Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3707f644-a5e4-4870-8ab9-494bdf1c8617.roa
File: 3707f644-a5e4-4870-8ab9-494bdf1c8617.roa (raw, json)
Hash identifier: 1dNyrKL6ukd80IunpDdUj8Sx4MZbneUUfZ0S7dTsHSQ=
Subject key identifier: F6:98:F5:AF:57:09:33:15:B4:95:67:55:B1:65:80:0F:BD:A6:9B:D9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7458662A5973DF5E757DEDF362A15A2E03FE3208
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3707f644-a5e4-4870-8ab9-494bdf1c8617.roa
Signing time: Tue 31 Oct 2023 00:00:00 +0000
ROA not before: Tue 31 Oct 2023 00:00:00 +0000
ROA not after: Tue 05 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:58:66:2a:59:73:df:5e:75:7d:ed:f3:62:a1:5a:2e:03:fe:32:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 31 00:00:00 2023 GMT
Not After : Dec 5 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b1:39:57:0b:55:bc:a8:cd:44:a3:4b:2f:18:
99:9f:ab:45:ac:f4:f8:12:5c:6f:74:09:23:3e:c4:
bf:a4:60:67:57:fb:b7:67:f5:d0:ce:e0:fb:13:ab:
77:68:84:61:40:ae:b2:07:6c:b8:0f:84:47:a7:76:
f3:2e:7e:c1:9b:53:aa:06:ac:bb:58:bb:f2:98:15:
3f:cc:72:ef:af:83:76:91:8a:ef:04:2d:0b:ba:32:
23:be:02:f9:6c:a7:02:8b:4f:8a:32:3b:56:27:55:
84:db:17:ff:16:b3:a5:8c:b3:c8:07:3d:52:80:46:
a5:d0:2b:5f:37:9a:62:26:b4:96:dd:b9:86:5d:a3:
f3:8b:2f:bf:4a:cf:89:6e:ab:e5:7d:69:d7:29:ce:
8b:e7:cc:33:b1:9b:e4:e8:c6:6d:4b:dc:69:3e:1c:
ce:63:0d:07:97:2a:de:c7:d5:f8:87:de:fd:3d:d0:
81:b9:22:b3:3c:97:5a:a3:be:4a:cc:05:59:4d:25:
9b:18:6a:02:03:37:a6:e7:0a:c7:cf:ae:86:d6:fe:
96:fb:e7:7f:fb:6c:48:e7:4e:65:e7:d7:81:fa:86:
19:56:ec:1d:b8:31:16:04:65:03:e4:6c:14:3a:a0:
1d:7f:65:d2:e7:13:40:09:0f:33:37:97:98:a3:23:
2c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:98:F5:AF:57:09:33:15:B4:95:67:55:B1:65:80:0F:BD:A6:9B:D9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3707f644-a5e4-4870-8ab9-494bdf1c8617.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:07:3b:8e:5f:2a:4b:b4:a1:3a:c1:3d:34:5b:49:19:b1:7d:
de:00:43:f7:58:29:d6:85:07:7d:34:35:32:0e:34:f7:6c:88:
cb:14:4e:71:45:cb:0a:7b:a6:b0:6f:89:3b:31:11:f0:03:39:
4a:93:c9:0a:5a:d9:61:52:a3:00:2f:95:dd:6f:16:1b:c7:d6:
f6:9c:f5:7c:d9:24:a7:da:82:99:5a:5c:34:9d:c7:e6:9f:99:
0a:c2:f6:0f:82:aa:ec:76:10:6a:21:57:1f:29:6e:14:35:49:
33:c0:67:59:1e:50:72:b0:45:41:de:de:99:6a:ea:bc:f6:3b:
ba:a7:60:08:14:78:94:12:4f:84:ff:4b:da:7e:50:61:8e:42:
fa:9d:d4:a0:14:b0:cb:bf:16:04:3e:76:3b:44:e2:ed:06:11:
f7:71:d4:15:0c:09:2d:22:0c:50:d1:50:9c:3f:46:6f:0e:de:
33:43:0c:75:e7:dd:91:81:d1:a7:0e:f4:f7:37:8e:01:67:6a:
12:3b:9c:32:eb:12:1a:d9:63:63:96:a1:69:16:2f:fc:f3:cd:
8c:84:b6:60:50:b2:7b:78:4a:cd:00:60:24:3a:ca:5d:ab:db:
ea:c8:d5:e3:1c:b0:70:a7:a0:3a:22:55:11:bd:6e:e1:26:46:
e4:c9:53:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:59:29 2025 by rpki-client