Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/317ca720-18c5-478d-9410-89441948f080.roa
File: 317ca720-18c5-478d-9410-89441948f080.roa (raw, json)
Hash identifier: uTF8hDbRfmjJnGnwLOg30fxbTMkOSPGaC42Xg7lp01c=
Subject key identifier: F5:86:A2:66:29:0A:A0:76:05:13:1D:D5:EF:0D:6E:5C:21:F6:47:07
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2F6E89F9E5F1B035C7E54136AF41E51F92724F60
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/317ca720-18c5-478d-9410-89441948f080.roa
Signing time: Sun 12 May 2024 00:00:00 +0000
ROA not before: Sun 12 May 2024 00:00:00 +0000
ROA not after: Sun 16 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:6e:89:f9:e5:f1:b0:35:c7:e5:41:36:af:41:e5:1f:92:72:4f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 12 00:00:00 2024 GMT
Not After : Jun 16 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c3:95:88:92:37:86:02:cc:66:ef:fb:ee:48:
71:7a:47:9f:a1:52:bc:c6:21:a9:91:09:dd:31:28:
7a:ed:69:ee:86:26:d8:f9:62:51:45:f0:2d:80:b0:
ca:49:f6:34:5c:8b:75:3d:1d:fd:7d:39:3f:7a:18:
ab:1b:fa:4d:2a:92:eb:f7:0a:17:36:45:50:f0:d7:
ef:a9:04:06:b2:9c:40:76:b2:75:bd:ca:1d:32:c3:
9e:ae:b0:dd:05:eb:a1:cf:21:ee:c0:ca:da:bd:40:
da:59:80:5e:58:d6:36:20:25:78:86:2f:b4:52:8a:
61:d8:8d:f7:75:6a:39:27:79:33:11:c6:a2:a7:88:
bc:74:b4:88:8c:6b:e9:7f:80:4e:ee:02:72:c8:24:
78:ba:f8:08:44:26:a3:53:4b:fe:81:67:0a:42:08:
b1:34:40:88:3c:be:da:ec:42:07:56:37:bb:4c:02:
ef:fa:17:a9:69:5d:4d:7f:10:97:25:2e:c9:b0:43:
64:db:e7:ab:c1:4f:2b:c4:02:fc:be:6f:de:3e:bf:
b2:b7:ba:57:4e:8e:83:b4:fc:10:7b:3d:d9:dc:97:
52:c5:bb:e5:8b:a5:16:ed:8f:05:51:ed:3f:a6:8b:
0e:0e:cb:2a:f6:22:fc:2d:39:5c:70:f4:73:85:0d:
fe:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:86:A2:66:29:0A:A0:76:05:13:1D:D5:EF:0D:6E:5C:21:F6:47:07
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/317ca720-18c5-478d-9410-89441948f080.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:6d:83:e3:81:a4:98:ce:86:45:bf:2f:ae:1e:98:a0:8e:93:
cc:98:ce:ba:8f:4b:d8:0f:62:b1:72:ad:b8:85:72:7c:75:25:
89:d5:51:3a:1f:f5:6d:d2:d9:de:33:9a:ca:ed:76:ce:82:d7:
f6:50:d6:53:4a:4d:73:6a:5c:20:76:bb:44:30:1b:38:6f:f9:
53:ec:a1:44:25:9d:31:85:a1:8c:8d:19:ce:c8:c4:ab:d0:aa:
25:ec:9d:7d:85:b0:e2:d9:bf:9d:09:71:cf:38:63:7d:9e:2c:
f0:aa:44:d0:0a:c3:7c:11:de:1b:06:97:fb:26:ff:27:ca:ce:
0d:75:8d:cc:06:7a:3a:5f:75:62:b0:d8:bb:a7:bf:7a:8f:61:
d1:ba:a5:15:37:f8:0d:2e:f1:22:0a:ac:c4:15:01:98:20:80:
6c:e6:05:ec:80:66:63:23:f4:50:9b:36:2a:11:17:64:c0:be:
37:24:33:a9:6f:dd:5b:90:26:20:88:33:91:be:43:78:94:4c:
50:7e:db:b2:62:29:92:6d:ea:23:02:b6:bf:6a:b0:50:df:f3:
3f:4e:76:1c:78:47:76:fa:51:69:99:a0:89:58:bc:be:cc:38:
e4:e8:50:e8:25:ce:c3:9e:d6:f2:8e:d1:84:78:c4:c6:ff:b3:
54:ff:d3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:47:47 2025 by rpki-client