Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2d20a32b-d2b7-44c9-9823-471a7faa4230.roa
File: 2d20a32b-d2b7-44c9-9823-471a7faa4230.roa (raw, json)
Hash identifier: kE6yqeTB2UMGBAZ6hgB6pAmyRZYvi6L8+oQoPaMduzM=
Subject key identifier: 9C:12:84:74:C2:63:46:DC:F5:23:63:0A:FB:DF:FB:81:43:5A:AE:A1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 02C5399C52830E70C6FC4331EB414DFEC72F1029
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2d20a32b-d2b7-44c9-9823-471a7faa4230.roa
Signing time: Fri 28 Feb 2025 12:38:21 +0000
ROA not before: Fri 28 Feb 2025 12:38:21 +0000
ROA not after: Fri 04 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:c5:39:9c:52:83:0e:70:c6:fc:43:31:eb:41:4d:fe:c7:2f:10:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 28 12:38:21 2025 GMT
Not After : Apr 4 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:ec:85:28:16:9f:0e:78:0d:91:c9:85:c2:
64:52:d2:2a:ef:83:69:ff:26:4e:a3:b5:ba:87:38:
5c:fb:10:e1:6e:48:7c:22:3c:86:0c:13:61:49:fc:
88:fb:05:84:21:6c:69:93:21:12:7e:42:3d:79:aa:
af:a9:dd:51:98:83:f6:cc:a4:a1:fb:94:b9:04:9f:
13:8d:c1:5a:4b:97:92:40:4e:58:9c:0d:c1:56:74:
0e:7a:9c:2f:4c:ce:85:79:59:4c:c5:0a:c1:9b:27:
90:d9:e5:6b:89:f5:5c:45:e3:b8:8a:b2:b7:64:b3:
d8:e8:0f:95:0b:74:d9:82:ef:f8:82:fa:6b:44:c8:
12:90:eb:93:03:ad:6a:41:35:e6:13:9f:5f:53:09:
64:83:2c:87:f7:28:39:ce:54:af:6a:fa:63:c8:dd:
d2:a5:6b:27:06:0b:76:0d:07:f9:a2:51:9d:af:9f:
3f:51:9c:28:32:73:45:be:97:5e:66:e9:28:1d:76:
0d:c6:f5:e4:79:b0:fd:ff:9b:d0:70:bd:84:dd:3c:
6d:35:de:27:90:08:d9:9b:2d:96:54:7c:e0:7f:f4:
c2:1a:e0:49:c4:2a:82:9b:dc:14:50:2e:74:8a:a1:
ad:dc:a3:df:4d:3b:20:1d:61:60:3f:bf:5f:03:f0:
6a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:12:84:74:C2:63:46:DC:F5:23:63:0A:FB:DF:FB:81:43:5A:AE:A1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2d20a32b-d2b7-44c9-9823-471a7faa4230.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:47:81:81:c9:b8:75:29:98:bc:59:53:50:34:86:cf:40:88:
f3:20:f2:43:98:99:e3:8f:4b:91:ba:77:d4:de:04:1b:10:a3:
55:f9:df:d4:a9:06:1e:3e:4f:32:3e:36:68:af:72:7e:1d:2a:
6b:88:ea:c8:92:51:76:58:e9:2b:42:b8:28:e2:77:8e:86:b7:
f0:23:c0:2a:30:8b:67:da:80:b8:65:d5:e2:56:81:73:33:c4:
c7:db:8b:8d:c5:b1:48:36:d3:da:ca:8d:c5:e0:39:ae:70:11:
12:c5:e6:e2:a8:12:ce:e2:0f:28:20:3d:78:5e:0d:7a:f7:27:
47:78:a4:e0:ed:47:26:ad:36:45:d2:2c:52:c2:52:d8:46:44:
fa:09:4a:4a:9c:a9:4d:41:c6:c2:a1:0a:9e:9a:42:5d:6a:68:
d5:43:f7:84:1d:df:78:1d:cc:b2:8a:2c:97:64:67:a9:bf:df:
ab:f4:cf:51:95:ac:3c:2e:1c:fd:bf:6a:c8:3f:4d:ac:0d:12:
75:b5:e0:7b:ff:28:bf:82:99:87:72:de:ad:d2:88:93:4a:19:
c8:b3:92:f9:ca:ed:9c:ac:12:02:c9:57:65:77:6c:27:f5:55:
10:50:1e:ca:fc:c7:54:a2:c2:6a:3e:f1:c2:56:59:6e:13:34:
5f:54:47:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:42:08 2025 by rpki-client