Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/23333c91-ec4b-41da-8dcf-8b5fe65e33b4.roa
File: 23333c91-ec4b-41da-8dcf-8b5fe65e33b4.roa (raw, json)
Hash identifier: 2V3BWcghY92lrFisPyn4nA4h/vhIO1heL5ME4jgO/7Q=
Subject key identifier: EB:58:37:3D:19:9C:31:8D:5B:BB:6C:3C:C8:30:69:4E:B6:D2:88:0C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 132CE22659DDEF1FCC21F82C919B0C7A04F31507
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/23333c91-ec4b-41da-8dcf-8b5fe65e33b4.roa
Signing time: Wed 14 Aug 2024 00:00:00 +0000
ROA not before: Wed 14 Aug 2024 00:00:00 +0000
ROA not after: Wed 18 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:2c:e2:26:59:dd:ef:1f:cc:21:f8:2c:91:9b:0c:7a:04:f3:15:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 14 00:00:00 2024 GMT
Not After : Sep 18 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fd:a7:db:a5:08:db:d4:b2:41:71:83:2c:27:
1a:65:68:56:a5:d2:78:21:49:d3:f8:f1:c0:4a:cc:
35:c8:31:61:a2:e2:1c:0b:80:70:67:e9:4b:72:ea:
29:8b:15:1e:cd:d9:c4:db:85:4b:4d:39:8d:32:20:
4f:3f:36:0c:1c:fd:7d:f9:8a:a2:38:93:9f:87:9f:
86:55:3d:3d:cf:3b:34:1c:82:a3:a0:e0:48:66:1c:
ad:c5:73:81:84:4d:63:0b:2f:d8:2c:c1:ea:1c:13:
a1:09:c5:16:2f:58:8d:36:4d:42:d4:a7:b3:1c:d6:
ef:d2:19:64:3c:46:0a:27:1e:e3:0c:ee:8a:04:83:
eb:b0:6f:76:ba:e1:86:b0:36:f2:5a:fa:48:47:84:
39:52:a1:a0:9b:04:d4:dc:8c:5c:79:08:00:5a:c8:
6f:78:68:d0:67:f2:0d:22:95:ef:92:87:8b:d9:88:
c9:2c:47:4f:5f:1c:43:71:7e:9b:5b:45:e8:01:f9:
8f:3b:9e:53:d6:28:88:d4:a7:35:a1:0b:d3:eb:af:
f3:c7:3b:8c:d7:a7:11:2a:03:24:86:f2:dd:a4:95:
23:53:22:cf:2d:f0:68:58:a7:43:6b:a5:68:5a:3b:
8d:7b:3d:e8:20:30:b6:49:37:9c:2e:de:bd:85:00:
a0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:58:37:3D:19:9C:31:8D:5B:BB:6C:3C:C8:30:69:4E:B6:D2:88:0C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/23333c91-ec4b-41da-8dcf-8b5fe65e33b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
23:51:a4:42:86:0b:17:97:00:5f:c7:51:c7:94:1e:43:eb:ad:
9b:7b:64:7f:dc:de:25:da:c7:0e:73:b5:b1:32:cd:40:80:99:
12:db:12:20:cb:9a:00:1a:b9:37:84:ea:90:e6:41:f4:8c:29:
fe:f2:b6:0a:79:00:42:59:7b:be:77:3f:41:70:d9:0c:10:0a:
e9:cd:4a:ca:a5:c3:28:f1:6b:bf:2c:3b:b5:d8:b1:d2:45:76:
4d:d9:d7:f4:b9:e0:ee:05:5e:57:62:3f:a2:2f:69:19:58:63:
1f:b8:bd:41:0d:a2:83:76:30:dd:44:66:f5:b0:7c:69:cf:09:
6d:97:b1:4f:40:0d:d3:88:3b:f0:ca:31:cb:c1:a1:09:a1:18:
9a:2a:76:17:c8:16:f6:88:8e:7c:b4:cd:64:97:45:1c:af:df:
e0:27:a3:4f:2b:72:63:63:4a:b4:8a:b7:06:28:3d:eb:7f:1e:
e7:58:7c:a1:9d:a9:3b:64:d4:43:9a:1b:f1:d6:03:0c:a7:87:
67:13:9b:ef:3e:a3:c5:78:65:52:17:a9:5f:56:35:7c:17:07:
4f:c9:53:d5:f1:37:f9:ba:9e:06:1c:08:a9:24:49:72:88:a8:
38:34:93:a9:ed:d2:40:a6:53:f2:a7:6c:59:29:d8:55:7c:a5:
d3:15:06:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:56 2025 by rpki-client