Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/051449f8-8d20-43f1-820a-82410e4045d7.roa
File: 051449f8-8d20-43f1-820a-82410e4045d7.roa (raw, json)
Hash identifier: Y+ghn7hCLUy++CabcysIqYqcbHETVGPrqHE1n4QOmrE=
Subject key identifier: 07:B8:07:4A:48:06:5C:17:52:1D:45:E9:6F:8B:4F:58:F1:C8:26:56
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 65A2956BB3A54BAE79AB1ABF9CA285091944C3DE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/051449f8-8d20-43f1-820a-82410e4045d7.roa
Signing time: Sat 18 May 2024 00:00:00 +0000
ROA not before: Sat 18 May 2024 00:00:00 +0000
ROA not after: Sat 22 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:a2:95:6b:b3:a5:4b:ae:79:ab:1a:bf:9c:a2:85:09:19:44:c3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 18 00:00:00 2024 GMT
Not After : Jun 22 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b5:51:0f:7a:10:be:c7:e1:0d:66:46:90:df:
a2:a0:3e:de:ee:ff:cd:c0:86:e9:c3:fe:54:95:52:
99:97:eb:bc:65:67:46:a7:2a:55:1b:6a:a8:49:f0:
29:59:02:66:95:78:9c:4b:97:f2:64:b4:ea:ee:81:
a6:d6:8c:37:d9:32:f2:6d:f8:ef:47:5f:ca:b2:68:
98:d7:08:10:0b:80:3a:6f:5b:df:cc:69:8b:a3:f9:
0a:40:3d:32:a0:ff:13:70:51:a8:33:16:bc:6a:df:
13:68:f2:53:13:e6:04:df:f8:4a:15:b1:df:50:13:
c2:aa:3a:02:50:2b:e3:3c:b5:4b:68:58:3a:ce:e6:
82:87:b1:89:f5:8f:f6:a4:2a:33:eb:c2:10:9f:9f:
ef:b4:18:a9:e4:85:e5:f9:70:54:a5:4c:1b:dd:f9:
5b:d0:b7:37:0c:4d:a7:98:92:8e:31:1f:d6:9a:e3:
ef:71:f2:6f:df:e1:03:45:04:de:22:f4:ce:6f:e2:
08:3f:bc:9b:b4:37:e6:ac:9b:9e:ce:d7:4a:3e:69:
34:53:df:81:c8:35:8c:de:a7:32:89:c3:bc:aa:fc:
e6:5b:c9:da:82:79:3b:22:ff:88:64:ff:69:f7:d1:
d0:5b:90:70:1f:d9:e9:07:04:ed:11:ef:0c:af:1e:
8f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B8:07:4A:48:06:5C:17:52:1D:45:E9:6F:8B:4F:58:F1:C8:26:56
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/051449f8-8d20-43f1-820a-82410e4045d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:60:63:26:fd:80:b6:af:45:a2:98:67:85:2e:7e:94:3d:14:
05:52:51:6c:3d:3e:1b:d2:d6:9b:07:40:b2:1d:16:53:d1:cb:
df:49:aa:fd:fc:85:32:71:63:52:a1:61:35:44:e7:2e:70:7e:
9e:8a:e7:90:29:66:21:a0:d4:50:76:93:88:5d:22:98:85:c5:
7b:78:4d:a6:8b:e4:d7:1d:e5:6e:83:81:0a:08:ed:0b:a3:c9:
51:76:76:58:b9:81:9c:2b:26:19:c3:3d:cf:75:00:52:e4:7e:
e1:ed:6d:1b:23:04:0a:35:15:c4:f8:f6:c8:16:23:25:28:16:
77:ea:d6:0e:b2:42:16:2a:ca:9a:1d:df:dd:ca:a3:d1:c8:a1:
0a:20:3d:4d:11:6c:d3:34:13:99:6c:8f:2a:e6:c0:df:66:8b:
96:c5:f7:68:49:ce:2b:6e:8a:b8:f7:ad:69:8c:2a:7d:41:43:
c9:54:70:1f:c0:fd:72:50:34:0e:1a:02:6c:83:0e:c1:2e:05:
da:4f:fd:e0:6b:c7:03:f8:55:dd:72:66:26:b8:ff:d3:4f:cf:
f7:1c:e3:b3:39:9f:c7:02:83:3e:fc:48:16:4e:2e:76:7c:a8:
f8:cb:e9:6f:2b:e6:80:69:b7:75:2e:43:f2:70:5a:a0:02:e5:
3d:d2:8d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:33 2025 by rpki-client