Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/32d22c59-0686-45a0-b4ff-0c9f1c1ee7e7.roa
File: 32d22c59-0686-45a0-b4ff-0c9f1c1ee7e7.roa (raw, json)
Hash identifier: 7ll9HuPCJ03BA175lbf1GfUen5ZleHwgO9G+OjXZjjk=
Subject key identifier: 72:08:A5:58:FF:20:FC:5A:A5:5F:5B:36:02:25:EA:A5:D5:2A:D1:EB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2EC12AED0FB7EF9878D7F7F345A1339B098D6B2F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/32d22c59-0686-45a0-b4ff-0c9f1c1ee7e7.roa
Signing time: Sat 28 Dec 2024 00:00:00 +0000
ROA not before: Sat 28 Dec 2024 00:00:00 +0000
ROA not after: Sat 01 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:c1:2a:ed:0f:b7:ef:98:78:d7:f7:f3:45:a1:33:9b:09:8d:6b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 28 00:00:00 2024 GMT
Not After : Feb 1 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:0a:8e:af:63:e0:e4:be:03:12:e7:43:0b:
01:88:f9:17:9e:a6:4a:ed:84:02:22:9a:88:8e:60:
99:e2:9c:b6:7b:c8:d2:23:14:38:f2:15:fe:5f:d2:
93:5d:b1:fc:64:be:16:4f:5b:3b:e9:1f:87:c7:50:
2b:b4:7d:a6:e7:7f:94:c3:3c:b7:e5:e0:d7:80:de:
ff:b3:39:cc:38:58:c3:3c:03:78:74:f4:7c:09:50:
e6:fa:58:24:60:99:ee:ca:c3:6b:d0:20:3a:4a:8f:
26:c4:ef:d9:68:a6:10:86:fe:e1:b6:bd:c6:0c:fe:
55:17:29:35:5b:54:d5:8b:fb:30:2e:dd:52:84:46:
5e:5d:62:b8:d9:35:fa:87:4e:bd:36:22:b6:f5:4c:
35:22:88:69:c4:19:4a:e8:3f:93:ab:58:cf:a8:8f:
35:c4:7d:9f:85:f4:fd:78:1a:31:ef:1b:54:f0:c5:
0f:32:dc:76:42:94:d0:b4:09:e4:12:90:2d:1e:c4:
50:b6:00:03:ae:f1:b6:10:63:15:f5:56:1a:9f:e1:
d3:af:e6:91:17:25:8e:1f:b3:52:0b:ac:cd:14:d7:
cf:da:f6:ff:2d:ab:08:6e:84:07:8a:f5:63:c5:3a:
ed:b1:5d:dd:6e:1e:f3:f6:08:06:83:a0:03:51:df:
1b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:08:A5:58:FF:20:FC:5A:A5:5F:5B:36:02:25:EA:A5:D5:2A:D1:EB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/32d22c59-0686-45a0-b4ff-0c9f1c1ee7e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:d3:4f:cd:2e:8b:6b:ee:d1:29:8c:da:bf:91:7f:9d:fe:12:
28:a2:fc:57:e4:b3:45:3a:db:13:16:bd:0a:37:83:57:85:57:
ed:c8:62:53:8c:d5:54:c8:08:11:cc:27:c1:4f:77:80:20:15:
5d:23:a8:57:e3:a2:5b:bc:d4:ff:6d:e1:6f:d6:88:08:14:ac:
3f:07:7e:53:10:f5:67:f1:f0:46:f3:17:95:5c:3c:5f:24:b6:
96:fc:48:bf:f8:81:50:05:f1:98:98:78:b4:3e:2e:8d:96:e1:
1f:5b:3b:f4:3d:52:ac:2f:77:61:a4:c1:6d:c7:a3:e9:96:c5:
12:a7:59:49:2e:f2:f9:b7:2f:5e:71:ab:b3:3d:08:bb:03:22:
2d:93:d6:f4:21:94:3e:18:d8:82:5f:d5:1f:02:c6:50:9b:ec:
d3:23:ad:da:ea:40:01:55:d3:94:1d:0e:7a:a2:ff:6c:58:7f:
59:f8:92:88:6f:b3:c4:af:39:b7:6d:fb:c5:b1:36:4b:c7:15:
3d:cd:db:3d:a8:f5:79:ae:da:dc:14:c3:9a:7b:c2:46:80:96:
4c:1a:14:dd:28:4f:1c:12:aa:9f:12:8e:4d:6a:a7:70:20:8f:
80:50:55:cc:c3:41:51:aa:3f:cc:49:19:8f:42:16:d5:ec:f1:
e4:42:95:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:08:09 2025 by rpki-client