Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1bfb5129-b538-4697-a8a9-a4be75095cc1.roa
File: 1bfb5129-b538-4697-a8a9-a4be75095cc1.roa (raw, json)
Hash identifier: lM0key4EzI8nGkZF54ih9Jmo2i7n4d3E/HSazoiMaUI=
Subject key identifier: 90:D7:DF:EE:58:1A:2B:F9:69:E2:63:6A:A7:BA:7F:AE:13:A9:9E:6B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3DF67FE3E433D674BA1549BB354F8411F7FE4BAE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1bfb5129-b538-4697-a8a9-a4be75095cc1.roa
Signing time: Sat 30 Dec 2023 00:00:00 +0000
ROA not before: Sat 30 Dec 2023 00:00:00 +0000
ROA not after: Sat 03 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:f6:7f:e3:e4:33:d6:74:ba:15:49:bb:35:4f:84:11:f7:fe:4b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 30 00:00:00 2023 GMT
Not After : Feb 3 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:7c:a7:3c:ca:34:a2:67:69:5a:33:20:6d:
62:72:71:27:a4:31:3b:11:13:43:30:a2:a2:b5:f2:
cf:3b:25:89:80:0f:d0:43:c9:8a:34:a6:42:6e:52:
8d:35:f6:a5:ba:d3:e9:5c:44:13:17:07:50:c7:94:
1c:00:01:ca:df:b2:3a:18:ea:f3:dc:46:fd:e8:11:
4f:ad:02:14:49:fd:21:f0:89:c3:a9:85:ae:ce:3b:
4a:b9:cc:1b:19:50:6e:81:f4:ca:c3:f9:9c:2d:81:
80:ea:6e:78:63:d4:a8:e1:7c:15:f2:90:0d:93:6c:
bb:a7:f7:69:8e:43:4c:c8:0a:2d:11:8a:11:f0:af:
5f:43:7e:d6:67:92:13:d7:32:cc:13:d5:87:11:e8:
24:93:17:7c:ed:ef:9c:12:69:fa:bd:18:d9:96:12:
dd:9c:f7:0b:16:74:e1:b2:94:47:29:83:51:bb:29:
89:2a:58:45:e8:ea:f8:55:00:88:17:2f:b6:80:b6:
0b:11:6b:8f:d4:c8:95:b1:aa:ff:a6:6d:81:90:98:
53:4b:20:f5:fd:fc:61:0f:31:e3:0a:29:03:eb:83:
cd:ec:1d:67:85:56:76:bd:92:93:51:8e:c0:f6:d0:
59:4c:75:0f:cc:a2:1c:3f:50:d2:ff:40:19:c7:ce:
16:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D7:DF:EE:58:1A:2B:F9:69:E2:63:6A:A7:BA:7F:AE:13:A9:9E:6B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1bfb5129-b538-4697-a8a9-a4be75095cc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
95:64:ca:d5:94:ff:8b:e3:56:a7:98:6d:a4:c0:1b:74:fa:94:
34:3d:83:d0:0a:d5:e7:ff:69:1a:b9:c4:ab:c9:d0:56:ac:f5:
52:62:29:bc:28:22:20:ee:16:f0:eb:8d:ad:e1:22:9b:ca:e0:
42:9d:ee:7d:d5:91:29:ee:80:f9:9a:8e:5d:8d:44:85:f6:d3:
3b:0c:fd:70:50:79:15:af:7e:69:58:43:6a:37:98:fe:63:bb:
19:f6:96:b9:1c:ff:38:82:76:94:3d:1d:74:83:7f:2d:40:5d:
12:c9:a9:dc:40:50:77:f8:da:6f:e2:72:00:96:11:49:e5:7b:
3d:05:ba:8d:e6:75:ba:99:80:d8:cc:19:e9:c0:93:15:ff:c3:
7a:09:b9:e6:13:63:65:16:95:1b:75:91:bb:dd:8e:ed:d2:9e:
bb:68:4a:56:c7:a8:62:64:a2:9f:08:66:ac:49:9d:14:30:1b:
40:63:9c:45:03:24:cb:cb:d3:eb:59:42:0c:4d:21:3c:6d:d2:
1d:64:66:3e:e7:e7:b8:a9:b0:b4:05:6f:99:ac:7d:25:53:ae:
f8:5a:39:e0:98:4d:d2:1f:f0:94:55:3b:e0:98:14:fc:fc:53:
a1:54:46:e0:ff:f0:52:25:e8:a0:d0:14:4a:b5:76:92:9f:6f:
0e:f9:92:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:21 2025 by rpki-client