Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0ffcfcd3-9624-4e28-94e4-07b3fe9da00d.roa
File: 0ffcfcd3-9624-4e28-94e4-07b3fe9da00d.roa (raw, json)
Hash identifier: nE1fCi0PaUO6xyqKUsNMp8AeUJr+oGoUdLF2GrjF1Y8=
Subject key identifier: 11:19:8D:1C:B7:4A:55:85:B6:0C:79:AD:CF:C7:5C:DE:A4:18:73:5B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 50C725002840B64A39B76254E049F2D6E54FC8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0ffcfcd3-9624-4e28-94e4-07b3fe9da00d.roa
Signing time: Thu 03 Aug 2023 00:00:00 +0000
ROA not before: Thu 03 Aug 2023 00:00:00 +0000
ROA not after: Thu 07 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:c7:25:00:28:40:b6:4a:39:b7:62:54:e0:49:f2:d6:e5:4f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 3 00:00:00 2023 GMT
Not After : Sep 7 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:8a:2a:3e:3d:d3:dd:c5:a9:c3:1f:05:f2:
25:41:d3:eb:64:f1:46:c0:47:e3:d3:ea:ab:59:66:
bf:7a:c3:34:11:26:c3:62:98:9b:4d:38:46:2c:9e:
59:3f:fb:f7:32:82:4e:66:62:ed:50:47:ca:3e:15:
c7:24:42:2a:e9:51:14:98:f8:15:e0:53:7b:b1:60:
4b:90:07:db:78:77:79:f5:7c:ff:83:77:aa:cb:bc:
bd:a9:37:d9:46:11:90:8b:4a:39:0a:13:d9:e4:5c:
9b:fa:17:0b:bf:ac:90:0f:7f:fa:3c:24:9d:46:cb:
1c:b4:be:6d:4a:e4:68:9f:12:1a:03:d9:65:17:d9:
95:56:ed:3a:fb:03:35:e6:5b:0f:20:14:6f:ea:2a:
36:30:7a:74:b4:23:5a:8b:09:22:94:fe:b2:2e:0b:
68:97:35:e1:3b:72:4a:b7:ad:84:69:a4:ac:88:8a:
b9:36:40:88:4c:e2:9a:26:05:12:5b:c5:d2:44:a3:
21:17:bc:96:7d:a5:6c:c2:ee:d0:c1:ff:67:84:b0:
a8:d7:70:ba:9a:01:a9:52:57:dd:40:41:c5:dc:aa:
cf:6c:d1:96:2c:1f:af:93:a0:97:e0:49:97:d8:d6:
a8:dc:98:77:b1:7e:5e:04:34:56:2c:b6:fb:10:d8:
ce:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:19:8D:1C:B7:4A:55:85:B6:0C:79:AD:CF:C7:5C:DE:A4:18:73:5B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0ffcfcd3-9624-4e28-94e4-07b3fe9da00d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
37:7b:24:d0:8d:54:1d:32:a2:53:c9:1b:71:2b:2e:85:71:2a:
23:96:63:bb:15:4a:7b:18:0f:9b:a4:aa:e9:2b:b0:a2:eb:19:
00:a5:04:f6:35:ad:64:3d:8b:11:75:05:35:d4:44:b1:23:9c:
4a:01:94:6a:d8:30:e5:9f:a3:e9:bf:fa:98:70:c3:ca:48:4f:
92:17:97:a6:43:f8:fc:e8:77:50:41:0b:c4:f3:96:01:ea:a3:
e5:83:1b:c9:e5:09:d6:72:6f:ea:ca:52:fe:4c:5a:7b:8d:56:
42:93:48:86:aa:de:9f:4c:0f:41:7e:29:9b:b5:c2:3e:cd:bb:
72:32:7d:46:bd:46:03:30:64:a8:73:19:f0:e8:c3:71:32:6c:
1a:c5:3b:18:d7:14:c4:d3:92:68:ef:a6:06:ea:f4:72:a7:8f:
a9:86:f7:d2:33:d8:80:bc:09:2f:a5:a3:bb:5d:ae:d3:b6:06:
4d:33:ed:93:0c:5c:00:b1:a1:76:30:0b:c5:fd:87:39:de:81:
c5:04:cc:1f:5c:28:3b:4d:04:1e:62:86:2a:a8:45:cf:21:29:
be:cf:22:a0:60:0f:1c:b5:14:8b:7b:c0:25:5d:0a:99:49:ea:
28:88:b5:38:3c:aa:5c:5a:d8:01:ea:ca:4a:83:de:01:01:b1:
2d:32:ae:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:58 2025 by rpki-client