Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/26813bbe-d822-4189-8b91-b338540b761e.roa
File: 26813bbe-d822-4189-8b91-b338540b761e.roa (raw, json)
Hash identifier: BjhjNFk7MbOIstsJxR/bEk7Z/lTg7OWeRoln9W+scRA=
Subject key identifier: 99:C2:8F:58:DD:B5:DB:D2:4C:13:C8:A0:6D:3B:51:5C:A6:6C:BD:9B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 28CDA3EC16F5FDAEAEF38C969DEB81DD51A7DD1F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/26813bbe-d822-4189-8b91-b338540b761e.roa
Signing time: Sat 06 Jul 2024 00:00:00 +0000
ROA not before: Sat 06 Jul 2024 00:00:00 +0000
ROA not after: Sat 10 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:cd:a3:ec:16:f5:fd:ae:ae:f3:8c:96:9d:eb:81:dd:51:a7:dd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 6 00:00:00 2024 GMT
Not After : Aug 10 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:3b:92:3d:fb:85:20:62:ad:12:00:cb:a5:
1a:38:91:a0:91:d1:c8:a3:b7:94:7d:ce:39:77:ee:
72:36:8c:bf:72:57:6c:9e:c2:cd:33:58:2e:1b:c3:
ff:ec:11:31:75:1f:4a:fa:6a:7c:cd:2b:65:49:0d:
c8:4a:6c:5d:a9:4c:4e:73:c4:8f:2e:a1:0e:e4:a3:
ec:28:ef:5f:4f:8c:43:af:2c:ab:23:b6:57:99:0a:
15:36:0b:ee:93:3f:f6:79:5c:2a:be:30:e4:ca:f7:
80:47:85:7a:6d:01:7a:3d:44:ec:30:d7:83:e9:0c:
cf:a0:0b:88:64:1e:4e:56:d9:c9:f6:dd:0e:1d:f7:
81:1f:60:c0:2c:14:94:6a:20:af:2a:24:ff:4d:e2:
59:ad:16:96:d3:a7:d5:56:1a:26:37:bf:1c:58:e9:
d0:fb:c4:6d:de:ea:1f:f5:9f:12:27:b8:26:ec:8e:
ee:5c:0c:b0:a3:f5:61:bc:1b:79:80:76:d1:a2:ba:
5f:5a:19:8a:57:e5:6c:4e:37:f8:71:86:68:05:36:
34:94:91:c2:8c:bf:e0:25:7d:eb:45:57:3e:80:72:
49:2b:65:8e:bd:f1:2e:b8:40:9b:e6:b9:ad:54:d5:
09:13:fc:c1:f1:fd:f8:50:0b:fc:2f:4b:3d:2e:04:
9d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C2:8F:58:DD:B5:DB:D2:4C:13:C8:A0:6D:3B:51:5C:A6:6C:BD:9B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/26813bbe-d822-4189-8b91-b338540b761e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
68:7c:55:ed:88:d8:b7:c9:9d:b6:42:81:2b:d4:34:b8:bd:3e:
0d:be:23:13:53:61:59:5b:5c:88:cd:44:07:06:4d:e0:d9:02:
95:ff:8b:8e:fe:d9:71:d2:b0:c5:bc:af:ae:a6:62:79:a1:13:
34:0c:80:c2:05:4e:4a:f2:2a:e3:a8:5d:2b:6c:b4:16:ff:2d:
77:2a:98:b6:9b:a2:80:55:91:a8:c1:60:1d:63:8d:bd:bf:06:
97:4f:87:7a:99:fb:10:7d:a4:b8:1b:d9:c8:61:4d:9c:1a:08:
fc:8b:5c:ed:41:29:12:77:6c:02:f3:df:7f:6e:17:cf:b7:75:
79:03:ee:be:8c:0b:dd:a6:72:58:47:02:a2:67:78:cf:5c:fb:
a9:a5:5c:64:6e:bc:e7:5f:b7:e0:8f:d5:e8:72:fb:3c:b4:2b:
51:16:27:53:68:28:da:4d:0b:55:4c:83:27:d3:2d:de:8d:f0:
15:86:33:f9:dd:08:42:44:39:5a:9f:0b:47:5c:67:3d:de:51:
8c:0c:6f:33:17:1a:64:97:2f:6b:c5:ca:93:c2:93:25:11:b0:
78:42:c4:f6:e3:25:a6:a9:c8:ab:be:c2:de:27:3f:ee:b3:bd:
8d:f7:cc:2a:6e:54:4e:96:1d:00:3a:48:ae:6b:4c:e2:8d:47:
29:50:83:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:47:12 2025 by rpki-client