Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/19588659-ae57-48c5-afb8-42f72d6a190b.roa
File: 19588659-ae57-48c5-afb8-42f72d6a190b.roa (raw, json)
Hash identifier: UXXbxwoM/j8QzztnsuV+jLC597lN05EKRo6gdtJ23Jw=
Subject key identifier: C5:B3:91:57:3B:DA:F5:CF:99:AB:72:AF:ED:E0:48:E7:07:77:8F:B9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 252A98E6D56196AF1E83323DD7B30AC019FBEE5A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/19588659-ae57-48c5-afb8-42f72d6a190b.roa
Signing time: Mon 10 Mar 2025 17:28:24 +0000
ROA not before: Mon 10 Mar 2025 17:28:24 +0000
ROA not after: Mon 14 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:2a:98:e6:d5:61:96:af:1e:83:32:3d:d7:b3:0a:c0:19:fb:ee:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 10 17:28:24 2025 GMT
Not After : Apr 14 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:e1:fd:75:f6:8e:7a:fe:b6:b3:d1:26:3a:
cb:08:aa:f9:69:98:df:d6:c1:73:2e:b9:12:f4:2b:
33:41:34:94:27:e7:43:79:6c:bf:5d:8e:c1:8d:48:
7d:f4:22:d5:26:c0:0c:40:f1:dd:88:b7:63:8b:c5:
2c:2d:37:0c:b0:18:6f:b9:bb:06:8d:bb:a0:b2:7f:
77:91:25:52:af:01:57:e2:7f:d2:6d:10:4c:cf:6b:
c2:ac:3b:70:63:e5:97:f0:d3:8d:91:5c:11:db:33:
cb:a8:72:b5:74:82:8f:db:26:21:19:ad:01:36:2e:
e4:0f:97:82:f8:cc:37:57:88:6e:30:79:a8:0b:22:
d8:d4:90:72:51:a0:85:ab:e4:02:d7:9a:77:53:f7:
9e:ed:f7:73:d1:bf:02:6c:96:36:fd:94:fd:c0:01:
2a:b6:7b:c2:19:61:1f:3f:93:32:dc:e2:0d:77:ca:
43:e0:aa:22:3c:7c:80:5d:c6:77:57:a5:9e:b3:3e:
f5:b8:94:30:ed:f8:7f:9e:5d:c2:b8:38:de:01:4d:
32:7b:69:f6:e9:66:ef:e2:b0:ca:e1:dc:fe:07:6d:
ae:af:bc:27:1b:ad:9b:e1:b8:79:16:f2:31:38:b5:
1f:fa:ff:e6:e2:b6:ae:85:8e:59:56:5b:95:de:ba:
4b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B3:91:57:3B:DA:F5:CF:99:AB:72:AF:ED:E0:48:E7:07:77:8F:B9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/19588659-ae57-48c5-afb8-42f72d6a190b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
94:d6:9a:f1:fa:3a:bb:78:38:88:85:a8:40:8d:35:6d:12:e1:
da:7a:8c:4a:5a:16:8a:5f:81:13:9d:9d:e5:bd:62:cb:e4:63:
e2:6d:25:49:72:b9:df:4c:66:39:31:d8:f8:6c:19:a6:78:51:
21:51:4a:05:e9:46:6d:9f:7f:0d:21:c2:5c:90:1d:30:58:73:
02:86:06:0c:ef:8d:60:5a:47:0b:cc:72:0b:4a:24:9e:22:ce:
51:9e:ff:af:80:a5:45:36:f7:c6:e4:05:c7:18:91:c6:af:30:
3d:b9:3c:5b:e2:10:76:96:8a:f7:1b:f1:09:bf:7d:fa:24:e9:
20:05:a0:d6:e5:4f:75:0a:ae:37:5b:09:db:ed:dd:8c:b6:2f:
b1:df:12:7e:70:ec:39:e2:1c:bf:48:82:a1:8b:e4:1e:ff:2b:
2e:c0:30:c7:61:3a:35:fe:9e:70:29:fa:0b:b2:86:f6:f4:7e:
db:de:b0:72:0c:66:6c:cf:78:6c:f8:10:45:6b:02:dc:cc:55:
7e:35:49:01:42:22:a7:b2:bc:25:02:ca:72:c8:a0:05:65:3b:
cf:f4:47:11:08:85:47:97:34:bb:f7:b8:5d:fd:52:46:4e:c2:
15:2b:c4:4c:8d:73:df:26:fa:02:6f:67:bc:be:a9:a6:bd:e4:
a7:b2:ba:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:33:40 2025 by rpki-client