Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/18027c37-e432-4128-8b1d-12eb86e21cb4.roa
File: 18027c37-e432-4128-8b1d-12eb86e21cb4.roa (raw, json)
Hash identifier: 9xwPMHrs+2ZbMUme0QHBTlj+2Qx+H251BEp8MmPQ/Aw=
Subject key identifier: DB:D5:93:0B:CE:34:15:EC:D4:BA:9F:62:B8:60:89:3C:13:76:15:C4
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1C5787CA5446D79F0150AFB2A8E5B6232F284DFA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/18027c37-e432-4128-8b1d-12eb86e21cb4.roa
Signing time: Tue 14 Nov 2023 00:00:00 +0000
ROA not before: Tue 14 Nov 2023 00:00:00 +0000
ROA not after: Tue 19 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:57:87:ca:54:46:d7:9f:01:50:af:b2:a8:e5:b6:23:2f:28:4d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 14 00:00:00 2023 GMT
Not After : Dec 19 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:67:0d:6e:8a:f5:e5:5d:01:32:9f:cb:a9:
68:e3:31:58:e5:be:67:20:72:4b:c2:e7:ae:d1:96:
01:e9:dc:87:6e:03:84:55:4a:74:ce:1c:8a:e7:3c:
bb:51:65:00:d0:23:56:c8:18:ef:fb:db:67:8e:d6:
fc:60:93:b7:07:f1:f6:14:ef:a6:1f:d3:b5:bf:a4:
c1:10:55:4a:a9:9c:80:72:37:d3:b9:2b:f0:80:cb:
53:f4:d3:39:f2:06:7d:eb:e6:6e:31:b6:b7:57:c0:
15:1d:d3:55:3f:81:f1:f3:ad:55:e3:c9:05:24:9b:
6b:bf:d5:d8:7d:77:7c:6b:7d:2a:1e:06:30:85:98:
51:18:18:d5:a4:82:43:9e:40:4a:71:40:d7:2d:8a:
31:1b:a5:ed:ee:3d:94:09:0b:11:22:e7:5a:ba:56:
ec:03:2a:25:4e:57:33:67:fe:ef:ec:9e:60:51:ae:
74:ea:24:16:88:6f:f3:67:90:9c:6c:2f:99:db:84:
c6:02:93:a4:45:2f:1e:5b:15:96:ad:a7:6a:58:bc:
37:5f:47:6f:e2:de:ef:d8:90:0d:5c:5e:71:7e:dd:
4e:65:e7:b1:54:ed:85:7b:1f:7e:97:d6:7c:64:56:
a8:3b:e3:b5:a9:41:3b:b4:4e:fe:0f:2f:98:bd:8a:
85:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D5:93:0B:CE:34:15:EC:D4:BA:9F:62:B8:60:89:3C:13:76:15:C4
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/18027c37-e432-4128-8b1d-12eb86e21cb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:b6:df:74:ef:f3:0c:b2:0d:a0:13:cd:f8:ad:58:9a:e6:d0:
32:c4:3a:b0:d4:61:10:81:d7:bb:63:66:66:4d:33:14:3d:bf:
c9:8f:08:7f:26:e6:f5:9c:86:ab:35:b0:a2:0c:31:fe:ba:34:
48:58:b7:01:74:56:70:16:ba:db:3a:39:15:06:39:42:d5:df:
02:a5:46:8c:2f:5b:cd:55:95:81:02:1c:f1:e2:c6:43:80:2d:
f5:d0:dd:c8:f2:3c:3d:01:f8:98:80:07:99:d7:a2:78:87:79:
bb:91:42:1f:11:2b:e5:47:81:cc:ba:0d:f9:c3:54:67:61:b3:
8f:a1:a4:ce:83:81:50:17:aa:a0:17:c5:b1:0a:99:89:7c:36:
26:1a:bc:ab:14:eb:61:7c:d6:72:ee:9a:b8:ec:e8:1c:ec:32:
45:fd:b2:ee:87:6d:bc:e0:4d:12:fd:35:16:1c:c7:ff:70:10:
98:4c:e0:d3:62:fa:f9:63:d4:23:d1:fc:ef:2f:99:50:dd:61:
40:a8:e2:33:b6:68:65:6e:be:8c:f9:6d:33:ca:0b:28:d4:0b:
cf:87:f2:ec:25:c7:d6:54:bc:a2:65:43:b6:c1:8d:36:14:88:
c2:2a:0c:fe:73:91:d8:17:29:98:66:00:9b:d0:e2:ab:eb:0e:
82:8a:fb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:19:01 2025 by rpki-client