Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/23165910-16ab-4824-85fa-70d932e655f2.roa
File: 23165910-16ab-4824-85fa-70d932e655f2.roa (raw, json)
Hash identifier: 9au/Fymo3Pn65JCdj6yBlZSNzaHwbsLdXpmpb7p0gNg=
Subject key identifier: AA:25:57:71:E4:D8:53:19:81:74:8C:CF:6B:28:7A:0D:7A:B2:03:51
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 28AD6FC1224C8E62DF302AB4DE7BED1CAC9E85A8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/23165910-16ab-4824-85fa-70d932e655f2.roa
Signing time: Wed 15 Nov 2023 00:00:00 +0000
ROA not before: Wed 15 Nov 2023 00:00:00 +0000
ROA not after: Wed 20 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ad:6f:c1:22:4c:8e:62:df:30:2a:b4:de:7b:ed:1c:ac:9e:85:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 15 00:00:00 2023 GMT
Not After : Dec 20 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:0c:34:4e:60:d6:25:80:16:63:89:75:7c:
e8:4a:fd:ef:3c:7f:0b:89:58:a7:a4:98:3f:d9:d7:
35:36:aa:27:ea:88:80:f6:c4:61:09:f1:fb:0d:16:
7b:6d:12:0a:01:a7:43:58:97:a8:28:38:55:33:91:
ab:e1:64:66:0e:a0:68:29:77:bd:19:d7:7c:b6:0f:
28:5b:ce:ba:c6:4d:43:f7:eb:12:6a:8f:7f:3f:e4:
06:2d:10:7d:b7:ef:1b:7f:2b:6b:19:8e:7f:a0:0f:
07:9e:0c:ce:eb:62:e7:40:07:f9:9d:aa:90:24:89:
66:5f:44:84:98:44:b1:7f:31:73:06:99:5d:d8:14:
78:f2:f6:b1:8a:fa:9c:96:b3:d7:0c:cb:02:8a:99:
f6:a6:7a:f3:10:f7:d8:5a:c2:0b:e1:21:a1:fb:8f:
99:39:69:bf:a4:39:ce:3c:92:6b:a2:82:b8:8f:51:
8c:28:95:81:44:12:97:07:ce:85:79:42:a8:16:9d:
07:e0:74:33:43:8a:1e:ab:4e:26:29:a0:99:82:84:
8d:af:16:e1:39:75:09:ae:b7:4b:e6:8c:3c:f3:4e:
4e:e2:b4:e7:6e:d3:e9:c5:fc:0e:65:cc:4b:65:a2:
2d:a9:45:e4:39:f5:1e:2b:aa:a7:70:ac:fa:e4:e1:
27:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:25:57:71:E4:D8:53:19:81:74:8C:CF:6B:28:7A:0D:7A:B2:03:51
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/23165910-16ab-4824-85fa-70d932e655f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:0a:d5:17:d5:08:08:cc:e8:55:96:2b:ed:d2:0c:40:14:05:
fc:a4:82:33:62:42:4d:3c:e5:62:61:e8:56:a5:84:40:6e:95:
f9:8a:90:9a:d9:74:7c:81:3f:1a:01:ee:80:1c:df:1d:9c:5c:
6a:ef:dc:41:66:7a:62:ef:28:be:0e:dc:46:00:b5:5a:28:4c:
7c:01:c1:84:28:b0:69:a9:0e:30:c2:c4:14:1a:b9:ed:c5:57:
1e:c9:a5:f2:72:54:29:3c:1f:a0:87:8b:92:62:aa:f8:27:91:
31:01:a2:ec:87:4d:c1:82:52:fe:9e:e2:a3:53:f3:a9:7f:d4:
53:ba:95:23:cf:b4:d6:cc:25:1b:12:81:d8:6a:cb:ac:72:da:
ff:76:d2:8b:eb:a4:aa:2d:de:78:8b:e4:99:f3:6e:b2:31:95:
ea:9d:10:1d:2a:9c:1c:29:fd:6c:c1:f2:ef:4b:6a:6b:b8:08:
d1:5c:d8:f7:a2:3a:89:ea:5c:6f:7f:14:4a:e5:83:08:29:8f:
c8:1d:49:b1:e8:90:2e:a0:7e:1e:2e:08:0e:10:2b:69:67:69:
7f:99:33:e7:bc:ce:77:e8:6b:5c:c5:c4:90:e3:a9:3f:17:0b:
10:55:39:e9:f5:c3:72:32:0a:3b:8e:fd:d7:dd:55:a2:40:3e:
35:93:9a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:53:04 2025 by rpki-client