Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17957631-7b5e-4b1d-b844-7e2d19ee01f2.roa
File: 17957631-7b5e-4b1d-b844-7e2d19ee01f2.roa (raw, json)
Hash identifier: l727fR3WM1FSh9RvUb99AA+MAhQyC1Jk7OdFhi6to0k=
Subject key identifier: 5E:F8:FE:11:32:71:55:8B:EE:78:A7:43:3A:D6:6D:76:FB:8B:F8:E0
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 24CB23F171CC5D3B47B4277D2B3AF829C645054E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17957631-7b5e-4b1d-b844-7e2d19ee01f2.roa
Signing time: Mon 24 Mar 2025 17:03:16 +0000
ROA not before: Mon 24 Mar 2025 17:03:16 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:cb:23:f1:71:cc:5d:3b:47:b4:27:7d:2b:3a:f8:29:c6:45:05:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 24 17:03:16 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:b6:3e:75:a7:d0:93:b7:fe:79:94:ce:db:
ac:97:f3:9b:51:c0:65:36:29:3f:a8:e9:92:79:13:
17:9c:14:43:24:42:ed:d2:8c:94:ca:ea:9c:f3:f2:
78:e6:42:1f:d5:d6:a9:4c:c4:35:75:d0:41:db:92:
5d:97:86:e9:2c:f9:2b:31:8c:00:72:f2:eb:9f:c8:
45:f7:6f:4f:0e:57:b0:d1:f4:37:64:47:42:7c:05:
bc:51:be:99:bd:26:90:f0:4e:8c:72:a1:73:79:ee:
f1:29:71:c9:7a:cd:94:b9:b9:16:4a:0d:28:05:80:
3b:9a:d1:7a:96:bf:4d:87:82:44:98:66:ee:15:9e:
7a:fe:ec:1d:e6:e8:22:6b:a0:27:ad:75:cd:e9:70:
0f:c1:f1:86:25:40:2c:c7:95:78:8c:04:16:ee:e8:
d7:2d:d3:f3:46:4b:76:e5:60:db:35:4c:d0:7c:00:
c0:93:6b:0a:2e:0f:de:82:4c:4a:52:13:86:b4:c4:
78:5c:e6:a6:05:6c:1b:be:9c:9c:8a:62:a6:8b:85:
00:30:83:de:51:5a:bd:83:4b:13:37:31:a2:4c:e7:
8e:7e:39:32:07:58:dd:64:f1:61:b6:d0:c2:52:b5:
4b:1b:d8:69:b0:bd:53:61:71:9b:c1:b4:10:a8:e9:
e3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F8:FE:11:32:71:55:8B:EE:78:A7:43:3A:D6:6D:76:FB:8B:F8:E0
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17957631-7b5e-4b1d-b844-7e2d19ee01f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:0b:58:21:64:7c:db:a3:f3:b2:7f:e6:77:e8:93:b9:fb:6a:
87:63:a8:85:ea:ab:66:47:24:a6:94:be:84:b3:6a:53:01:e2:
24:4b:50:73:b8:c4:9c:cb:08:be:7b:fd:7a:87:64:e3:02:4d:
68:51:98:c8:b6:63:fa:e6:39:39:78:ad:78:62:74:74:e0:32:
3f:79:a6:65:b2:fa:0e:6e:c7:43:f6:76:ed:2e:7c:96:33:41:
8c:9d:d4:11:12:c7:ec:a4:53:4a:04:88:b7:1f:a1:81:11:4a:
16:6b:89:c6:28:89:24:e9:2e:7b:5a:75:7b:0d:d5:c2:0c:5c:
bd:f7:e8:03:f5:8b:01:a2:7d:b1:84:6f:4a:6e:ab:c0:fd:1e:
62:18:22:55:f5:d4:a5:96:d7:63:07:90:33:91:05:c1:7f:72:
b3:c7:60:eb:21:5b:bf:b1:27:76:6a:4b:9e:8a:1a:0f:67:42:
af:25:a5:63:5f:b0:c3:66:0b:d4:13:69:77:c8:fb:94:7e:09:
ff:e0:a4:4c:f9:74:0f:52:9e:45:d2:d7:8a:39:ad:c3:ba:a5:
49:88:f9:a0:97:aa:86:2d:68:f4:62:0e:c6:9e:02:d3:22:8f:
de:6e:62:74:92:87:fb:cc:23:af:8a:03:55:2a:08:b4:85:73:
fe:8e:2f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:36:13 2025 by rpki-client