Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2c419504-9a41-4405-b9a5-fc5517ec587f.roa
File: 2c419504-9a41-4405-b9a5-fc5517ec587f.roa (raw, json)
Hash identifier: i1LA096j7ByBLIpObKPKUx2Qr+60C+R7IqaQWGi+unI=
Subject key identifier: 64:90:A0:63:C5:7B:1E:0A:1C:CE:A4:28:39:09:F1:7C:C6:F6:0B:8F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6E566A99FA01697992F5FB523E5D52270488CEF7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2c419504-9a41-4405-b9a5-fc5517ec587f.roa
Signing time: Thu 19 Dec 2024 00:00:00 +0000
ROA not before: Thu 19 Dec 2024 00:00:00 +0000
ROA not after: Thu 23 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:56:6a:99:fa:01:69:79:92:f5:fb:52:3e:5d:52:27:04:88:ce:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 19 00:00:00 2024 GMT
Not After : Jan 23 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2c:c0:a7:27:2f:97:4a:7a:b6:37:82:b6:a1:
6d:3a:1f:ab:41:0e:ac:79:f4:38:74:3f:11:30:e8:
9c:04:a0:64:28:b1:ae:6d:07:b0:29:c7:e1:1c:d4:
0f:00:b9:30:b3:32:d1:a9:52:0a:34:d8:df:e7:3f:
9a:13:09:36:4e:f5:a3:13:95:38:00:51:45:87:3b:
15:00:d2:df:c3:1d:9a:ac:8c:d3:ec:c2:58:97:e3:
a8:69:86:15:ed:b3:79:60:f9:da:32:f1:08:32:88:
29:c0:43:80:7e:17:30:21:93:04:86:3f:e6:4a:f1:
cf:c8:ae:3a:38:0b:30:37:9a:b9:e1:a9:02:52:48:
0e:41:22:ad:ff:a6:c8:01:03:a3:5b:b9:39:4a:06:
30:03:65:de:0a:1c:e0:67:59:ca:d6:1d:b5:12:ad:
7e:37:69:63:ea:76:70:4e:45:c4:11:aa:1c:7d:a9:
4c:11:67:b5:a0:22:26:3e:15:5e:d5:b1:95:55:0f:
8e:35:df:71:fe:30:d1:d8:1a:dd:0c:14:f0:65:6e:
5f:af:c0:f7:3e:ac:22:18:41:22:0f:a4:d8:4f:6a:
30:e3:76:59:76:85:38:90:66:15:5a:4a:e8:8e:74:
be:62:62:2e:ee:dc:88:39:1b:4f:bb:be:96:d7:14:
f3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:90:A0:63:C5:7B:1E:0A:1C:CE:A4:28:39:09:F1:7C:C6:F6:0B:8F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2c419504-9a41-4405-b9a5-fc5517ec587f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
43:1a:5a:fb:93:0c:73:1b:53:1e:ac:1e:65:07:19:aa:42:9f:
92:30:56:c6:49:a7:f8:37:0b:23:46:0a:35:7a:5f:e6:e2:1f:
ad:3c:61:01:da:84:82:8c:88:dd:c5:08:48:dd:8a:a5:7d:d3:
57:26:37:0f:f9:05:2b:78:d9:9a:ff:6b:e4:a0:eb:71:84:ec:
48:be:cb:22:83:60:c3:02:b0:6f:a3:ed:fe:db:61:35:23:fa:
ae:5b:fe:57:de:6f:a4:a4:b0:35:1b:3d:c2:f5:9a:ff:35:63:
ec:8d:a0:1a:f2:24:a5:0d:d3:26:1e:48:fc:fe:16:d0:97:3c:
80:6a:22:6c:fb:15:58:72:40:a7:fc:55:c2:99:99:df:e4:95:
ae:f0:c3:b4:49:4d:e7:14:e1:3f:88:eb:30:8b:89:13:45:90:
99:2d:d6:a3:c6:a3:46:a9:a5:90:0f:3b:74:1a:57:6c:2c:26:
71:e9:e2:dd:27:47:27:13:a9:51:ac:65:01:af:48:09:58:2a:
5f:8b:30:e6:d7:39:f9:bf:6f:eb:2f:34:4e:a5:25:aa:d8:cb:
be:3c:b8:19:99:90:23:e2:fe:6d:db:14:0e:98:5b:93:b1:67:
2c:ca:a3:99:6b:01:d7:b3:bc:cb:19:64:26:bb:89:f0:bd:86:
b5:0e:58:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:28 2025 by rpki-client