Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/197d01d8-b7d5-48b4-9f37-74fbbc23bcfd.roa
File: 197d01d8-b7d5-48b4-9f37-74fbbc23bcfd.roa (raw, json)
Hash identifier: sR78QtKwquIQVjPl8LDpnW9kd1ZsBV8Kt4slVHF+Zqs=
Subject key identifier: 63:6D:FE:B4:D3:3E:99:D4:92:E1:89:2D:01:0E:04:F7:AA:A3:D8:F8
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 143E25AA6E28A6E3022033DF97B0E52EB2CEB0C9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/197d01d8-b7d5-48b4-9f37-74fbbc23bcfd.roa
Signing time: Thu 13 Jul 2023 00:00:00 +0000
ROA not before: Thu 13 Jul 2023 00:00:00 +0000
ROA not after: Thu 17 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:3e:25:aa:6e:28:a6:e3:02:20:33:df:97:b0:e5:2e:b2:ce:b0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 13 00:00:00 2023 GMT
Not After : Aug 17 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ce:51:a5:8a:f6:9d:c8:40:74:90:5f:ab:91:
5e:b5:94:6c:c6:ce:c7:6e:82:eb:91:11:17:48:eb:
d8:9a:b7:f4:e8:33:0b:e6:b4:95:e8:a2:99:d5:c9:
a2:5b:18:d5:4b:de:07:21:41:2a:c1:40:34:62:5a:
06:fe:85:c7:eb:35:d1:11:0e:0b:1e:ca:75:de:f0:
ff:d8:0f:8d:ff:d2:e2:32:3a:5b:f4:07:05:f4:0a:
08:c9:32:4d:14:5f:b5:74:52:95:05:5b:2d:5f:64:
28:a3:0e:6e:59:e3:68:94:87:c4:20:1c:ac:fe:8a:
33:bf:57:e0:6c:5f:1f:16:1b:f0:20:23:29:12:29:
3d:56:e1:41:d0:d1:fa:d8:4c:bc:20:33:ee:9f:88:
6b:4c:2a:2d:1e:f4:05:5f:bc:84:b5:11:56:bd:26:
8b:19:cd:cd:d2:65:ee:43:dd:e8:84:b9:3f:0a:57:
ca:45:25:d6:ad:bb:8e:36:c9:02:10:fe:86:2b:57:
7d:9e:e7:39:fc:65:84:32:7b:cf:18:87:5c:df:68:
72:98:a3:c6:a1:6a:e7:19:96:a9:48:fc:0b:0c:02:
d7:3f:df:43:8d:81:ed:53:bd:24:b0:c7:b0:2b:20:
0a:1e:eb:a9:a4:b8:33:da:d9:0e:6a:98:50:5a:20:
2a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6D:FE:B4:D3:3E:99:D4:92:E1:89:2D:01:0E:04:F7:AA:A3:D8:F8
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/197d01d8-b7d5-48b4-9f37-74fbbc23bcfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:81:59:c7:32:eb:2f:d7:2b:1a:1b:e8:10:e8:52:99:88:47:
fe:f7:79:dd:26:ed:a8:1e:e4:68:08:0c:b0:2d:f6:2f:1a:65:
80:84:b0:cf:8c:7a:07:64:3c:e7:82:f1:eb:c0:98:03:1d:89:
b7:d0:6d:b7:a4:c1:43:f1:4e:32:6b:7c:52:18:db:80:a9:59:
83:ba:14:06:41:c9:1a:a1:72:48:1c:93:96:39:66:52:63:62:
c7:96:e1:15:26:6f:d5:3e:1e:3a:9a:f0:8c:68:7e:07:85:42:
2d:23:4f:8c:a7:9f:9e:73:a8:1c:bd:3f:b1:0e:54:51:2f:67:
e0:40:63:3f:32:66:e4:8b:79:e8:f2:6d:e9:07:ee:c6:df:ac:
48:bb:a2:9b:07:be:d9:80:4a:a9:00:58:fb:6a:3a:2d:0e:72:
de:5d:df:4b:72:9f:30:a9:1a:43:9f:d5:c8:91:a2:c0:6f:f1:
ba:3e:60:37:06:48:fc:1f:b0:a7:22:87:74:1f:85:cb:b0:6d:
b5:37:30:59:ea:d3:63:7b:cf:ac:71:3a:ad:60:13:43:98:7c:
f1:81:d2:8f:41:73:5b:e8:e4:cc:ae:30:a2:53:8d:66:81:fa:
bb:97:e7:3a:ca:82:77:f7:b9:40:37:78:68:cf:fa:2d:c2:14:
a0:25:fa:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:34:39 2025 by rpki-client