Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0b8527e8-fd9e-4971-aa87-a6ddf306db62.roa
File: 0b8527e8-fd9e-4971-aa87-a6ddf306db62.roa (raw, json)
Hash identifier: gB9y8UHdiJoeGtRmZ5bmgTEhyIobScAFVm0YrMJMWFk=
Subject key identifier: A6:E0:14:D6:DD:5E:AC:3F:09:EA:34:5B:34:97:C5:B8:29:E4:CC:2D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3FD12C42BCACC762979441ABD6DB08699F598D22
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0b8527e8-fd9e-4971-aa87-a6ddf306db62.roa
Signing time: Sat 24 Jun 2023 00:00:00 +0000
ROA not before: Sat 24 Jun 2023 00:00:00 +0000
ROA not after: Sat 29 Jul 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:d1:2c:42:bc:ac:c7:62:97:94:41:ab:d6:db:08:69:9f:59:8d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 24 00:00:00 2023 GMT
Not After : Jul 29 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:15:02:01:4a:aa:5f:c4:2f:50:8f:d2:1b:4b:
95:82:56:82:5a:8c:15:92:fe:12:83:06:c4:a0:2d:
2a:e2:86:6a:3f:55:e0:73:1e:e7:82:7f:df:88:a1:
0f:5f:80:aa:0b:2b:ba:ff:70:f0:1c:4a:2b:9c:2c:
e6:c7:8b:29:bf:78:26:f8:a3:01:bf:57:70:15:6f:
25:30:7f:d9:1b:a9:04:c4:a5:f9:05:ce:22:af:40:
0d:1e:ad:05:9b:70:3d:17:ff:12:79:85:a9:01:f0:
9f:90:bb:33:c7:6e:48:9d:fb:a7:42:ce:f1:06:d8:
fd:84:16:6c:08:c3:e9:7b:14:46:36:54:9a:84:df:
00:8f:eb:2c:1f:86:22:96:ee:a4:20:67:35:98:7c:
19:2f:a2:ec:43:b6:50:22:ab:17:b3:3a:0d:2e:17:
4e:e8:74:74:76:92:08:11:97:9f:aa:76:6d:2f:94:
e9:3d:c5:85:1d:3e:6d:d5:62:b3:f3:e9:fd:0b:c2:
2d:83:0c:14:4e:53:59:33:86:13:a4:0d:84:66:67:
b3:a6:c8:fe:a3:b6:79:5f:85:ae:f6:0c:de:a6:0f:
d6:eb:ed:0b:45:80:69:a1:bb:39:da:27:c7:ea:7f:
5c:21:0e:cf:b2:ce:b1:d2:af:69:7c:12:e2:d6:af:
d5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E0:14:D6:DD:5E:AC:3F:09:EA:34:5B:34:97:C5:B8:29:E4:CC:2D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0b8527e8-fd9e-4971-aa87-a6ddf306db62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
14:59:00:7c:84:f3:20:c3:26:7c:60:f4:e2:db:80:f1:ea:5a:
e9:57:15:0b:b2:32:d7:2f:ff:84:ae:1c:44:8e:98:05:56:05:
ae:16:db:ec:b4:79:ae:84:97:ab:4a:7e:4a:e4:8f:d7:32:7d:
74:bd:0f:e4:dd:9f:45:47:2e:d9:ae:6a:61:0b:27:86:83:57:
30:21:a4:62:06:4e:e4:85:08:1e:12:15:12:64:2a:43:6c:f2:
fd:a9:f1:64:36:c5:c7:da:6c:ed:5d:b9:f8:5b:5b:ac:67:c8:
11:5e:24:8c:9f:c4:c5:a0:a7:e4:61:33:76:77:cd:c9:98:df:
a3:11:66:bf:ee:8a:eb:cf:d7:35:b9:98:b9:9c:2e:80:10:ab:
8a:b6:66:ff:04:1f:12:e0:8a:36:8a:7e:f4:e6:c3:3f:7e:98:
3b:a3:4c:4b:81:07:94:3e:3e:ed:17:ff:c9:ea:c6:70:9f:a3:
32:6d:5a:ac:84:2f:82:b5:58:00:ed:3d:1c:41:30:b3:89:0e:
fe:66:9a:0b:57:bf:6a:e2:dd:4b:d3:bd:ae:24:13:03:17:26:
eb:cf:27:0f:a0:dc:6a:81:11:55:99:0b:91:8a:f1:8b:e6:4d:
19:15:e5:0d:4b:f4:58:c6:ae:1e:c4:16:86:a3:d1:9e:ea:14:
1a:ba:33:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:47:15 2025 by rpki-client