Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0c1cb00f-8801-4875-924c-75e5e1722c5b.roa
File: 0c1cb00f-8801-4875-924c-75e5e1722c5b.roa (raw, json)
Hash identifier: a+D6sSawasJXv1WgiIUIxGau5hR7wZrIFD7haJWJMEQ=
Subject key identifier: 25:F2:FC:A6:F9:A1:25:4B:51:D4:DB:2A:34:0D:7F:02:73:DC:44:85
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6EB09A2B550C1BB42914EDD8055C198871711F67
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0c1cb00f-8801-4875-924c-75e5e1722c5b.roa
Signing time: Fri 09 Aug 2024 00:00:00 +0000
ROA not before: Fri 09 Aug 2024 00:00:00 +0000
ROA not after: Fri 13 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:b0:9a:2b:55:0c:1b:b4:29:14:ed:d8:05:5c:19:88:71:71:1f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 9 00:00:00 2024 GMT
Not After : Sep 13 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ed:4f:76:6e:e9:78:cd:71:5c:4a:ad:7c:77:
2a:9e:21:d8:6e:3c:d2:20:3a:3d:61:aa:f1:a6:62:
bf:95:ba:d0:71:d0:1c:33:85:08:06:8a:62:1f:06:
8b:35:8e:ac:07:47:9c:25:69:83:12:70:44:a7:03:
0b:e9:92:a0:77:b3:3c:bf:74:a3:d5:9a:6b:bd:4f:
71:4c:01:ad:39:25:1d:0b:25:26:0a:41:25:4b:ce:
91:4b:f1:13:be:1f:0c:ae:5b:03:8c:2f:3c:f1:43:
38:99:d4:b6:26:cf:d8:68:3b:e7:3c:da:b0:a6:6e:
4e:2c:ea:39:eb:8b:f6:2f:6c:2d:75:a8:3c:fa:3f:
75:d0:9f:c6:7a:8a:ef:57:3d:77:a3:bc:e6:12:c5:
87:5a:ac:00:a9:2d:36:48:97:b7:3d:31:a0:8c:36:
2c:d7:ae:39:97:43:d3:2e:c1:fa:d3:d1:68:f3:ed:
f8:01:b5:70:6d:12:87:f8:66:4b:0e:9f:59:b6:af:
a3:b5:99:42:c2:e4:e3:64:26:2d:54:82:2f:5e:92:
a6:9e:b0:cf:dc:f9:b1:52:98:17:8e:39:ca:3d:f4:
14:45:3d:b0:82:94:79:c2:b5:ed:ea:43:24:5c:42:
ac:39:b2:54:e7:03:2b:63:25:b4:a1:67:6e:3d:9c:
12:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F2:FC:A6:F9:A1:25:4B:51:D4:DB:2A:34:0D:7F:02:73:DC:44:85
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0c1cb00f-8801-4875-924c-75e5e1722c5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
30:4c:5f:f3:85:a5:a4:1f:7a:c5:d1:2e:57:27:79:33:57:85:
0c:76:cf:9d:86:d6:0c:81:a1:bd:f4:8a:d6:1b:77:ab:c7:d1:
84:79:71:bc:bd:32:63:b1:19:95:48:08:3e:e4:dc:b6:b4:c7:
62:9d:94:fc:cd:c3:5d:7a:d1:f1:5c:af:60:0e:cd:65:91:b7:
72:a6:8f:c8:8a:81:de:ef:fe:c5:74:79:d9:61:4c:f3:19:90:
21:37:4c:f0:cc:92:28:bc:4a:2f:5b:68:c8:2a:a2:a1:9c:3c:
d1:c5:2f:dd:c5:f5:80:b2:5f:93:2c:c6:4f:92:b9:e7:ae:1e:
49:47:b6:0b:f0:31:a1:5c:ff:8d:6c:03:75:da:8f:5c:e5:7b:
c4:6f:40:35:3d:38:77:bc:95:24:46:16:f3:aa:a0:28:91:b9:
77:19:bc:cd:78:db:d3:cb:d0:ff:5a:b1:d5:0d:36:ef:a1:5c:
0d:40:82:6e:1f:0e:01:ca:6f:bf:cb:b6:29:03:7b:04:68:b2:
07:87:dc:16:d0:83:e2:97:20:6b:83:6a:0d:23:46:2a:e6:f8:
b9:84:28:a3:9d:87:d5:55:40:6f:b6:a8:72:68:d9:49:6c:3e:
3a:1f:5e:ea:dd:70:c8:e1:b4:36:80:e9:0a:ca:9d:d2:65:9a:
89:ab:6a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:38 2025 by rpki-client