Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/26d5f9b3-9a9e-4bac-81bf-ccffc86c8d89.roa
File: 26d5f9b3-9a9e-4bac-81bf-ccffc86c8d89.roa (raw, json)
Hash identifier: J8fWNdMXyzV1vnqeGWfDrFh+z2V7OXnsTFVvfshRFhw=
Subject key identifier: FF:63:5A:4C:39:76:39:EC:C3:97:45:5B:F0:19:C9:F3:75:C6:54:7A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7559BB3A84B911AA234CAE78D64E2BD5DD493361
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/26d5f9b3-9a9e-4bac-81bf-ccffc86c8d89.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:59:bb:3a:84:b9:11:aa:23:4c:ae:78:d6:4e:2b:d5:dd:49:33:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:44:1e:87:93:f0:18:7b:76:49:5c:74:a4:d9:
56:73:0d:2b:5b:fd:cc:f9:a5:47:d4:5a:c8:b9:f6:
db:da:23:ba:59:74:b0:58:c0:62:3d:55:27:b8:34:
37:e7:51:39:7c:1e:20:f1:6e:8f:2c:5d:1b:5b:41:
76:be:aa:f2:5d:f9:62:d5:b7:4b:bc:a0:ea:69:1b:
de:a6:bf:73:10:28:b9:1e:64:3d:d6:8c:83:fb:9f:
fd:e4:b5:06:4e:5f:cd:f5:de:a0:f0:61:16:28:20:
c5:50:cb:f8:3b:9b:66:a6:97:40:44:d2:5e:25:a4:
83:5e:c2:99:33:3a:8f:f1:87:48:ae:0d:a5:5e:d7:
78:96:99:db:9d:32:d5:f5:ab:2c:47:bf:de:44:aa:
ab:4f:43:b7:d9:88:a4:6e:c0:26:46:e8:62:1b:7c:
cb:e7:1b:05:6e:75:64:27:a0:86:3f:ce:41:4b:ee:
92:f7:aa:79:9a:71:d9:d3:26:f2:4d:aa:8d:47:c3:
fc:0c:d8:ae:69:71:92:0d:3d:d8:73:22:d8:f6:56:
74:6e:b6:5a:8e:34:ad:13:7d:42:4f:e5:2c:2f:85:
f5:95:a5:26:9a:be:af:a9:7e:02:8e:05:b5:cb:77:
88:2d:e3:a8:a7:5e:ff:1f:06:0a:46:f9:59:e4:8f:
bd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:63:5A:4C:39:76:39:EC:C3:97:45:5B:F0:19:C9:F3:75:C6:54:7A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/26d5f9b3-9a9e-4bac-81bf-ccffc86c8d89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
42:18:e6:c7:33:0c:55:c3:f9:69:e3:e1:1f:c6:75:43:ab:f1:
75:93:b1:02:76:bf:99:e6:2c:8b:92:b3:4f:d4:4d:19:f7:8b:
51:b5:30:d2:6a:7c:68:20:21:56:75:8e:a4:61:8f:04:06:93:
1f:3d:ec:bd:81:9f:40:a7:e0:39:c4:32:b3:11:3d:d4:c0:03:
c7:57:4f:4f:15:eb:41:0b:0d:10:68:3f:0d:60:69:fd:0f:2a:
1c:cf:a1:91:a6:2f:48:f1:c6:89:f9:cb:32:e2:87:83:fc:fc:
58:1d:65:cf:32:40:f6:35:e5:03:bb:14:cc:84:3a:10:1d:c7:
27:33:87:69:35:51:d6:ce:a5:73:97:3e:4f:89:fd:0d:e7:40:
83:a4:62:a6:45:ea:ca:67:b9:d6:54:10:fc:6b:3b:48:19:8c:
28:f9:26:bc:a8:b3:0b:b9:c3:4d:5b:5a:54:bd:75:e0:aa:42:
a2:6c:9d:09:94:1f:32:fb:a0:66:6d:cf:59:93:74:19:2a:b1:
48:21:05:17:c4:23:04:cf:a0:36:27:23:28:0b:0f:97:2c:c5:
a5:f8:1f:0f:1b:f3:1d:02:78:7a:48:6f:d7:c9:80:7a:20:8d:
0a:e7:a0:fe:2f:3b:4e:4a:f0:35:8d:73:d9:df:fa:c0:a4:d1:
ff:e8:8b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:52 2025 by rpki-client