:13:
47:fb:04:65:23:06:dd:b2:a1:9c:c7:a8:b3:ca:6a:
a2:ee:aa:0e:c2:7d:97:b4:b0:67:ae:87:7b:76:1a:
7c:aa:bc:7f:6f:46:47:af:6d:ff:69:8b:66:18:92:
69:a2:37:32:56:07:5c:04:35:55:45:ad:18:86:d1:
35:5d:69:e9:9d:d0:31:6c:ae:db:fc:e3:78:d2:dd:
f0:19:52:57:09:2a:71:83:27:85:d5:d1:da:65:9a:
ba:d4:1e:57:aa:11:c3:95:bd:6d:5a:31:ce:97:4a:
d7:24:94:bb:81:60:52:fc:a3:d5:5d:49:87:0a:c0:
66:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E9:85:48:B5:E3:AD:2F:07:C6:F6:F8:5B:07:C9:B1:00:33:FB:6C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/02f237f4-2284-4d30-8d0f-8e6c7572cffb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:42:96:32:03:2f:fc:18:0d:33:3e:14:58:15:c4:f5:c3:ce:
62:2a:87:fd:70:08:89:ae:a2:ae:3b:54:85:be:e1:d3:8b:9f:
4b:c8:07:7f:62:c3:b0:38:fc:3c:a5:ab:fd:71:32:7d:a0:cf:
32:89:47:ef:b8:1e:18:b7:90:36:16:91:23:ce:46:c6:40:b1:
b7:f7:79:c7:8b:cf:11:52:9b:50:dc:93:40:7d:23:ed:b5:0b:
06:51:fc:2b:fb:f0:65:37:2e:66:f8:91:44:11:1e:b4:0a:6a:
d3:08:f1:98:35:99:d6:87:0d:02:5a:50:57:72:98:55:e6:1a:
ec:d2:30:46:20:bb:e3:82:d6:cf:68:31:f7:4d:2c:ea:b1:3b:
0d:ba:5d:69:36:f4:bf:c1:45:41:5d:a9:4d:37:8d:5b:f9:97:
27:3a:ba:de:b4:e2:8d:97:20:da:4d:ee:32:c6:43:a0:71:d1:
6f:fc:54:b1:fb:59:43:c2:f0:c2:49:0a:5c:b5:fb:81:e1:af:
a4:88:17:c9:86:24:99:37:aa:f8:23:cd:1f:33:90:33:9b:68:
54:55:69:69:94:c3:2e:f8:0a:79:af:3a:43:0e:74:4b:a6:de:
9d:cc:d1:8e:72:eb:c5:9e:eb:6e:a0:18:58:af:64:48:f5:02:
0b:22:6f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:05:05 2025 by rpki-client