Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0c63582c-19b7-42fe-9a2b-63630a0ce227.roa
File: 0c63582c-19b7-42fe-9a2b-63630a0ce227.roa (raw, json)
Hash identifier: lKHbsoGmJIdHnnmvr4kUBMyu3Ix1AYL/NAkIEuwO6Eo=
Subject key identifier: FB:07:EB:F3:30:23:F1:26:7D:73:F1:6D:35:34:C4:D8:7C:CB:EF:76
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3B32C85340302922C6C8A3117F0FEF9A09A05C4A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0c63582c-19b7-42fe-9a2b-63630a0ce227.roa
Signing time: Wed 15 May 2024 00:00:00 +0000
ROA not before: Wed 15 May 2024 00:00:00 +0000
ROA not after: Wed 19 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:32:c8:53:40:30:29:22:c6:c8:a3:11:7f:0f:ef:9a:09:a0:5c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 15 00:00:00 2024 GMT
Not After : Jun 19 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:71:12:3d:92:6c:01:8d:df:65:34:9c:f5:58:
6d:05:3f:ee:26:1e:48:3d:c0:3f:5f:a9:49:47:e7:
7d:ef:19:f0:db:0b:61:3a:fe:ae:c2:bb:9f:8f:8a:
d9:9d:73:cf:53:29:c4:99:b1:d7:22:20:64:54:1c:
70:3d:a6:b9:b4:74:3d:47:9b:cf:84:87:ff:03:4a:
fc:c8:0c:84:f4:c3:de:66:92:d1:8d:df:45:e9:53:
d0:75:02:1f:0b:a3:80:3b:a4:5b:bd:0c:66:c9:c9:
86:10:ae:e4:e6:1c:44:7d:f2:71:d7:e7:77:e3:2e:
03:20:32:95:03:70:04:ad:44:6f:ea:f9:c3:7f:6e:
91:61:66:89:18:c4:35:5d:ec:eb:7a:74:59:5c:80:
01:88:81:03:a0:76:f9:65:5c:99:a0:3d:f7:07:c3:
c3:e1:ac:86:57:fc:a3:0e:34:db:84:48:f6:4c:dd:
35:37:47:1c:70:73:7f:b1:78:4c:b8:0a:a4:ba:cc:
90:69:d1:9a:e7:8d:21:71:a3:df:41:39:7d:98:2a:
fe:1c:bb:e4:de:a4:c3:59:13:f2:f7:fe:0d:2d:67:
08:52:44:02:59:41:8b:24:68:26:82:5a:5d:85:ef:
dc:5d:80:3d:bd:d9:90:48:67:12:ae:28:9b:a8:bc:
8b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:07:EB:F3:30:23:F1:26:7D:73:F1:6D:35:34:C4:D8:7C:CB:EF:76
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0c63582c-19b7-42fe-9a2b-63630a0ce227.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
71:cd:20:fc:13:f1:5c:1d:48:d3:e2:83:00:40:67:49:26:22:
24:8e:84:0b:48:2d:28:2d:8d:62:c9:40:bf:9c:d9:3e:8c:5a:
93:b1:67:3d:2a:59:89:d9:b5:02:01:a8:d3:7f:3f:95:89:9a:
ae:88:e2:d6:fe:88:f3:8f:e5:dc:d1:cf:4c:e4:c9:76:25:12:
45:8f:c7:ff:a3:26:1b:50:fe:11:2c:03:15:f7:4c:d2:10:51:
2a:74:3c:aa:e9:01:79:4b:22:68:c8:e7:d1:f2:87:8a:b1:46:
0b:14:07:f5:4d:dd:aa:02:35:e6:44:45:fe:b6:a6:55:79:ee:
92:97:c0:c4:84:73:b1:43:37:1a:75:67:8c:0e:82:db:38:11:
97:3a:85:f5:ad:78:e0:09:50:e3:c4:b2:a5:fd:d2:1c:a1:10:
6e:5a:e3:51:d2:b8:d1:9d:44:9a:72:0c:f3:1d:4a:a2:02:85:
f7:74:ff:55:85:84:5c:6b:52:e0:21:57:88:b5:0f:c8:ad:ab:
a8:ed:5a:44:81:fb:1a:b7:26:91:82:a3:4e:5d:e4:b1:7e:b8:
c5:7e:5f:53:af:fb:ab:f6:6c:b2:85:77:f7:c4:c0:c7:eb:ee:
75:ba:36:79:e9:06:24:10:81:72:9d:b0:61:6c:d3:45:8f:b8:
e2:48:1e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:16:00 2025 by rpki-client