Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/22294a04-c4bc-4287-a6f5-ba35f07daa50.roa
File: 22294a04-c4bc-4287-a6f5-ba35f07daa50.roa (raw, json)
Hash identifier: la0Q/Fmtd5b62OIHGinU7Y3e6rVKNyZaOEuQ6OVSe8c=
Subject key identifier: 68:F8:F7:3C:73:A8:4B:72:25:BC:5D:4C:21:FD:0E:DB:68:95:65:75
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3408BE06A57205B58D278B0DA4991446E3B04672
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/22294a04-c4bc-4287-a6f5-ba35f07daa50.roa
Signing time: Wed 25 Oct 2023 00:00:00 +0000
ROA not before: Wed 25 Oct 2023 00:00:00 +0000
ROA not after: Wed 29 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:08:be:06:a5:72:05:b5:8d:27:8b:0d:a4:99:14:46:e3:b0:46:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 25 00:00:00 2023 GMT
Not After : Nov 29 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:06:1f:cb:2f:b2:98:fa:1f:0e:bd:74:a9:
07:8d:5a:73:31:73:3b:58:8b:0d:af:43:ea:54:2d:
23:af:85:00:30:16:5b:9d:ce:99:85:3f:b3:a9:08:
ac:c3:18:da:99:0c:b4:e2:e8:6f:c1:9d:d4:05:e4:
36:07:44:cb:4e:00:9a:68:ee:7f:b3:23:ce:f4:8c:
ce:39:18:d2:eb:24:45:52:b8:16:d4:6f:c0:93:35:
55:26:12:6b:36:63:79:05:a6:cb:b4:9c:d4:53:20:
f6:c9:e6:4c:20:1b:e6:62:57:0a:31:8a:54:6f:a2:
3b:09:b8:d5:98:91:a4:d1:1b:c8:6c:e2:a6:45:ee:
aa:d8:1c:14:a4:59:02:10:11:08:35:7a:a3:ad:7f:
52:9d:15:e8:5d:65:ce:03:f3:1d:27:32:10:74:87:
02:0d:75:fc:e0:cb:03:5b:e1:1d:81:fb:c3:0d:0f:
aa:3c:d8:32:74:a0:89:23:3a:bd:b9:f0:fb:64:7b:
0c:c0:03:7f:ea:05:40:41:43:1a:e9:b7:5b:a0:eb:
aa:cb:37:92:4f:9a:48:5b:09:e5:67:b0:43:9d:ee:
9b:75:7f:7c:64:cb:cf:ea:2e:9a:9e:36:e4:4a:73:
4f:51:15:e9:ea:17:37:ce:78:e3:02:88:a4:01:a0:
49:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F8:F7:3C:73:A8:4B:72:25:BC:5D:4C:21:FD:0E:DB:68:95:65:75
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/22294a04-c4bc-4287-a6f5-ba35f07daa50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
44:db:4b:f4:07:bf:99:8c:42:c7:aa:d8:b4:6e:4d:85:b1:92:
26:b9:fa:a8:88:2c:22:41:2d:1a:87:8e:c2:66:86:49:5d:c8:
a5:c9:2f:f9:25:cc:85:62:c3:f8:cf:fb:b9:43:59:ed:23:d8:
e0:7f:1c:4d:44:57:6a:5b:1a:d7:3b:81:ed:a0:2b:ab:08:95:
c7:fc:4b:f1:a5:db:de:a8:a8:96:f9:0a:0e:9a:87:19:53:f8:
44:5a:93:93:86:3d:00:c9:9d:86:f7:75:a8:24:9c:25:42:6b:
e9:4e:43:18:58:82:10:dc:d4:76:c2:53:ed:df:33:8c:4e:b8:
e6:0f:7c:3a:db:79:88:8c:c9:8c:7c:4a:58:64:18:fa:93:f3:
fe:cd:0f:39:2c:87:85:c3:ed:48:df:7e:2c:fc:da:a4:01:c5:
ae:90:8b:38:b1:b2:71:ca:83:f6:0c:5b:55:92:0b:d0:9f:22:
e8:48:77:6c:ec:84:e7:3a:3c:38:ec:04:80:78:17:e7:90:a3:
ff:e5:42:9f:f7:56:26:09:e6:53:d9:b4:04:55:ca:94:0f:98:
26:87:49:0c:7c:2a:39:aa:7d:99:60:2e:31:d9:68:01:ee:33:
06:f5:66:54:02:48:3f:af:5b:4c:09:76:d2:ea:be:0d:61:3e:
5b:19:d6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:55 2025 by rpki-client