Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/22e0b5b6-2475-4abf-8efe-da2e7c7f4cba.roa
File: 22e0b5b6-2475-4abf-8efe-da2e7c7f4cba.roa (raw, json)
Hash identifier: M/Pb0/JTE65vCFUQ8ZYKO/xKwktpxCkncjOsonzKKVA=
Subject key identifier: C9:60:C1:E0:1A:00:4B:12:C2:D6:DB:AE:E4:54:5E:F8:41:80:16:9D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 617DD9A331646E35644AEFB68C133A320726A4C2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/22e0b5b6-2475-4abf-8efe-da2e7c7f4cba.roa
Signing time: Fri 11 Aug 2023 00:00:00 +0000
ROA not before: Fri 11 Aug 2023 00:00:00 +0000
ROA not after: Fri 15 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:7d:d9:a3:31:64:6e:35:64:4a:ef:b6:8c:13:3a:32:07:26:a4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 11 00:00:00 2023 GMT
Not After : Sep 15 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:e2:22:33:78:2c:9b:ed:d8:5d:13:ef:9b:
05:81:dc:06:39:77:b6:2f:5b:d8:34:64:c7:4e:d8:
9a:37:30:a8:0e:9a:28:91:77:ca:44:94:31:85:8b:
4e:2e:e2:48:21:5a:04:78:f8:c6:ba:78:83:b4:7d:
12:71:30:d5:ac:b8:cc:de:06:ff:b4:19:8d:6b:86:
7d:da:31:e2:fa:90:25:a5:1d:13:8d:d7:79:80:83:
3c:41:4a:2d:d6:21:bc:ce:59:cf:79:1c:a6:e3:9d:
38:80:b3:35:04:14:b2:e9:8c:9f:57:12:f7:b1:fa:
d8:f7:26:21:84:be:01:1c:90:90:0a:21:d7:c3:a4:
74:e4:a8:a8:95:0b:c8:4b:8a:f7:ba:23:df:0b:ee:
47:a9:1a:4c:42:08:4d:16:8e:76:df:f4:dc:ea:68:
86:8a:61:08:3f:c0:4f:66:f3:af:5b:0e:f6:59:d7:
cc:fb:23:4e:35:67:3e:4e:76:59:de:54:1c:8c:4c:
6a:0c:67:1a:66:7f:86:34:2c:60:e6:5c:fa:2a:31:
de:ba:9f:a6:93:bb:96:17:87:82:e6:00:77:8e:a9:
d5:ac:74:ff:05:49:dc:4f:f7:62:51:1c:94:0a:bd:
54:fa:8c:d7:23:bf:85:bb:b6:5c:42:07:c8:6b:fb:
b5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:60:C1:E0:1A:00:4B:12:C2:D6:DB:AE:E4:54:5E:F8:41:80:16:9D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/22e0b5b6-2475-4abf-8efe-da2e7c7f4cba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
55:c4:bd:b4:56:bc:45:84:a4:5e:46:f8:89:7e:f1:34:57:8e:
0b:f2:14:f1:cc:c6:1a:47:25:da:f9:71:1c:e3:ea:d7:a2:c0:
72:6e:af:44:cf:bb:bd:71:06:dc:03:0c:bf:fa:19:d9:73:cf:
10:85:79:79:c0:9c:b8:d8:61:a7:2a:19:a9:04:50:7c:79:2e:
f6:e0:f7:87:a4:b1:2f:12:b8:b8:2b:37:a9:01:bc:de:8c:dc:
0c:82:21:4e:dd:98:69:b0:71:10:3d:fb:09:20:11:29:d2:90:
b6:18:8a:31:dd:96:06:b6:32:6c:63:01:2b:62:74:5a:81:07:
a4:d2:8b:02:b7:c9:3c:89:d5:37:e0:0e:d4:73:e2:eb:29:23:
79:75:7d:7f:56:a4:db:95:ce:b1:86:b6:f0:6d:26:94:96:95:
76:01:dc:a1:74:3d:e7:ed:70:ec:86:c5:26:97:2b:5c:64:de:
24:98:b1:ae:a5:51:98:fa:b7:f4:c2:9a:cd:e5:e4:95:c3:18:
b1:b2:ef:db:81:9e:33:32:59:c3:76:e4:fe:84:b3:da:e6:8d:
8b:58:64:a3:8b:96:3b:53:ff:48:50:7a:f1:3f:34:d4:8c:4d:
42:9e:0a:5f:7e:27:90:06:63:59:6c:3f:94:a7:4a:25:f2:e6:
65:9c:48:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:18:33 2025 by rpki-client