Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/281c3788-b61f-4810-aacf-fc16acbdeaf5.roa
File: 281c3788-b61f-4810-aacf-fc16acbdeaf5.roa (raw, json)
Hash identifier: 3BjtxzYb4vCPRRFs7RiooogMzyKrGRhgsJ5KziXLS9A=
Subject key identifier: 0A:76:31:FE:26:4B:D5:AB:03:E5:F2:4A:2A:75:B4:2C:F6:B6:B2:CC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 66923C75BB4FA803E744370C00CE2378EB8BD890
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/281c3788-b61f-4810-aacf-fc16acbdeaf5.roa
Signing time: Tue 03 Oct 2023 00:00:00 +0000
ROA not before: Tue 03 Oct 2023 00:00:00 +0000
ROA not after: Tue 07 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:92:3c:75:bb:4f:a8:03:e7:44:37:0c:00:ce:23:78:eb:8b:d8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 3 00:00:00 2023 GMT
Not After : Nov 7 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:76:ad:0f:d6:5f:9a:bf:04:31:7c:f5:2a:
af:05:74:91:9f:4f:dc:26:0f:ef:2c:fe:5e:96:05:
72:b1:9f:14:05:56:ad:8d:64:14:0d:78:f1:16:b8:
77:06:1f:d5:74:73:a9:28:d1:0d:5f:32:6b:38:64:
e9:fc:81:ab:bf:7f:53:db:35:af:5f:72:22:96:eb:
16:82:74:93:4a:de:29:9d:c7:d7:19:9a:05:ce:89:
eb:b0:fb:31:51:a2:af:50:b7:f5:0d:c7:de:39:98:
1d:35:6c:e9:d9:40:cd:6b:5c:1d:b2:82:cc:52:74:
56:26:7d:cb:32:2e:11:93:03:cf:7a:59:ef:ce:cc:
c2:27:f1:2a:68:33:0f:da:a2:86:40:d5:77:3a:75:
e6:ee:4d:93:d3:8f:0d:dc:fc:24:9e:9e:8d:7a:8e:
72:da:4f:a4:17:13:05:77:13:04:6f:69:02:01:d0:
f2:c6:6b:92:34:97:96:b1:ab:f1:ab:c9:5a:38:64:
48:f8:1e:67:dc:72:da:ae:a3:81:c5:3f:fb:50:2a:
a2:c0:45:a0:a3:26:98:98:d7:83:9d:ac:4a:aa:96:
4e:bb:53:04:d3:58:5f:d1:18:56:f5:01:6d:2e:e1:
e3:41:67:a0:dd:3b:64:e9:7a:62:bc:bd:82:ae:43:
1e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:76:31:FE:26:4B:D5:AB:03:E5:F2:4A:2A:75:B4:2C:F6:B6:B2:CC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/281c3788-b61f-4810-aacf-fc16acbdeaf5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
22:cf:bb:79:68:89:c0:5e:2a:ac:5a:37:63:9e:5f:0e:ce:8a:
7e:24:da:38:cb:1d:ba:f7:ac:60:47:cb:0e:54:ed:fb:f8:d8:
4e:3a:5a:aa:b4:a6:00:2b:5f:70:0e:73:cd:07:e1:bf:2d:4e:
01:35:55:72:73:b5:3a:21:54:55:9f:07:c2:5f:10:30:71:59:
d7:9d:c2:c9:1b:c0:2a:8c:e6:f0:f1:43:5a:21:8b:39:b7:48:
8c:8a:29:84:09:b9:0e:2e:21:22:a1:46:fc:5f:9c:1b:17:b9:
ab:ed:ac:4e:c2:cd:df:23:d3:8a:2f:71:40:d5:d7:01:38:c3:
b0:b4:64:30:ee:ac:45:97:15:a6:f0:cd:b7:1a:f9:82:ab:32:
3d:2c:1f:c5:ca:af:ce:dd:83:ec:2e:53:eb:53:49:35:0e:24:
10:7f:04:9c:f4:4d:d3:4b:86:8c:01:3d:1d:b1:92:f6:dd:f9:
46:ed:52:f1:23:51:2e:6f:2d:2b:23:37:52:6e:8a:d1:64:de:
5e:43:df:9b:d6:6d:a7:9d:ce:c5:2a:f4:c8:7a:76:8d:a6:ea:
8f:3b:32:0b:00:a6:5a:7a:8f:80:ba:97:99:28:af:7b:dc:45:
df:66:0b:4e:d3:aa:1e:96:f8:51:65:34:31:24:28:0f:04:a0:
3a:96:6d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:39:24 2025 by rpki-client