Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3c22d4cc-a7a6-4d4f-8ce6-d590b6f90966.roa
File: 3c22d4cc-a7a6-4d4f-8ce6-d590b6f90966.roa (raw, json)
Hash identifier: WKk/ndQm7+3XYpaJEb8/E/5BsqDU+jylWAm30sJTibY=
Subject key identifier: 06:BD:53:4F:A5:8E:F6:7C:1E:2C:27:31:E8:6F:4A:53:58:13:D2:7A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2F90D13BA1133DD60DD1B34A335EC7A1C1ECDD6E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3c22d4cc-a7a6-4d4f-8ce6-d590b6f90966.roa
Signing time: Mon 23 Oct 2023 00:00:00 +0000
ROA not before: Mon 23 Oct 2023 00:00:00 +0000
ROA not after: Mon 27 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:90:d1:3b:a1:13:3d:d6:0d:d1:b3:4a:33:5e:c7:a1:c1:ec:dd:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 23 00:00:00 2023 GMT
Not After : Nov 27 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0a:0e:92:bf:4b:32:67:2b:25:e5:22:7e:ef:
55:45:2e:ce:a2:35:65:41:a2:27:5a:c6:af:84:ff:
ef:c9:8a:a6:fc:16:9d:0c:5b:d1:51:6a:2a:b4:77:
3e:95:51:66:f4:9d:1c:a8:27:e6:bb:59:50:6c:8b:
dd:a6:36:2d:6a:8f:b1:b7:69:1a:d8:5d:a6:94:87:
32:00:11:23:5a:7e:78:4b:27:36:cc:09:e9:65:bd:
e2:a5:8f:6c:48:1b:a0:39:dc:41:56:a1:90:3a:40:
0c:a1:37:df:95:c2:d7:9d:dc:2c:ee:9e:cb:52:27:
7c:86:75:6f:36:57:2a:fe:98:5b:5a:7c:5a:69:be:
f6:03:21:e6:dd:fe:1a:24:97:74:99:2a:20:88:0d:
68:e8:48:89:99:d4:0e:08:1d:c7:65:9b:2e:bb:5d:
9c:55:22:f7:16:4a:14:9e:8f:1f:ad:ca:63:62:4d:
68:0a:6d:bc:d6:6e:23:e1:61:3e:ef:6d:a4:09:c7:
f4:0d:76:bd:34:e9:2c:cd:9a:54:32:a5:fa:3a:37:
64:08:2a:2d:76:08:d4:39:65:cf:1b:19:a2:ff:16:
ba:63:4a:1c:5d:bb:fc:9b:39:03:35:ae:5a:50:15:
05:5e:c1:f9:5d:cb:f5:4c:6d:9b:0c:00:29:34:ca:
13:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BD:53:4F:A5:8E:F6:7C:1E:2C:27:31:E8:6F:4A:53:58:13:D2:7A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3c22d4cc-a7a6-4d4f-8ce6-d590b6f90966.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:46:5e:e0:7f:9e:47:60:4e:58:a1:52:fe:73:54:06:7c:13:
98:5b:48:31:ea:15:42:5c:36:b7:f7:e7:d1:99:d1:c7:f6:67:
d0:76:6e:1b:25:63:55:5b:94:34:56:34:f4:30:f3:57:9c:1e:
a5:22:da:3f:47:be:b9:f0:71:09:73:bc:d7:b1:2d:57:45:e1:
fa:1b:89:33:80:61:4d:9d:44:12:9f:ea:62:7a:fd:b8:4b:9c:
66:d7:45:22:ec:33:80:92:1a:af:75:76:af:c4:c9:8c:31:b6:
18:04:93:b7:19:13:05:7a:0b:8b:3a:51:ed:77:00:03:27:63:
b1:e8:e8:ca:f4:e0:0a:8e:02:ce:d6:52:32:dc:a7:7d:a6:cf:
a6:f4:3a:73:33:0f:72:7e:1f:c6:84:28:4f:bc:11:eb:04:7c:
79:c8:90:f5:73:34:5c:ae:14:0f:f4:7e:19:e8:a1:37:2b:d1:
10:8d:16:03:5f:85:26:10:62:01:e4:5c:3e:4a:be:f7:b5:07:
9e:45:30:f2:6f:c7:7d:69:62:8e:47:25:ef:88:f1:85:ff:cd:
b7:88:8a:30:be:75:c8:81:62:91:a6:1e:d5:bc:bf:7a:1e:f8:
dd:fd:6e:a6:9e:1a:c8:a5:3f:83:8f:ed:b8:a7:6a:12:5e:ab:
a3:56:1a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:08:39 2025 by rpki-client