Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1ed6fef2-d0b8-4cfd-9071-a8068102e185.roa
File: 1ed6fef2-d0b8-4cfd-9071-a8068102e185.roa (raw, json)
Hash identifier: K0FwpGgdxd1MLuI21ui+FeHYzE/8eSaTxu++DYhsNWw=
Subject key identifier: DF:30:74:5D:A6:0B:DC:EB:83:BF:8D:25:CF:98:F8:AE:9C:D3:E6:0E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0969E2A9CE23A85F605F4748D036176D007FC935
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1ed6fef2-d0b8-4cfd-9071-a8068102e185.roa
Signing time: Tue 18 Mar 2025 03:23:20 +0000
ROA not before: Tue 18 Mar 2025 03:23:20 +0000
ROA not after: Tue 22 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:69:e2:a9:ce:23:a8:5f:60:5f:47:48:d0:36:17:6d:00:7f:c9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 18 03:23:20 2025 GMT
Not After : Apr 22 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:5a:48:a3:38:12:68:65:fa:e1:1f:be:9f:
92:9f:95:8b:75:37:ff:ec:69:2f:2d:7d:3e:c3:42:
3f:cc:ed:c6:0f:2e:d1:7f:a9:1a:b2:53:cf:a8:3c:
de:63:f4:27:92:e8:c8:ec:89:d0:8d:74:09:dc:c5:
44:28:95:88:1e:45:93:94:a1:45:bf:55:b6:50:5d:
92:74:b8:13:22:af:15:c8:2c:75:39:c8:68:63:41:
65:cf:6b:aa:cf:0b:9c:84:4f:37:d3:89:c7:95:6f:
74:6e:9b:46:59:5e:1b:dd:89:82:f4:2b:2e:bd:71:
36:2b:02:28:bd:97:e5:3c:b7:49:b1:dc:9b:00:75:
be:d3:e7:bd:b8:17:c7:c5:6c:81:f1:e3:c8:e4:5e:
0a:5d:5a:9f:ca:94:bc:66:53:4d:42:ff:3a:90:0a:
d9:e0:5d:3d:99:c8:f2:ef:a1:fa:cc:68:37:ea:89:
3b:a6:2a:4f:f6:9a:25:e6:fd:16:52:76:61:7f:45:
b2:b9:d0:af:d0:83:86:d1:30:d0:f4:f8:31:b1:d8:
c9:a8:c0:c9:32:cf:32:68:a7:97:fe:a8:1e:e0:90:
48:65:08:32:78:c9:3c:ba:2f:3d:7d:ad:88:cc:47:
65:f3:f1:4c:42:cb:35:c8:cc:f4:b7:f4:63:c7:56:
9d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:30:74:5D:A6:0B:DC:EB:83:BF:8D:25:CF:98:F8:AE:9C:D3:E6:0E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1ed6fef2-d0b8-4cfd-9071-a8068102e185.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:0d:57:bc:44:2e:3d:96:52:c4:e2:75:34:40:e9:f9:79:52:
e5:19:50:27:e0:98:02:29:9c:10:b7:67:81:8f:4f:69:79:02:
c3:e6:d2:92:3f:e2:92:8c:f5:eb:92:d9:06:80:a8:41:a3:ec:
6e:60:0b:15:37:34:e2:9a:48:91:9e:8f:44:ff:86:e1:20:0b:
03:50:b4:42:6d:16:9e:00:cc:07:32:da:a4:41:89:65:55:da:
09:1c:2e:bc:bb:35:f4:6d:1b:86:62:63:39:80:70:6e:68:f2:
56:d3:e6:37:e1:4d:91:98:95:0b:80:25:9f:3b:33:fb:fb:89:
35:4c:e9:8c:44:ee:ff:a8:1d:0a:75:99:14:15:06:3d:b3:a3:
00:25:b7:0f:15:ea:af:40:93:99:a1:4f:3e:75:df:2d:61:e7:
17:92:62:0c:dd:07:8d:21:48:c6:1b:21:b2:5b:7f:d5:53:3f:
aa:1b:a2:5f:e4:65:59:9b:4b:74:41:74:88:4e:54:e8:69:b8:
ff:bd:d4:b0:4d:72:ff:ad:8c:d1:2d:07:d9:3b:f2:02:e5:df:
b0:ef:8e:1f:6d:fc:14:ef:80:4d:43:6a:c2:93:6e:04:cc:23:
10:9e:d6:bb:85:0f:ee:e3:21:ed:90:8a:d0:e4:3e:40:12:74:
c9:7a:f9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:34:39 2025 by rpki-client