Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/204e87aa-b402-4cea-b44e-69d5b4a47b9f.roa
File: 204e87aa-b402-4cea-b44e-69d5b4a47b9f.roa (raw, json)
Hash identifier: KcM16FPGWrG+YMo4iw6qnOO/EhjFy/7Xs0J8jSN2Skc=
Subject key identifier: B6:CD:4C:D2:01:95:75:53:2A:93:D5:74:57:F8:55:64:7B:CC:CC:EC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 03771C7CE769A090E21B3E23C78BC9136D806AAC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/204e87aa-b402-4cea-b44e-69d5b4a47b9f.roa
Signing time: Thu 16 May 2024 00:00:00 +0000
ROA not before: Thu 16 May 2024 00:00:00 +0000
ROA not after: Thu 20 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:77:1c:7c:e7:69:a0:90:e2:1b:3e:23:c7:8b:c9:13:6d:80:6a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 16 00:00:00 2024 GMT
Not After : Jun 20 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:12:3c:5a:b6:26:3f:02:8d:ef:dd:84:be:e0:
e6:62:3e:7d:ac:1f:42:4d:08:9c:c6:59:35:fb:c0:
ef:2f:2e:54:59:57:0a:2b:b1:8c:62:af:43:aa:ef:
5f:b2:32:cf:89:0f:f7:86:eb:70:41:3d:36:99:f1:
0a:e7:e3:4d:ba:fe:42:14:d9:46:51:c2:7e:44:60:
c7:6b:ab:a9:b9:a8:7e:c4:09:a7:d5:19:bb:fb:16:
42:ac:18:3f:24:92:a2:58:f1:41:64:71:8e:b6:b3:
98:a5:2e:50:93:1b:b4:69:e3:33:3f:0b:81:af:12:
df:cd:fe:e4:41:cb:c7:25:e0:39:ab:20:3c:fe:c7:
d3:49:4b:ff:e3:38:b6:a2:93:c7:ea:77:ed:3c:ba:
e7:44:41:42:bf:f8:a3:e8:0e:35:34:ee:06:32:e3:
6a:42:cb:80:16:90:5c:52:13:75:a9:c6:cd:95:87:
ab:78:f3:54:2b:59:f6:16:c2:97:34:e0:99:13:95:
0a:c0:3a:34:07:23:0e:55:4f:bc:49:01:63:7d:2b:
99:67:2e:3e:a3:d5:0d:b9:8c:20:ce:39:eb:d6:40:
96:6c:cd:55:e4:b1:85:5d:18:45:df:3b:96:00:ec:
ae:5a:04:23:15:84:d7:47:20:4e:28:b5:43:1a:7b:
2b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CD:4C:D2:01:95:75:53:2A:93:D5:74:57:F8:55:64:7B:CC:CC:EC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/204e87aa-b402-4cea-b44e-69d5b4a47b9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
68:50:2d:09:4a:3f:06:03:43:de:ce:7f:e4:be:9d:ee:98:93:
c9:c2:22:90:54:17:59:46:77:7e:f6:12:84:1e:2d:3b:e6:8a:
a1:dc:e9:03:0b:cd:49:92:1f:ea:cf:a5:6d:b6:20:b0:cd:5c:
c4:f6:38:46:a0:5d:b1:98:24:ac:05:f8:8f:e2:b2:9e:25:ce:
70:42:3f:60:66:17:51:80:33:22:7e:37:b7:20:33:63:cf:a6:
a0:91:bd:bf:13:a4:56:32:3d:c3:40:32:57:53:93:7e:7a:35:
7a:a4:7a:ba:13:2a:26:d7:51:84:bd:a4:cb:1e:42:80:ed:5b:
4c:f9:eb:2d:6d:3f:83:02:ea:de:b1:1c:d6:c1:2f:fe:93:76:
85:96:ff:22:43:a1:11:eb:78:b0:c6:db:a5:eb:8f:1a:5a:10:
d3:0b:cd:d4:c2:a8:6d:be:6d:b3:90:fb:f1:ee:e3:33:10:a4:
f3:ae:90:6f:e6:6a:4f:b2:24:6b:8d:c2:d4:ed:af:d8:93:cb:
a8:8d:f0:17:e8:16:6d:69:2b:36:e6:ca:77:8f:16:9f:97:22:
45:b5:9b:26:23:8f:28:24:ba:98:9f:46:90:c4:ed:74:1b:9f:
b5:1d:8a:ec:17:4c:72:9f:77:b6:0c:d3:73:d8:de:73:4b:d4:
56:33:5d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:52:49 2025 by rpki-client