Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/11ac6880-5afb-4e6e-8f7e-ae30cda96382.roa
File: 11ac6880-5afb-4e6e-8f7e-ae30cda96382.roa (raw, json)
Hash identifier: 2BRBbmdM4JLg5t1gUlhZ/49PkYw1Lcpe1Po62n/+sLc=
Subject key identifier: 2A:92:A4:2A:85:8A:DC:66:26:FE:09:06:15:5A:CA:9F:3A:75:D8:1F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 771BF5839CE8B7897E1542D05C9B72E865766643
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/11ac6880-5afb-4e6e-8f7e-ae30cda96382.roa
Signing time: Thu 06 Feb 2025 00:00:00 +0000
ROA not before: Thu 06 Feb 2025 00:00:00 +0000
ROA not after: Thu 13 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:1b:f5:83:9c:e8:b7:89:7e:15:42:d0:5c:9b:72:e8:65:76:66:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 6 00:00:00 2025 GMT
Not After : Mar 13 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:40:cf:5d:0a:50:3f:f5:9f:01:42:88:02:
e5:4d:6d:e3:29:8e:50:a6:3a:52:31:3f:01:51:de:
81:f0:d3:e3:03:a9:d5:12:72:d7:85:f6:9f:30:65:
f1:3e:3b:3f:1e:49:5e:fd:55:77:c1:37:43:86:e8:
75:6e:36:6e:2e:b0:c4:9f:03:64:70:11:9d:f0:35:
a3:d0:f2:da:e4:6c:28:9e:58:2c:be:43:ee:4d:47:
56:53:30:6f:46:1d:d2:6e:c6:47:b5:0c:60:28:74:
66:d5:a7:fe:17:3c:5f:f9:87:01:d1:98:39:35:5d:
b5:a9:ed:e7:8a:b9:8e:9b:d7:6e:45:f8:92:ce:01:
55:64:65:ce:cd:e7:da:14:67:c5:b4:8c:e4:23:f4:
23:77:40:c4:0d:0d:e6:0e:a8:ce:c5:22:3d:65:91:
04:71:6c:63:5d:9b:80:1f:9f:71:49:b9:1c:01:23:
02:3d:ba:68:8a:f8:ae:d0:87:16:03:bf:fa:b7:ae:
8b:66:5b:ae:9a:45:74:45:b6:f2:f1:fa:15:bc:08:
9a:81:88:d5:2e:d3:ec:ae:89:80:71:28:1f:ff:67:
f2:7a:69:bc:f0:39:07:50:b9:9d:2e:b5:e8:ff:52:
ff:3e:f8:14:38:77:32:25:e8:0e:9d:af:47:44:e6:
01:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:92:A4:2A:85:8A:DC:66:26:FE:09:06:15:5A:CA:9F:3A:75:D8:1F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/11ac6880-5afb-4e6e-8f7e-ae30cda96382.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:73:82:84:0a:50:ca:9b:ae:84:33:a1:b8:92:f7:82:6c:e6:
cc:f7:72:81:26:76:d8:63:17:28:fc:00:66:35:18:ac:f5:a7:
f1:3d:25:85:49:f6:b6:28:cb:1d:53:a7:b8:ca:3f:7c:91:cd:
d2:11:8c:01:31:e9:9a:9d:c7:78:78:aa:9c:1f:fe:d3:1d:a7:
a4:91:84:71:61:60:38:9d:19:f9:f6:5e:05:d4:4d:cf:16:11:
10:79:77:f1:78:79:17:d7:bb:98:52:38:bc:14:85:b4:cf:89:
8c:1c:17:eb:fe:34:63:1b:bd:6d:77:44:54:63:00:1a:01:93:
d5:9d:9f:3f:ee:24:e8:1b:3d:77:76:13:66:77:37:03:55:4a:
05:27:d6:97:4c:1e:9e:93:d3:48:bd:64:1a:5e:82:4a:95:e8:
c7:47:c3:d6:24:5c:63:6c:b7:1d:86:78:51:b0:84:f9:fc:16:
34:d5:f3:e3:d6:57:36:4d:f2:93:9f:70:7d:1c:3c:70:2e:9f:
43:50:b6:da:b8:8f:88:80:84:41:0a:f2:a9:bf:99:1c:bf:07:
ec:e7:af:46:c8:8c:ac:88:f8:35:c5:55:7e:43:b1:27:3c:34:
5b:20:0a:ae:42:6c:4e:32:9f:41:0e:99:9e:42:72:1f:8e:0d:
50:23:2e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:01:18 2025 by rpki-client