Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0c76ed22-3b46-44d2-b566-9e1233db38bf.roa
File: 0c76ed22-3b46-44d2-b566-9e1233db38bf.roa (raw, json)
Hash identifier: uREVeZUUWG6bQcbvQ3nKRn1YrdQmIZknegN9Lb+aL7w=
Subject key identifier: 8B:0B:BF:63:57:BA:BE:B7:49:60:C2:0E:74:46:13:FF:7A:E7:F2:68
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 17C56D0DDF8117ADB82DB6F8D925572AF65E2487
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0c76ed22-3b46-44d2-b566-9e1233db38bf.roa
Signing time: Sat 07 Sep 2024 00:00:00 +0000
ROA not before: Sat 07 Sep 2024 00:00:00 +0000
ROA not after: Sat 12 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:c5:6d:0d:df:81:17:ad:b8:2d:b6:f8:d9:25:57:2a:f6:5e:24:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 7 00:00:00 2024 GMT
Not After : Oct 12 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2d:07:7d:1b:50:52:dd:38:a4:15:dd:4b:df:
06:e9:d3:b9:7c:d8:ef:c7:79:0c:91:7f:fc:c2:1f:
02:5f:06:08:10:48:04:13:91:16:7e:98:6c:ad:b4:
08:20:bc:d2:70:cd:a3:ec:b2:9b:f7:d0:17:d2:6e:
c8:1a:d2:30:47:b5:1b:97:a2:ea:22:73:fc:37:31:
69:51:2a:f2:06:5d:20:c4:38:b5:d6:d4:9b:f8:c5:
e5:a0:6e:1e:de:4c:ad:11:a4:47:4b:73:8c:64:56:
9a:76:dd:c2:c0:c4:13:14:60:30:3b:b9:d4:ad:da:
78:e4:c1:c0:c9:9a:31:57:b5:e5:cc:23:96:dc:48:
0a:90:2d:41:0c:3a:ea:50:54:a9:b5:e1:66:71:6b:
e3:39:13:a2:c0:c3:72:f9:42:33:c7:ad:00:9e:e2:
0e:6b:54:09:48:8d:f0:d5:0b:55:e5:74:1f:32:dc:
8d:19:de:15:69:dd:63:86:c7:c6:1f:b0:64:7f:bb:
bc:45:42:5c:92:e2:22:f5:a4:06:fe:cc:89:ec:90:
45:1c:52:ff:4a:8e:6a:18:e8:0c:00:cf:7c:fa:87:
bf:35:c4:ba:94:84:4b:6b:67:b5:0d:7e:0e:49:c1:
5d:7f:e4:17:ee:d3:73:2c:1d:c7:90:17:1a:d6:2e:
a4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0B:BF:63:57:BA:BE:B7:49:60:C2:0E:74:46:13:FF:7A:E7:F2:68
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0c76ed22-3b46-44d2-b566-9e1233db38bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:65:bd:f4:b1:e1:e1:fb:50:55:db:ae:ad:1b:2a:66:fe:92:
e9:93:f7:59:e0:e3:47:a4:53:1c:08:a1:d1:e4:9a:62:d2:ec:
a7:63:f1:7a:54:22:e3:f7:91:83:ac:f4:0f:8d:9e:2c:0e:c5:
e4:9d:3c:8d:68:21:f9:27:8e:c7:27:b7:fa:bc:9f:9b:5b:74:
ae:c4:10:98:ea:eb:d2:e2:c6:81:67:14:d7:f8:30:2e:da:5a:
5b:5c:95:0d:d5:ad:38:e5:89:74:f2:40:6c:58:70:07:ba:18:
c6:51:70:2f:ee:67:1b:71:e3:4b:3b:eb:f1:0e:e7:8d:12:75:
29:12:e9:b8:80:dc:a2:de:b4:b8:77:a6:9e:52:4f:9e:66:5c:
62:5e:d5:d5:04:df:e8:e1:fa:cf:63:51:6a:07:fd:5a:1e:55:
85:84:77:7b:cd:85:e4:24:ce:aa:3d:1e:66:52:ed:8d:8a:5a:
ff:b0:1a:57:67:7c:20:f1:3c:e7:9a:d8:b5:6c:d4:9c:31:66:
a5:4e:8c:7a:a7:53:d7:4a:82:85:cb:f6:4c:2e:3d:76:e0:f4:
3d:dc:8d:eb:05:db:fa:c7:da:1e:59:b8:5d:dd:0c:44:02:cc:
72:9f:39:17:0e:b9:63:80:7e:29:bd:79:70:4b:d9:1e:8a:0d:
16:a6:16:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:34:31 2025 by rpki-client