Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/03fd50a1-397b-4ca5-a284-a1c86abfbcfd.roa
File: 03fd50a1-397b-4ca5-a284-a1c86abfbcfd.roa (raw, json)
Hash identifier: fcm7iym7AU3YaT7Y123zObb8qMHD3X2zdoIa7n6SFGY=
Subject key identifier: 63:79:36:09:3C:C7:DD:05:33:3D:01:B5:42:9C:D4:C6:04:87:4A:2E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1A9762647735DA079B9E412E8535E53070F8F048
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/03fd50a1-397b-4ca5-a284-a1c86abfbcfd.roa
Signing time: Tue 01 Oct 2024 00:00:00 +0000
ROA not before: Tue 01 Oct 2024 00:00:00 +0000
ROA not after: Tue 05 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:97:62:64:77:35:da:07:9b:9e:41:2e:85:35:e5:30:70:f8:f0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 1 00:00:00 2024 GMT
Not After : Nov 5 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:17:84:a5:19:6d:f7:23:92:84:60:b2:d8:aa:
d1:41:02:0f:73:1d:5a:b0:e3:bb:4c:15:5b:b9:55:
83:73:fd:6f:f3:02:9e:45:c8:21:b4:8c:5a:a7:98:
72:02:08:20:3b:c9:83:fd:ae:7d:06:21:9c:87:26:
a6:b9:ab:15:78:8d:75:d9:ba:fb:ca:36:d7:ef:0f:
ee:a9:84:e3:58:b3:65:12:23:ad:b4:87:27:f4:af:
67:61:2b:ac:ee:31:d0:2b:29:9e:3c:cf:a9:78:dc:
a5:b6:02:96:9a:fb:ba:c7:d4:17:43:54:8b:a2:3c:
76:fb:91:60:6a:49:47:5d:99:5f:3c:57:2f:ca:c2:
e7:19:ce:43:48:10:9a:70:27:2b:70:44:0b:fb:5a:
6f:73:b5:69:b3:8d:f2:21:dc:fa:bf:b0:dd:74:ae:
1e:6f:88:17:97:f9:52:57:95:2b:64:3b:99:c1:39:
60:20:1b:bf:92:e5:23:21:f8:44:0b:62:90:50:3d:
75:fb:1f:f1:3f:02:26:31:2a:37:52:74:4b:b5:03:
4c:bb:20:fa:ee:60:50:65:e9:5b:f5:99:1d:7b:9b:
b3:3f:80:a4:2b:1f:0c:51:74:21:77:e3:8b:eb:a6:
e7:b4:17:8e:e4:b5:5d:77:da:e1:a6:52:8f:6a:2d:
bd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:79:36:09:3C:C7:DD:05:33:3D:01:B5:42:9C:D4:C6:04:87:4A:2E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/03fd50a1-397b-4ca5-a284-a1c86abfbcfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:25:48:cd:d2:db:77:c5:09:5e:d7:4b:90:9e:42:37:14:d2:
25:d3:de:a6:d8:bd:2c:98:b0:8f:54:7d:ed:32:8d:40:78:00:
9f:41:ec:e3:1e:ed:cd:2a:e3:01:95:da:48:3e:17:b5:e7:f5:
da:dd:8d:b1:59:d3:66:ed:bf:69:8f:a4:d2:3b:b4:49:3f:a8:
31:26:b5:ac:06:f5:b8:22:4c:2f:d4:76:7c:a5:f5:86:c4:a8:
3c:49:e0:5a:78:99:60:02:30:d4:64:a9:bb:15:29:e1:eb:59:
c7:18:a4:77:08:42:42:0a:ee:a2:c3:7d:41:7f:33:ca:51:b7:
bd:38:14:85:51:93:9c:d0:3f:95:3a:11:cf:29:1d:d4:68:c5:
59:d4:f3:52:e0:2d:a7:c8:2e:aa:51:1b:b2:36:84:3c:0d:35:
1e:5d:dd:92:28:af:b5:02:cf:69:a4:50:10:06:2f:e6:16:75:
c9:ee:e4:01:a6:27:be:80:f6:c0:30:bd:89:14:ae:53:0c:77:
12:66:48:bb:d3:68:a6:df:56:9a:ad:3a:85:4b:b5:4d:7a:55:
3f:7b:6d:da:08:63:c4:5d:72:0e:3c:b5:2d:96:65:c7:1a:91:
1f:5f:09:8f:95:bb:e5:f9:34:81:8e:e5:50:de:41:0c:4d:b4:
10:db:9f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:20:17 2025 by rpki-client