Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/05d3e9bc-62cb-419a-b736-89887186ff55.roa
File: 05d3e9bc-62cb-419a-b736-89887186ff55.roa (raw, json)
Hash identifier: 3h2Dcm6XsGIfXNayXXTCeJPOrICu28WavkNl4HqAoFg=
Subject key identifier: 8B:2A:C1:8F:95:11:12:33:8A:59:62:01:1A:8D:92:9D:B1:AB:C4:2B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 09DC2C8769CA7D84A8879CB391AE871E2CD6CC73
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/05d3e9bc-62cb-419a-b736-89887186ff55.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:dc:2c:87:69:ca:7d:84:a8:87:9c:b3:91:ae:87:1e:2c:d6:cc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:aa:3a:65:d3:a4:95:31:7f:35:90:36:08:80:
84:71:a1:3e:1f:1e:ac:6b:1f:78:9d:f1:46:87:20:
43:79:83:db:ba:fe:7c:12:54:3a:bb:e6:3a:ef:5d:
b6:0d:94:3b:71:fe:78:e6:58:f4:d0:b6:94:53:5d:
2b:1b:9d:8f:34:9e:4d:41:f3:74:ca:dc:7b:75:e4:
6b:1c:ef:23:00:88:d8:d6:63:40:c9:86:d2:b3:d9:
70:c6:4e:16:2f:4e:43:3b:f5:e5:0f:10:29:ef:74:
b2:75:6d:b0:7c:2c:57:d1:b8:33:97:12:03:10:05:
65:50:39:b6:c4:9f:97:a6:f7:bf:fa:57:77:db:65:
ed:c9:38:c3:f5:4c:a5:53:7c:31:f9:f9:98:a4:af:
62:7b:c4:2d:40:00:34:38:11:ff:0d:84:8c:89:54:
9d:93:97:71:ee:b8:7c:6f:cc:0b:e5:7e:7f:dd:e0:
71:0a:36:a5:e8:60:70:fb:20:cc:a7:15:42:f7:77:
3c:b3:15:56:ca:0f:99:7a:1f:79:45:d1:42:21:97:
9a:45:d7:ac:71:98:1d:97:ae:aa:e5:4c:1d:e4:27:
13:81:8f:e5:f9:40:ca:e6:c1:21:ac:4c:56:0f:71:
1d:6a:12:15:22:c2:fc:82:ac:c6:ff:95:a7:8a:11:
6d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2A:C1:8F:95:11:12:33:8A:59:62:01:1A:8D:92:9D:B1:AB:C4:2B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/05d3e9bc-62cb-419a-b736-89887186ff55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:72:3d:fc:86:91:e2:a2:22:39:fa:02:8e:33:94:bd:11:5c:
0d:66:5f:02:fb:a0:01:da:89:48:1f:39:01:56:82:89:cb:ea:
e8:a8:ac:ec:01:f9:55:0b:46:23:3a:a2:95:c0:0c:71:2f:47:
d4:33:6e:47:f9:f8:71:b8:bb:2e:5b:66:0a:8c:c4:c7:3b:63:
08:84:c9:95:ee:be:8a:6b:a7:87:fc:df:c1:34:93:82:54:6a:
1c:94:47:6c:b2:ee:38:66:a3:ad:6e:35:f6:7a:bb:fd:bb:ec:
1f:b4:09:8d:af:e1:25:e3:02:ee:bb:03:85:31:79:7a:0e:6f:
f4:53:45:d7:b2:d9:0b:0b:46:72:c9:24:7d:55:be:89:77:ec:
e7:30:84:2b:3e:f7:2e:93:80:77:9a:2f:a8:12:8d:9a:93:35:
63:9d:37:da:b2:50:45:bb:50:56:af:68:03:04:9f:33:10:b0:
55:94:68:98:e3:4c:3d:a7:4d:18:de:7a:87:81:da:64:63:1d:
91:7b:a8:66:72:1d:4a:32:e2:8a:93:db:64:f4:c7:77:47:63:
1e:9a:f1:19:b7:c2:ea:fe:ee:d4:ae:31:85:d6:c1:d0:13:17:
0c:d6:ed:b8:27:c3:53:7e:33:2c:71:7e:23:ac:b8:74:f6:67:
9f:38:2d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:31:02 2025 by rpki-client