Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2f55d99a-8733-4896-84e4-1633cf821ebb.roa
File: 2f55d99a-8733-4896-84e4-1633cf821ebb.roa (raw, json)
Hash identifier: 1+rVNj2hNh846lksJq2bqcIp2RaUxHS2re8PpKBbcrU=
Subject key identifier: 1D:48:A7:92:0B:45:A6:08:01:F8:07:2A:41:D9:6B:1B:41:5F:9E:50
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3CDA96C4F10443A8A4E3F6D11C60C6F5E0164A34
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2f55d99a-8733-4896-84e4-1633cf821ebb.roa
Signing time: Mon 03 Mar 2025 03:23:19 +0000
ROA not before: Mon 03 Mar 2025 03:23:19 +0000
ROA not after: Mon 07 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:da:96:c4:f1:04:43:a8:a4:e3:f6:d1:1c:60:c6:f5:e0:16:4a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 3 03:23:19 2025 GMT
Not After : Apr 7 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:dc:12:ce:48:1b:13:f8:ea:e2:55:4e:9d:b6:
19:ca:b7:28:47:31:b8:bd:71:36:e2:76:26:67:24:
34:2e:aa:9f:3e:4c:8d:e7:58:d5:0a:5c:21:5b:e8:
95:c5:87:38:d6:86:ee:f9:0d:68:25:72:24:c3:16:
7c:3b:52:9d:da:84:82:05:5f:7b:0b:74:d7:7b:03:
1e:a5:7a:f7:02:ba:54:d4:41:78:17:a8:b2:16:49:
ac:b7:01:58:cb:3c:e9:12:10:9d:b3:e7:d9:d7:02:
d2:8b:91:45:56:03:1f:9d:68:60:cb:39:d3:9c:bd:
36:3d:51:95:71:f5:ac:30:f9:b9:24:bd:f1:f1:f1:
da:29:f5:91:02:68:af:ad:d5:93:90:06:c4:52:8d:
0f:c2:bf:c5:8f:4e:c2:91:88:29:3d:94:ee:56:42:
75:79:21:d1:76:f4:22:16:62:d1:26:3a:34:ce:ad:
7d:a2:c4:d6:74:a8:45:99:9a:4f:95:99:65:ba:57:
5d:57:37:cc:8e:c9:11:de:c8:00:18:dd:8c:19:bc:
80:38:18:22:6e:1a:55:70:82:79:9c:6b:a0:9c:21:
0a:47:a6:2e:ed:dd:cc:2e:7a:7d:ac:f6:b3:b7:5b:
1f:20:82:21:4f:6b:42:98:7c:c3:88:e6:ae:bf:06:
18:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:48:A7:92:0B:45:A6:08:01:F8:07:2A:41:D9:6B:1B:41:5F:9E:50
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2f55d99a-8733-4896-84e4-1633cf821ebb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
87:cd:33:55:c7:4e:7a:51:29:72:6f:eb:24:10:4e:4c:36:f4:
f7:64:81:ce:8d:72:e5:91:85:33:e3:70:28:4d:02:ec:99:71:
b8:88:4e:db:d5:86:ca:d2:6c:9d:8f:8c:97:4a:db:8a:7d:6e:
c9:a8:0c:5f:30:4c:e8:7e:07:d0:74:e9:ed:ff:6d:7a:76:b4:
e5:93:6b:86:1d:68:ff:94:11:f1:f7:6e:9a:53:22:18:0b:c2:
af:fc:b1:fb:8f:4b:07:8e:b6:fc:40:63:5c:74:d6:59:7b:01:
bc:57:5a:d7:dc:81:fd:91:7b:f2:89:6b:83:ee:f9:3a:e8:96:
1b:05:19:0d:75:dc:ce:fe:73:3b:cb:94:9b:b3:85:e2:50:bf:
88:0c:83:fa:05:3d:98:9f:28:9c:d8:46:f9:d4:43:81:bc:5b:
dc:6a:52:6b:e5:c3:d7:27:78:3d:b4:11:3e:e3:1e:22:f4:d9:
0a:7d:48:41:0e:bb:91:ee:bf:b0:14:ce:a7:aa:47:29:d6:16:
fa:6f:5e:37:da:7c:98:4e:a6:f0:7a:70:45:5d:62:21:0b:e5:
d4:1c:6a:59:d7:37:48:d4:4e:1f:11:f7:f2:53:ab:d4:59:a4:
f6:52:b2:c8:b8:f6:0f:59:e0:d3:c8:8a:33:7b:a8:22:1c:60:
9f:53:36:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:52 2025 by rpki-client