Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/03c1ff79-3c2b-4119-b393-ce9fa1fd185d.roa
File: 03c1ff79-3c2b-4119-b393-ce9fa1fd185d.roa (raw, json)
Hash identifier: PxLrqz7s+BNoOPHelZMbYT7uSWI4j6sIbsd9iZFD0Hg=
Subject key identifier: 5A:1F:80:BC:25:05:33:DC:59:EC:FE:C8:D1:3E:12:10:F2:3A:D3:A9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2D7726F58C22DB1EE1CB4DC8E75C4AC4F34155F5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/03c1ff79-3c2b-4119-b393-ce9fa1fd185d.roa
Signing time: Fri 15 Dec 2023 00:00:00 +0000
ROA not before: Fri 15 Dec 2023 00:00:00 +0000
ROA not after: Fri 19 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:77:26:f5:8c:22:db:1e:e1:cb:4d:c8:e7:5c:4a:c4:f3:41:55:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 15 00:00:00 2023 GMT
Not After : Jan 19 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:55:e2:09:e8:c5:57:9b:a4:70:94:cc:c6:e9:
f5:e6:a5:66:20:1f:77:2e:ab:a6:c5:1d:f5:91:60:
28:a2:65:1e:a1:69:9e:f2:11:32:35:83:d5:ed:16:
82:55:0b:1d:9e:fe:bb:f3:e0:0d:e2:d5:9c:c8:63:
6d:f9:00:a7:e3:c8:32:f3:20:e6:04:59:52:f7:fd:
33:c1:89:57:7e:9d:ef:5f:0d:f3:7d:99:9e:b4:e0:
4f:5b:7e:21:dd:ef:20:7e:a2:6e:cb:4b:7f:1d:cb:
00:c2:82:21:7d:b6:d6:96:86:8d:60:aa:6a:e9:a0:
0e:64:ba:be:bc:b4:11:39:fc:ee:d3:17:77:2b:04:
c3:87:dc:35:71:2a:2f:e5:6b:a6:7a:87:4c:09:bd:
bb:e7:6f:db:48:4f:37:72:dd:2d:df:3f:13:f0:39:
bb:6d:0b:d9:20:fe:7c:c3:a1:6f:61:51:58:8e:9c:
dd:f5:e3:4d:5c:8c:3d:5a:73:b0:62:b6:e3:14:44:
f1:40:38:b2:a2:68:d2:d5:46:c0:a9:1b:ab:a7:7b:
fb:5b:19:02:2c:7e:c6:bf:62:b9:52:13:d3:7e:04:
61:cf:c0:24:51:08:cf:58:59:5f:ab:24:20:3c:26:
2d:1b:67:51:a3:1a:19:ee:96:8d:1c:93:25:a1:62:
55:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1F:80:BC:25:05:33:DC:59:EC:FE:C8:D1:3E:12:10:F2:3A:D3:A9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/03c1ff79-3c2b-4119-b393-ce9fa1fd185d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
af:f5:5e:84:98:c4:47:d8:8d:6f:3d:4b:ac:aa:d9:44:85:83:
01:f2:d7:36:e1:7d:a0:cc:f0:2b:c3:9a:d6:70:07:d1:06:65:
a4:48:2c:91:f6:f4:2b:70:17:3f:d2:ff:aa:89:84:ee:01:92:
eb:03:ac:30:0f:73:8d:82:71:ec:44:68:f7:25:b1:d5:49:1a:
33:71:dd:f7:b3:55:45:91:c8:82:bc:a2:af:79:09:95:16:ba:
2f:b1:dd:72:04:bb:98:a9:bd:30:8c:d2:6b:34:67:f8:e2:84:
86:0b:d2:74:b9:50:0d:88:6a:bf:a6:32:31:8f:c8:8c:07:af:
08:57:f1:d0:26:0e:ef:43:5e:49:12:9c:f0:b1:40:94:f3:8c:
58:e5:56:23:b7:8f:63:dc:e1:05:35:9f:f4:56:8b:44:d2:f4:
fa:5a:09:37:ed:29:48:44:be:35:41:d9:30:e9:84:7d:bf:d2:
04:ae:1b:42:ee:42:23:64:7b:a6:b6:73:a1:18:c0:17:6e:9c:
a1:e7:51:5e:fe:6c:0b:d9:ff:95:01:b6:f8:c9:bd:67:20:46:
c2:b4:73:8c:76:01:02:cc:c4:67:af:af:c9:a4:36:f7:e4:0a:
86:60:6b:2b:08:39:68:49:0f:da:e1:fd:9e:e0:07:5a:fa:7a:
fa:ca:67:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:31:14 2025 by rpki-client