Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/29398e7c-cb0a-4f5f-86a0-471f6c85a8a5.roa
File: 29398e7c-cb0a-4f5f-86a0-471f6c85a8a5.roa (raw, json)
Hash identifier: PGRkzenJvg/75WViNg5MJdkJoX/CawtEnK3gg1LYcLw=
Subject key identifier: C0:81:8E:0E:E8:98:07:0C:32:A9:F0:AC:95:DD:4F:F7:C1:1A:D8:2C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7C5A7CEF4B8C8DDB5E3309BA4D6AD6198A0C7BAC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/29398e7c-cb0a-4f5f-86a0-471f6c85a8a5.roa
Signing time: Tue 04 Feb 2025 00:00:00 +0000
ROA not before: Tue 04 Feb 2025 00:00:00 +0000
ROA not after: Tue 11 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:5a:7c:ef:4b:8c:8d:db:5e:33:09:ba:4d:6a:d6:19:8a:0c:7b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 4 00:00:00 2025 GMT
Not After : Mar 11 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:61:0d:48:3d:de:38:6d:fd:f7:d1:b9:cc:
ff:9f:4a:7e:31:e0:10:85:ea:65:09:66:de:a8:c0:
e6:55:9b:cb:6d:1f:52:4a:83:a3:2e:f9:58:6f:bf:
5b:d3:8d:32:e7:d8:78:29:50:25:13:ef:bd:78:d5:
1e:51:64:40:d0:1c:cc:0e:75:6f:f1:03:08:65:f9:
02:64:fe:fd:9c:40:47:d5:85:e5:37:ea:d5:48:bb:
2d:89:a1:80:23:c7:f6:27:b8:8e:f2:5a:55:68:30:
60:c0:52:d2:60:6b:07:be:fe:25:58:c2:71:70:fd:
99:04:5c:17:2c:88:6f:71:ab:6c:6d:ed:d6:11:36:
76:69:b3:f1:10:92:12:6e:cd:cb:a4:d4:1c:ea:8e:
cb:f7:c7:71:69:12:6c:d6:d0:fe:a2:f6:4e:45:32:
1e:d7:21:98:62:a3:e8:ad:1f:00:80:e9:72:56:fc:
a4:e0:23:88:1f:7e:ae:49:9e:a4:2b:10:a2:5e:2d:
a9:d9:b3:6f:f2:f6:68:e3:25:cf:22:7a:b5:6d:2d:
0d:68:60:b7:5e:6c:02:a7:de:b5:1f:a4:62:3c:ad:
44:f7:5d:8e:92:32:82:8a:0a:f3:86:19:82:02:23:
f5:27:79:31:c8:7d:ed:7c:1a:59:99:81:ca:59:36:
e9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:81:8E:0E:E8:98:07:0C:32:A9:F0:AC:95:DD:4F:F7:C1:1A:D8:2C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/29398e7c-cb0a-4f5f-86a0-471f6c85a8a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:ba:68:09:31:e0:3b:a9:28:8f:05:78:4f:03:10:3f:4d:f8:
33:32:d7:b6:d4:2d:22:83:3b:01:db:23:88:6d:b8:1b:8a:11:
14:3b:77:dd:af:5c:01:71:20:fc:b2:95:f7:5b:a1:f2:e2:cb:
fa:9a:65:38:59:5d:70:9d:2d:b7:83:ec:bb:7f:a1:b1:9c:91:
dc:0d:43:a9:c1:11:68:30:d7:40:60:62:eb:31:2c:4e:a5:d7:
2d:57:7f:4f:e3:b8:e0:b0:6f:1f:7c:35:e7:c1:03:1a:46:06:
51:8d:7a:95:f1:b7:a6:0e:01:3d:af:9d:24:63:22:a6:5f:d2:
59:d4:a3:18:d1:6b:8b:63:91:b1:0d:0c:a7:32:71:fa:e1:ed:
b9:a3:ed:72:7f:f1:69:5c:fb:d8:b0:86:d1:c7:16:0c:bc:ef:
0a:ec:1a:19:f8:40:f0:9d:a5:fb:ec:6d:47:56:b4:f8:0e:fa:
05:90:14:40:d3:6e:7f:bc:6f:fd:85:9d:f9:70:b1:f5:bf:05:
4f:88:5e:22:11:69:88:3c:e6:8c:be:f2:27:e4:21:c2:32:ad:
f4:75:35:0a:96:84:dd:96:21:9a:6c:cc:51:a2:b9:06:93:a3:
e6:6e:db:41:ae:00:b9:f5:bf:d0:18:86:1a:93:2d:09:54:df:
71:1f:fe:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:17:32 2025 by rpki-client