Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0d267449-fd5f-4dc5-86d3-f47bff857e70.roa
File: 0d267449-fd5f-4dc5-86d3-f47bff857e70.roa (raw, json)
Hash identifier: HSYyeQnLHRkuVtXFt54zx2CJUOjjDoU+a/CMchKezBI=
Subject key identifier: 8B:B5:91:05:7D:23:02:3E:C3:88:F3:C8:C5:4C:05:45:14:A4:77:27
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 17B2964D627230690406C5279A5872AB3F50E6CF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0d267449-fd5f-4dc5-86d3-f47bff857e70.roa
Signing time: Tue 20 Aug 2024 00:00:00 +0000
ROA not before: Tue 20 Aug 2024 00:00:00 +0000
ROA not after: Tue 24 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:b2:96:4d:62:72:30:69:04:06:c5:27:9a:58:72:ab:3f:50:e6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 20 00:00:00 2024 GMT
Not After : Sep 24 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:df:8b:31:c8:74:1c:bd:b6:54:4f:92:fa:53:
23:1a:3b:e2:78:0d:f8:dc:c2:66:72:5f:7a:a7:bb:
7d:98:7d:77:d3:75:0b:11:db:fc:a5:b2:b7:35:ff:
86:0a:7b:99:17:81:c0:ef:a0:cd:85:2b:4b:8e:9d:
23:f5:55:f2:fc:eb:73:b3:62:10:28:be:37:f1:bc:
56:46:8a:13:3c:b6:89:40:af:b4:7f:72:ef:d6:55:
69:a5:92:e3:0a:27:43:c9:6b:bf:b4:4e:d3:e4:eb:
78:a3:b2:21:b6:1a:fa:d5:1d:b5:56:03:03:53:26:
92:67:7b:0c:b6:42:7e:2c:87:d7:e3:88:44:98:f8:
0f:3b:9d:96:8f:c9:7b:11:29:b5:58:44:93:a3:69:
c5:aa:f7:0b:f0:fd:d8:10:74:d0:7f:8a:29:88:8e:
73:3c:d9:08:ea:b6:c1:74:1c:70:09:c0:b0:ff:32:
47:d8:c5:8c:67:25:af:83:10:8f:cc:a2:fc:64:9e:
29:08:b6:83:b2:1d:e3:b2:15:4d:e9:77:5e:ca:46:
a0:56:4f:96:9d:94:90:3f:7f:8e:02:2e:52:43:19:
ed:2d:3b:8a:bb:4b:28:ea:89:40:1b:d9:40:fe:39:
cd:05:1f:4f:cc:f4:ab:07:0a:f7:78:ad:0c:21:81:
67:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B5:91:05:7D:23:02:3E:C3:88:F3:C8:C5:4C:05:45:14:A4:77:27
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0d267449-fd5f-4dc5-86d3-f47bff857e70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
35:31:e1:43:35:74:bc:bb:6d:1d:6e:e5:78:f2:ac:a5:49:48:
21:cd:b8:0d:31:cb:94:6f:d8:29:67:99:47:78:26:3b:b7:91:
6e:4d:c3:08:ab:95:40:12:d0:63:f4:fa:74:14:88:36:c5:73:
59:f8:7d:20:3d:30:39:10:d9:86:9d:8d:a0:1d:1c:7e:5a:03:
84:8e:4f:62:54:dc:9b:4e:71:95:4b:b3:b3:f0:76:2e:57:03:
f9:21:59:ef:34:54:31:17:58:9b:ee:a8:80:62:b7:64:7b:e6:
2a:18:cd:bf:93:d8:82:b6:42:fd:b0:73:5d:38:1c:b9:0b:81:
68:fd:b6:63:9b:79:c6:ac:c8:ad:07:0f:50:26:3c:f5:08:52:
b9:90:9e:cb:52:04:36:4b:d4:99:33:9a:26:c5:e8:8b:73:18:
76:c5:7a:6d:be:f1:51:27:2c:37:68:9a:f4:35:85:86:4d:ed:
0a:60:dd:5f:9a:aa:2f:35:07:b5:4d:36:6d:04:01:19:1b:72:
84:b4:86:eb:4c:60:5a:f3:c9:ac:d7:25:01:b3:88:78:40:51:
9f:21:0b:f6:b1:65:22:36:f4:cf:c5:db:41:e8:6e:8a:c8:72:
4c:30:96:5c:d3:a5:94:72:f5:e6:5e:36:a6:be:d1:32:e5:59:
31:8b:1d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:41:27 2025 by rpki-client