Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/301162db-28ab-4220-8f4e-2dec6da8db0e.roa
File: 301162db-28ab-4220-8f4e-2dec6da8db0e.roa (raw, json)
Hash identifier: 8+KwRAp71VQDDl0EiOlFbVDcWbsqT+cBZDiArI7WZ6I=
Subject key identifier: 32:64:3C:E6:1D:FA:8B:67:7C:DC:2D:30:0D:37:FA:12:09:2A:CF:12
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6FAEA9D79C39D9BC6A63986EE5F8A9FE4009968C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/301162db-28ab-4220-8f4e-2dec6da8db0e.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:ae:a9:d7:9c:39:d9:bc:6a:63:98:6e:e5:f8:a9:fe:40:09:96:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c0:0c:e7:a2:6a:2e:31:7f:21:b1:d3:6d:bd:
0f:3c:a2:6d:94:13:a5:50:51:94:2a:79:82:8a:de:
47:07:4a:c3:f5:10:b3:87:26:d9:82:6d:31:ae:10:
0f:31:52:ce:1b:18:30:16:69:d7:ea:f9:6a:a9:68:
1f:1c:56:b2:ad:2a:c6:83:30:fc:38:0e:78:29:c8:
7b:be:6c:7c:76:ee:8c:44:61:44:4d:64:45:d6:78:
f0:51:26:8b:3e:f1:a8:de:54:1d:41:89:c5:1d:51:
af:e4:f3:1f:c0:b5:70:21:5f:16:2b:99:1a:20:a0:
17:8b:07:69:8a:4e:75:35:48:af:d9:be:19:c4:51:
26:98:a2:96:59:46:40:0b:59:5b:d9:0d:b3:7b:05:
06:5a:03:96:cb:95:e4:59:32:8d:0c:d1:12:31:8b:
b5:fd:9f:8c:3e:26:2c:0e:3c:4b:10:6b:f5:5f:7a:
92:49:7d:a2:ad:37:48:05:34:d9:4b:27:a0:fb:c1:
54:39:7c:a1:dd:d8:f3:12:7c:a8:e5:ec:c1:16:8d:
35:a5:f3:80:eb:a0:e8:a8:d1:91:63:46:24:44:ce:
f9:63:07:e3:53:a2:2d:8d:be:69:4a:d6:91:e9:26:
42:0b:c9:7e:9d:22:8b:42:2b:8f:04:ca:1e:b4:c9:
b7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:64:3C:E6:1D:FA:8B:67:7C:DC:2D:30:0D:37:FA:12:09:2A:CF:12
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/301162db-28ab-4220-8f4e-2dec6da8db0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
11:60:4a:6a:eb:44:ef:83:2f:36:08:6e:6d:65:b2:43:4a:3a:
77:bc:18:26:b2:bf:b8:86:b2:2d:3b:08:84:38:ee:ae:09:68:
2f:ea:04:2f:a3:19:ff:7e:0c:c1:2f:36:58:d6:25:3b:32:18:
f4:19:a9:89:6b:f3:83:06:e7:76:d6:45:86:8c:af:8e:25:df:
82:c1:8b:0f:c4:70:8d:91:80:d8:08:d4:4e:6e:82:a5:bf:0a:
f9:f3:fe:d3:cb:c3:5e:a4:48:89:ef:69:81:24:f4:80:f9:7c:
8d:63:9b:51:1a:8c:aa:7c:85:6b:50:95:7f:86:ab:b4:c5:05:
74:5d:7c:06:19:41:a1:41:35:b0:8a:ea:74:5d:78:85:93:f2:
f2:dd:2d:45:00:9d:9e:a6:6f:87:96:2a:77:39:54:5f:58:2e:
81:dd:55:53:e2:b5:14:15:6e:06:f4:16:e5:b0:3c:9f:4b:03:
11:66:48:08:cc:3a:7e:8b:7a:ac:d1:c3:47:94:2c:81:9f:8e:
6d:07:53:c4:4d:01:e2:f8:31:7a:f2:73:01:55:a4:1b:99:cf:
22:fd:82:20:fd:d8:6a:24:a8:58:ec:f2:ad:65:a9:2a:e9:a2:
86:4b:68:7a:b4:bf:be:c0:e9:0e:f9:e3:a4:97:9b:d7:3f:3b:
41:04:c9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:14:27 2025 by rpki-client