Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2da572bd-5c84-4ac9-8e7c-93b620228b60.roa
File: 2da572bd-5c84-4ac9-8e7c-93b620228b60.roa (raw, json)
Hash identifier: fbn4nyMQtoJNRvYLAWE+Tlh66UKTjV8CL5cDHaO8h2Y=
Subject key identifier: 90:4F:0E:97:0B:45:4A:4E:A3:2D:0E:8D:BB:1B:84:60:79:8A:E1:30
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0949C4EB3366A3E7755C0F8903C4FE3D5BFE7B27
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2da572bd-5c84-4ac9-8e7c-93b620228b60.roa
Signing time: Mon 12 Feb 2024 00:00:00 +0000
ROA not before: Mon 12 Feb 2024 00:00:00 +0000
ROA not after: Mon 18 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:49:c4:eb:33:66:a3:e7:75:5c:0f:89:03:c4:fe:3d:5b:fe:7b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 12 00:00:00 2024 GMT
Not After : Mar 18 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:6a:e4:98:75:66:4a:2f:67:7f:f2:1c:2a:
8b:4a:9d:4f:b8:42:f4:bf:76:c2:85:4f:cf:e6:66:
94:6f:e2:57:50:c2:79:c8:fb:15:77:a8:fc:75:b0:
69:30:c8:e7:6f:7f:2d:3f:51:ce:0a:a7:7f:50:bd:
a4:be:7b:5f:81:28:98:04:85:e7:66:0d:ae:32:46:
b8:77:50:12:ff:af:9d:82:ac:9e:56:48:10:86:d4:
f6:2e:3b:06:99:06:0e:aa:0f:04:32:b1:e3:15:1f:
53:dd:40:bd:5f:3b:02:a1:e0:df:68:de:eb:e0:51:
9e:7e:44:cc:86:e4:43:ec:d3:54:ce:67:1f:d1:f3:
df:20:63:4d:f0:e7:05:1f:e7:25:63:8f:86:d1:87:
5d:5c:6d:bf:e8:be:67:c2:8a:1c:50:bb:b0:69:63:
c3:3e:40:36:5c:76:69:97:19:0a:81:fb:8d:8e:b4:
63:2b:79:c7:cc:13:a9:42:2a:f3:3a:fe:24:f9:c7:
f2:07:20:a4:c2:9e:9b:a9:00:50:5c:45:3a:1c:11:
4c:60:d2:18:17:1f:c4:3b:50:6e:91:94:2d:27:c1:
89:1a:58:03:ca:0a:19:58:ef:00:ca:35:22:8d:ac:
ac:ac:d9:75:47:c3:99:c4:a7:3c:11:01:04:6e:00:
a8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4F:0E:97:0B:45:4A:4E:A3:2D:0E:8D:BB:1B:84:60:79:8A:E1:30
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2da572bd-5c84-4ac9-8e7c-93b620228b60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
73:10:22:b9:91:36:06:99:60:1a:7c:b4:7b:42:9e:88:df:a7:
54:34:ae:13:24:10:cd:15:c4:c4:2a:a4:78:5b:e6:b7:a9:93:
67:90:6d:0e:50:9a:b8:62:f1:49:f5:1f:20:8b:c1:56:3b:22:
d2:b9:88:6e:69:d7:99:f4:80:16:90:90:4c:1b:bc:7b:d5:01:
50:74:4e:be:96:88:d6:ca:64:56:e0:13:c8:7d:bd:17:11:cd:
54:b8:92:a9:b4:d9:1b:1d:ac:fa:47:aa:30:2f:c3:46:b4:72:
8c:70:1f:91:10:f6:75:92:1a:7b:21:d7:5b:8f:50:e6:51:e6:
58:ca:2b:ef:33:b6:60:01:65:b2:83:5f:a2:66:94:4b:ac:aa:
79:77:36:4c:87:27:74:75:56:c2:31:cb:92:8e:25:1f:bf:cb:
2b:7c:49:62:38:e1:75:f8:55:93:09:f1:ab:00:ed:ea:55:bd:
7e:87:bf:30:f7:fb:03:3a:96:f3:9e:a9:05:48:f1:0d:38:e3:
b8:85:35:b5:6f:f8:e4:37:ab:c0:71:ed:43:c6:15:76:26:f9:
64:68:85:61:59:f1:ce:44:f5:aa:0a:4a:73:59:dc:f0:1e:86:
a8:39:25:e5:ab:9d:7f:1f:67:a7:0a:9c:fc:74:3b:0e:c7:44:
75:29:49:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:00:35 2025 by rpki-client