Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/099ac998-e715-4795-8632-cd9f6d4ec4db.roa
File: 099ac998-e715-4795-8632-cd9f6d4ec4db.roa (raw, json)
Hash identifier: MURPNIQRDXD0SHYVXVzbLpv8zx+RxrKNSOrzjaxRuNc=
Subject key identifier: 6D:69:A1:0A:4E:22:02:7B:A1:12:8A:DF:5A:E8:2E:7B:85:D8:FA:B1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5F1B518B71B49B748C86FE5A9DD2F9E68A954D06
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/099ac998-e715-4795-8632-cd9f6d4ec4db.roa
Signing time: Fri 10 Nov 2023 00:00:00 +0000
ROA not before: Fri 10 Nov 2023 00:00:00 +0000
ROA not after: Fri 15 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:1b:51:8b:71:b4:9b:74:8c:86:fe:5a:9d:d2:f9:e6:8a:95:4d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 10 00:00:00 2023 GMT
Not After : Dec 15 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a2:c6:1f:d0:ca:c9:b8:d4:75:79:9d:72:87:
ef:3b:88:bd:a1:7a:06:5e:c8:74:a4:31:74:13:21:
dc:e1:e8:e6:72:41:09:2f:6a:72:79:f7:32:40:a6:
7d:b1:ad:89:a1:8f:7b:93:8c:fe:47:16:bf:03:69:
83:39:5a:1e:80:52:dd:f9:85:98:0c:45:1a:34:9e:
9e:81:49:62:dd:cf:75:f8:9e:48:08:ca:fc:dd:23:
06:c0:61:ce:bf:78:0d:ff:cf:94:dd:e7:f7:bb:d9:
76:5e:b9:a2:02:84:80:aa:34:c0:8c:ae:82:ce:4e:
93:64:88:76:83:08:b3:8e:24:bb:ee:21:f5:ac:93:
24:66:34:0c:64:e2:f8:ce:d2:e2:2d:57:30:47:d2:
cf:a4:db:74:a0:de:7b:5a:e9:eb:0d:48:af:64:f1:
ac:ee:15:19:91:47:3d:bc:cd:89:55:82:cd:c8:55:
d2:19:2b:b2:02:fc:4e:2f:1d:23:3d:23:c7:16:0b:
c1:b6:3c:86:b6:33:d1:a6:ac:51:3b:1a:17:4c:7f:
56:18:0f:d0:36:d2:37:b7:42:07:94:eb:93:6d:74:
4e:d0:c6:c3:bd:c0:61:d8:b4:2d:e4:e6:66:9a:28:
d8:8f:d4:a8:a4:b7:38:60:d5:87:8d:af:22:db:46:
c4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:69:A1:0A:4E:22:02:7B:A1:12:8A:DF:5A:E8:2E:7B:85:D8:FA:B1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/099ac998-e715-4795-8632-cd9f6d4ec4db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:0e:00:b1:c1:af:b3:da:e0:9f:33:32:7a:ac:11:21:59:3e:
17:05:8e:67:af:b2:9c:e9:3a:d9:26:13:8b:b5:8c:16:34:74:
bf:73:51:8d:72:ba:4e:d6:1e:d9:69:99:b8:1d:9d:36:19:89:
be:18:34:2f:f8:30:d5:a3:94:fd:07:3e:b2:7d:53:ca:a6:eb:
be:a0:eb:03:ff:f3:49:d1:3b:49:61:b0:2b:5e:fc:2e:d5:2b:
4c:a5:a8:ed:8e:6b:ef:34:1e:59:58:36:35:69:9d:d2:a7:62:
de:a3:58:b3:36:a3:b4:19:3d:08:25:d7:47:45:d6:12:4f:95:
82:d6:78:d3:4a:17:57:a5:3c:53:3b:71:39:37:f2:40:29:96:
64:42:ef:58:d0:ee:d7:a2:97:e8:8e:fc:52:08:45:5c:68:88:
9b:56:f0:de:4a:0d:48:e0:56:9a:f4:c3:2b:39:6d:dc:5a:d7:
22:fd:89:dd:03:ea:b9:7e:49:5d:f5:0b:a3:d8:9d:2f:ef:1b:
41:e0:12:7c:d3:1b:de:47:2a:3e:47:ed:0b:6b:37:da:eb:46:
10:dd:bb:ae:5d:23:8a:f6:c5:85:a5:18:4a:09:7c:4b:0f:dd:
2d:8e:7d:30:ea:56:07:f7:af:53:80:42:e8:b3:88:c7:7b:58:
b8:9c:42:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:39:14 2025 by rpki-client