Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c046928-2e3d-44ec-bf27-c8a9c12ee09f.roa
File: 1c046928-2e3d-44ec-bf27-c8a9c12ee09f.roa (raw, json)
Hash identifier: BkmBWokFxvBkyiYRirY9M9qixIlNccEhfN01iV0Tz08=
Subject key identifier: B0:A4:99:9D:96:1A:C4:B9:85:2A:7C:D0:AB:1B:FC:82:CA:0E:89:02
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 264BC024D6EFA36E82563955553DAFB303F16D07
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c046928-2e3d-44ec-bf27-c8a9c12ee09f.roa
Signing time: Sun 19 Jan 2025 00:00:00 +0000
ROA not before: Sun 19 Jan 2025 00:00:00 +0000
ROA not after: Sun 23 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:4b:c0:24:d6:ef:a3:6e:82:56:39:55:55:3d:af:b3:03:f1:6d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 19 00:00:00 2025 GMT
Not After : Feb 23 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:be:2f:5b:27:a0:f2:50:d3:7a:cb:88:8b:
70:34:e2:b2:5f:9a:63:f1:da:08:e9:8d:07:81:93:
40:0c:b5:89:91:97:bd:20:b4:d5:12:48:dd:5c:36:
61:94:e6:0b:56:2e:9e:9f:9e:41:1e:9a:c5:eb:1d:
fe:6a:22:12:38:d9:5e:23:53:cf:c5:62:ef:e9:9f:
8e:fc:81:f5:1c:da:6f:13:bd:95:80:d0:4b:34:e6:
d3:68:62:6b:a6:2d:49:d3:5f:65:c1:bb:3e:99:7f:
9a:3d:31:89:e5:cf:cd:2b:53:06:f0:e4:17:d0:4d:
97:88:f3:81:27:57:f7:ec:49:df:52:f1:16:bb:bf:
f3:b0:bb:a5:41:3f:67:ce:05:9c:9b:e1:eb:f9:76:
4b:08:f4:5f:23:b2:85:4a:e5:df:99:92:40:54:ad:
59:d5:e6:11:b7:48:69:23:60:02:21:df:6a:99:fb:
3a:37:21:41:02:86:fb:f0:b0:83:07:cb:d9:d6:25:
65:f4:97:d1:55:9b:b6:30:57:5f:91:3a:d0:df:2f:
4c:19:36:d0:a9:92:b7:1c:4c:cb:46:02:b1:f8:58:
b0:6e:2a:f3:d3:4b:a1:ec:1f:4d:58:ef:3d:40:17:
ff:43:b0:20:e7:64:26:ca:13:40:db:f2:5d:13:a3:
82:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A4:99:9D:96:1A:C4:B9:85:2A:7C:D0:AB:1B:FC:82:CA:0E:89:02
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c046928-2e3d-44ec-bf27-c8a9c12ee09f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
59:c8:da:eb:98:41:e8:e5:01:fa:27:16:ec:bc:69:96:7e:a8:
11:98:d7:0e:02:c6:a8:92:e4:4e:41:50:60:b8:eb:57:65:8f:
eb:33:c0:b7:72:38:0c:42:25:64:20:02:3c:7d:13:86:bd:6b:
b4:a7:df:92:09:dc:82:d2:0a:7e:d6:0d:a3:1b:03:60:17:89:
fa:8f:7f:cb:ae:16:62:d3:a7:a7:c0:74:ce:00:13:b7:4a:93:
21:51:a8:1f:46:4c:69:26:76:df:26:b4:99:c6:6a:8e:09:ef:
67:9d:d9:ff:d7:dc:41:16:6f:df:79:08:1d:80:35:99:8e:7b:
8a:ad:bc:fa:9b:05:93:6b:fc:0f:3d:a9:0d:26:9f:3b:e3:c2:
b7:73:fc:3f:08:09:a9:96:88:f6:f5:18:15:c2:2b:76:0f:0e:
3b:2f:95:cb:4b:c0:e8:5b:d4:da:3c:40:c5:df:61:6b:ef:c8:
f6:c5:7f:27:fb:4f:ac:a0:97:9c:7c:8d:da:fa:8f:8e:d2:4c:
a6:bf:23:2c:27:db:39:3e:8f:2f:89:5f:69:4a:96:59:ef:34:
37:ca:ee:41:2d:5e:af:76:bd:a4:53:15:b2:cb:22:4f:e8:8b:
db:14:a3:16:f5:d1:d1:79:19:e0:27:76:48:8c:6b:a1:af:73:
4f:b6:de:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:19:30 2025 by rpki-client