Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3a45d1d0-3991-4c80-a8aa-bd4c19626290.roa
File: 3a45d1d0-3991-4c80-a8aa-bd4c19626290.roa (raw, json)
Hash identifier: SgwqpQS10cJ2RuALeSG27VFJhG5GXP1YIthXLEYikKs=
Subject key identifier: DB:69:47:3D:31:A5:51:69:F0:7E:5C:25:E8:D7:37:A4:49:94:CA:44
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0969EEC6997D59248144B0405D94D697FC14D0E1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3a45d1d0-3991-4c80-a8aa-bd4c19626290.roa
Signing time: Sun 22 Dec 2024 00:00:00 +0000
ROA not before: Sun 22 Dec 2024 00:00:00 +0000
ROA not after: Sun 26 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:69:ee:c6:99:7d:59:24:81:44:b0:40:5d:94:d6:97:fc:14:d0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 22 00:00:00 2024 GMT
Not After : Jan 26 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:49:24:24:d6:e6:68:dd:29:21:55:3e:83:38:
08:fd:c2:46:2f:1c:6d:26:fe:34:09:5c:11:1b:7d:
c8:f5:cc:16:5d:9b:32:2f:04:cd:c0:87:0f:ea:fc:
eb:2a:77:9a:1d:76:72:11:06:c0:2b:f3:a5:7b:6f:
a5:b8:48:05:9e:72:e5:f8:f4:15:3a:91:b9:5d:77:
18:28:8f:dc:0a:5a:c0:e0:f2:d1:ca:ff:6d:1a:7b:
64:54:66:ea:90:cf:e2:5b:40:6c:7b:34:06:9b:2f:
ba:1f:7b:44:ff:1b:96:ac:d6:a6:f8:2b:db:df:b8:
fa:d3:a2:87:24:cc:1c:b9:ae:40:94:ad:19:e8:53:
9f:15:39:3c:04:c1:8e:cf:90:3f:0e:2b:dc:cf:35:
0d:9a:0c:c5:19:fc:b1:80:f3:22:9e:f1:e8:60:d5:
64:97:b4:7f:86:18:54:8f:63:d9:52:b8:83:2b:ec:
e6:7e:fd:36:2b:48:b4:2d:86:a6:6b:1a:e5:fd:93:
95:67:a7:93:62:34:85:25:92:a1:1a:60:c2:9e:43:
81:03:9a:a1:36:2f:cf:0b:d4:5a:4a:a9:d7:37:79:
d2:32:17:2f:9a:8c:5c:37:28:f9:a3:57:a3:a9:31:
03:da:c0:40:1e:71:d2:25:90:d4:05:14:08:c8:aa:
31:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:69:47:3D:31:A5:51:69:F0:7E:5C:25:E8:D7:37:A4:49:94:CA:44
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3a45d1d0-3991-4c80-a8aa-bd4c19626290.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:d2:2a:eb:d3:4e:32:47:9f:95:aa:b5:e5:1f:32:79:7d:3a:
e8:ad:f5:59:21:0d:ec:b1:d4:03:05:8e:de:51:04:89:16:d2:
24:ea:63:ff:e2:a4:b9:c3:c5:b8:29:3c:dd:0d:e1:56:5a:54:
43:c1:ea:69:58:60:44:be:df:b7:1c:8f:f9:86:81:96:ed:a0:
2a:c5:db:84:8b:57:d9:98:2e:72:83:d8:f3:9a:5b:30:43:00:
75:d7:ea:9e:54:d0:a9:19:95:63:8c:0b:bb:d2:8d:0d:79:ef:
19:c8:4e:67:68:c8:48:75:bf:fd:57:34:3e:3a:76:95:d6:30:
99:98:36:10:5c:10:38:c7:40:c9:fb:a4:61:d0:99:b0:fc:f4:
35:51:25:65:c1:e1:e4:00:c5:3d:09:1e:41:ea:0f:9f:8c:73:
84:4c:82:5f:89:e4:82:66:d9:9e:40:40:13:94:6a:ae:96:e3:
0c:a3:86:5e:10:83:e3:98:64:c6:e3:bb:0a:a2:fa:ee:a5:43:
e6:2a:ad:0f:a9:de:c1:26:5c:c6:93:0a:88:bf:71:0a:10:cc:
35:da:d1:eb:0b:00:56:23:37:9f:2c:98:e5:52:2c:f9:30:e1:
10:22:e1:54:6d:4a:c1:f2:6d:11:3a:a6:15:c4:71:08:51:16:
8f:93:ae:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:08:54 2025 by rpki-client