Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2618ca78-8afe-4e2b-8f63-85f6f4ecb946.roa
File: 2618ca78-8afe-4e2b-8f63-85f6f4ecb946.roa (raw, json)
Hash identifier: vNxJmN4XH0jJUMzujmBkQ9xYM6PO5CGcU6stv3RBNo4=
Subject key identifier: F7:54:9B:69:98:D0:B2:03:3A:4C:45:D4:90:33:8E:F2:D9:AF:6D:35
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 687BFC78F923E593FDC8CF6CB4662856BB3E384C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2618ca78-8afe-4e2b-8f63-85f6f4ecb946.roa
Signing time: Mon 19 Jun 2023 00:00:00 +0000
ROA not before: Mon 19 Jun 2023 00:00:00 +0000
ROA not after: Mon 24 Jul 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:7b:fc:78:f9:23:e5:93:fd:c8:cf:6c:b4:66:28:56:bb:3e:38:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 19 00:00:00 2023 GMT
Not After : Jul 24 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:41:3f:b3:79:6c:4c:e2:23:c5:cb:fc:7c:
07:50:d5:5d:c9:37:70:31:76:72:41:66:32:d3:1b:
97:9a:88:9c:c5:cd:dc:79:22:8b:66:29:e1:cc:71:
3c:aa:75:08:6e:63:ef:8e:62:de:ac:1a:00:b6:af:
48:c3:3e:6e:87:d1:bd:82:1c:2a:6a:17:86:7b:25:
27:ac:d0:b9:43:bb:43:df:f9:1d:5c:31:96:4e:c5:
87:61:7b:c1:10:9a:f1:07:6e:a5:b5:6d:2a:19:91:
95:d4:03:f4:06:20:fd:4f:bf:d1:84:0c:b9:56:85:
0f:77:f2:00:09:4d:4d:9b:ba:f8:e0:73:86:b4:24:
8c:62:bd:7b:47:26:be:19:5e:d1:3c:a7:23:32:cc:
14:24:f1:d0:60:3b:24:57:ce:19:ee:26:fd:d3:3d:
d8:cf:1b:bd:bf:4e:83:66:64:b0:10:b7:7e:8a:02:
7b:57:99:b6:c3:5d:4c:f4:53:c7:02:46:41:20:8c:
1e:90:35:7e:2c:06:b4:2e:51:06:f8:80:e5:98:5a:
a5:6e:14:ec:67:cc:02:4c:50:65:0a:cf:98:0f:e6:
96:bc:e5:a8:ae:e2:37:fd:e2:4d:df:7c:af:e1:42:
43:87:2d:e8:df:a3:89:94:94:29:19:04:06:4f:ec:
bf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:54:9B:69:98:D0:B2:03:3A:4C:45:D4:90:33:8E:F2:D9:AF:6D:35
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2618ca78-8afe-4e2b-8f63-85f6f4ecb946.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:f7:e0:e4:40:a3:25:7a:47:ad:7d:6e:97:ae:e2:1b:46:b8:
bf:b5:dd:27:f5:0e:92:06:5d:89:e5:34:e0:11:7d:7f:cc:b6:
c8:2e:88:a9:32:f7:cc:80:4e:1f:76:54:37:b7:44:7b:75:1d:
5b:6c:cc:55:71:47:dc:9b:e5:41:19:4b:15:1f:fa:5e:d2:c0:
30:60:ba:f7:18:d1:e6:8a:68:77:f3:b9:50:af:00:7d:d8:49:
c0:35:35:70:2f:25:b5:df:53:58:8b:85:91:35:62:50:18:4e:
44:a4:fc:ec:8b:b4:8a:8f:bf:52:39:f0:e5:83:a3:f5:47:28:
54:27:86:9d:79:e3:b0:58:87:9e:15:fe:ff:6e:61:48:b1:95:
be:1e:ef:26:f0:fb:eb:14:05:6b:77:e4:71:14:d4:0e:c5:48:
4e:13:56:b6:1a:ad:5b:cd:fe:43:3e:0a:6e:92:87:17:0e:57:
3f:01:84:63:2d:15:28:a9:11:ac:a1:3a:eb:89:9b:da:b2:67:
9e:b4:e8:15:7b:af:5c:20:c4:5e:78:fb:ee:fd:ab:e7:8d:fc:
6e:0f:9a:6f:3e:11:c6:ee:ef:fb:7a:88:b6:cf:57:b3:ef:ad:
59:a9:a3:64:98:87:e7:1d:b5:15:c2:ca:29:0d:ce:14:cf:17:
72:c8:11:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:13:28 2025 by rpki-client