Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2c9c215a-e6a7-4bee-acbe-a20240fc3756.roa
File: 2c9c215a-e6a7-4bee-acbe-a20240fc3756.roa (raw, json)
Hash identifier: Tyu+b5qy/L5dk9PLw+G7kXd+H08LquH/f7tdTV0aE80=
Subject key identifier: DB:45:17:D9:1E:7F:38:55:5D:7B:48:BC:51:6C:F5:90:97:6E:7E:4E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 25E3DF5A02CACEF091F914ECFB409FFD10468FD3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2c9c215a-e6a7-4bee-acbe-a20240fc3756.roa
Signing time: Wed 17 Jul 2024 00:00:00 +0000
ROA not before: Wed 17 Jul 2024 00:00:00 +0000
ROA not after: Wed 21 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:e3:df:5a:02:ca:ce:f0:91:f9:14:ec:fb:40:9f:fd:10:46:8f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 17 00:00:00 2024 GMT
Not After : Aug 21 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:5b:88:d2:a1:60:6d:24:8e:4c:38:9a:35:
e0:15:c7:03:d4:cf:91:99:84:0e:99:57:e7:28:3b:
45:62:6a:f3:98:49:95:54:d0:d1:f3:32:e5:1d:24:
33:1e:c5:43:48:83:17:6d:cf:66:f3:5c:f7:bd:31:
ba:55:4f:40:27:37:0c:3c:d3:08:6a:42:bb:42:ad:
7c:a6:c2:33:69:a3:82:67:e0:ad:e2:cb:eb:0e:4a:
9b:f9:c3:44:09:cc:5a:c5:39:01:14:20:e4:0c:db:
4d:a8:f0:03:45:21:2c:7c:8f:2b:b8:9d:fa:12:d3:
1e:26:a5:8d:b1:f4:9c:7c:bd:66:5f:81:df:5b:e4:
09:af:b2:d2:68:17:87:2d:df:02:0f:88:a2:51:41:
37:6e:bd:d5:f4:c3:1b:17:f0:ce:d8:f6:83:f3:8c:
8f:36:4b:70:d1:d9:22:25:7c:9f:d2:37:75:a1:99:
38:57:b7:5a:13:b2:88:6a:de:7d:88:08:18:eb:78:
2b:48:c1:d9:73:33:d1:50:72:92:e4:a4:ac:6e:5d:
69:fc:84:71:93:d5:95:36:f4:b4:18:d9:27:15:29:
88:e9:68:d4:a6:3e:bf:02:18:82:9f:e2:8b:d0:aa:
f6:80:2b:e9:18:50:02:2b:96:b4:79:09:42:90:83:
8f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:45:17:D9:1E:7F:38:55:5D:7B:48:BC:51:6C:F5:90:97:6E:7E:4E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2c9c215a-e6a7-4bee-acbe-a20240fc3756.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ed:a3:c9:d1:30:a6:3f:0f:09:1b:b2:da:88:c2:a7:c2:48:
6c:17:71:2d:60:ef:1e:57:d4:77:56:5a:6f:6d:56:51:3f:49:
84:5d:6f:67:59:f9:28:43:f2:b7:2b:69:fd:da:ba:8c:33:a6:
3c:29:37:de:fc:66:ab:5f:85:88:f3:9a:76:70:dd:61:9b:1c:
2f:b0:13:e8:d7:ea:ab:2f:04:39:86:e7:10:c2:23:dc:7d:e8:
a8:1a:ca:18:61:8d:b5:de:7c:c2:a1:03:7f:1d:4e:41:99:9d:
80:31:33:cd:11:9c:b9:f5:ea:3b:e8:c0:1c:19:49:cc:64:14:
62:d6:1a:98:a0:bc:41:e1:df:71:d5:c5:47:46:64:86:a7:6e:
95:dc:73:22:1d:b2:08:82:4d:96:d9:73:c2:38:6a:4d:0f:e4:
84:a3:79:b2:43:83:35:81:f7:fb:c2:cf:e4:d5:bd:14:dd:a9:
6c:b7:74:5e:51:a3:16:f8:4a:eb:04:b4:ec:73:19:a0:04:ab:
ad:2a:b7:da:8c:80:41:81:af:bd:7b:47:a6:e3:d1:34:07:27:
18:fd:fb:65:dd:45:d9:fb:c3:f1:ae:cc:65:59:a4:4f:8f:91:
5c:b2:f9:75:18:e6:6d:f2:92:3f:45:54:75:45:e9:24:a2:3e:
0e:5e:a0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:38:25 2025 by rpki-client