Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/044e2f3f-ae51-40e7-94ce-967f28dc8ba5.roa
File: 044e2f3f-ae51-40e7-94ce-967f28dc8ba5.roa (raw, json)
Hash identifier: immv0QfjokTswk6JX3XqIIez9f3sK6znItoPCFxQEKM=
Subject key identifier: 80:52:9F:A8:1C:B2:63:E3:00:5F:A3:79:06:AA:58:23:D3:A6:98:A5
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 27D8690C7BC881FF8AD3296FFC21C53D1916A16A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/044e2f3f-ae51-40e7-94ce-967f28dc8ba5.roa
Signing time: Tue 18 Mar 2025 02:03:18 +0000
ROA not before: Tue 18 Mar 2025 02:03:18 +0000
ROA not after: Tue 22 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:d8:69:0c:7b:c8:81:ff:8a:d3:29:6f:fc:21:c5:3d:19:16:a1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 18 02:03:18 2025 GMT
Not After : Apr 22 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e8:01:93:14:0a:d0:97:b0:c4:57:04:0f:85:
09:4f:a2:1e:f3:52:fd:ca:02:5d:e0:68:07:90:05:
9b:8c:83:f5:18:b0:84:86:11:b1:ba:34:9f:1a:fc:
14:7c:85:9d:59:51:5c:a2:cd:3c:02:b0:72:5c:5e:
e4:33:1b:ae:59:c3:98:f9:74:bd:21:eb:cf:82:7a:
ab:4e:8d:9a:a5:dd:a0:79:5d:76:51:c6:aa:31:98:
ae:29:6b:ce:1b:4a:9e:27:f7:df:1f:be:5d:9a:36:
f9:98:24:8f:b8:6d:65:ca:25:a4:9b:4c:42:39:a1:
79:3e:ef:b5:93:c5:b7:6f:1a:8e:a1:64:bd:86:78:
67:b9:64:2e:db:b1:5b:76:80:bf:9b:66:10:a6:1f:
41:99:69:5d:9b:d0:9f:84:c4:16:a7:db:9e:4c:28:
df:f5:94:57:66:cc:53:6e:76:c7:43:2c:f3:17:59:
23:01:0e:d6:d9:90:24:65:62:51:79:68:36:7d:1f:
7b:2e:a9:53:7f:99:a4:1e:ce:c8:fb:fe:f1:ba:68:
31:8f:6f:41:94:ce:ab:26:11:ab:00:75:66:cc:d7:
f8:36:1d:3a:13:be:4a:01:b1:9d:e1:03:8d:82:86:
b1:fb:38:73:14:20:8e:a7:59:41:66:c7:6f:d4:02:
49:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:52:9F:A8:1C:B2:63:E3:00:5F:A3:79:06:AA:58:23:D3:A6:98:A5
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/044e2f3f-ae51-40e7-94ce-967f28dc8ba5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
05:ad:cf:61:49:29:10:e1:d8:03:37:aa:d0:c2:fc:b6:81:e4:
7d:33:23:f7:00:9e:77:05:ee:69:c4:6f:99:4f:8f:25:2b:6d:
e2:37:d2:32:92:71:b1:cc:0c:d9:47:16:a8:ab:ec:6a:12:ed:
81:8d:c1:d2:22:28:0a:e5:a2:36:c5:f0:c0:7d:d0:75:32:18:
3e:8f:e1:70:f1:af:b8:be:7c:04:d6:fd:6e:cd:b0:e6:ee:31:
bc:27:7a:c4:09:73:29:c3:71:b3:91:89:45:12:c8:af:3f:dc:
fe:36:66:78:d8:d0:1f:e1:4a:75:f3:4e:fe:20:8c:14:f8:f2:
ee:00:72:f2:41:02:0c:fc:86:3b:f2:a0:bd:94:f8:28:ed:23:
82:0e:40:57:70:05:0c:55:2f:b5:34:82:98:9a:92:4a:3c:b4:
aa:4f:6f:e6:15:bf:97:ad:93:70:49:ea:fb:0c:6a:ad:e3:a0:
8e:41:47:68:95:16:9c:21:b0:90:12:b4:7c:2d:f7:76:f7:85:
4b:63:f9:93:f3:37:ef:98:13:93:40:10:1b:dc:50:7a:0b:74:
e5:82:50:91:8a:35:40:ba:66:53:97:3e:ec:dc:cf:eb:39:4c:
13:a0:7d:91:6f:83:d6:6e:f9:8b:b2:29:a5:ff:ab:c7:d6:09:
74:a4:6f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:43:43 2025 by rpki-client