Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3c8b23d0-0478-4950-9bd2-6217472c808a.roa
File: 3c8b23d0-0478-4950-9bd2-6217472c808a.roa (raw, json)
Hash identifier: xLFC9wO/mtw+OFd7i5Zec90x5QUSIfWogpbgYpIylTI=
Subject key identifier: 32:A2:F1:DE:D3:9C:CB:2F:13:60:2B:07:A8:82:23:A0:AD:AC:C3:6E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 075876AF87EA1FEF8DB6758AE5B17F347B35D2C6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3c8b23d0-0478-4950-9bd2-6217472c808a.roa
Signing time: Sun 10 Sep 2023 00:00:00 +0000
ROA not before: Sun 10 Sep 2023 00:00:00 +0000
ROA not after: Sun 15 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:58:76:af:87:ea:1f:ef:8d:b6:75:8a:e5:b1:7f:34:7b:35:d2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 10 00:00:00 2023 GMT
Not After : Oct 15 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b1:e7:8e:d7:b5:ee:17:13:45:d5:1d:d4:db:
5a:a7:97:71:ea:fe:d2:77:d1:13:3c:65:82:d5:aa:
7d:57:69:c2:d5:c8:44:84:27:71:82:23:ea:a2:b9:
e7:e4:8a:19:bb:fb:e0:a3:b8:8d:aa:23:84:68:c0:
6a:a6:07:86:83:41:ae:9f:cd:03:f9:cb:92:9b:ac:
d6:64:80:64:39:80:fd:f2:a9:4a:3a:dd:e9:03:da:
4e:21:4a:e0:86:d6:25:b8:ad:9d:34:04:92:80:3e:
37:63:5d:55:a4:b5:65:e7:4c:2e:21:7b:c5:e6:30:
62:a0:67:b6:9d:52:ea:09:3f:a6:72:2a:e1:97:81:
4f:4c:9e:b1:3f:a2:bc:0e:25:9f:1c:72:2b:44:86:
34:70:a1:93:56:d3:97:45:38:56:0c:8d:84:53:36:
a1:59:76:16:94:f4:53:65:47:f3:95:ef:54:8a:c5:
2e:d5:10:56:69:38:12:36:82:06:86:0b:10:f7:94:
9b:b6:86:6f:a8:55:39:83:85:0f:fa:31:98:cc:f0:
68:25:6f:de:38:0d:30:f3:82:ec:20:6f:15:7e:ef:
20:30:b9:c7:45:4f:4d:26:5c:15:2d:bf:2e:83:b6:
c0:e8:70:6e:cd:3c:6c:8d:bb:80:2c:25:81:cb:39:
b0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A2:F1:DE:D3:9C:CB:2F:13:60:2B:07:A8:82:23:A0:AD:AC:C3:6E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3c8b23d0-0478-4950-9bd2-6217472c808a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:90:b5:d7:a6:90:e8:00:20:e1:84:c4:ba:e8:4a:a8:d6:a3:
26:1f:ae:34:e8:00:89:26:a1:05:83:11:c3:13:39:1b:60:80:
41:98:8c:43:01:17:c5:e6:32:b1:8d:b0:5d:3d:e3:e8:e0:65:
65:81:39:33:5b:40:16:b1:7a:08:45:6c:b9:46:f2:b6:96:ea:
6f:2c:ed:2f:35:7f:27:0c:9a:82:19:15:f7:72:ee:32:a6:81:
07:1c:f1:b2:2a:94:1b:fa:39:e9:29:25:d4:c5:9f:62:3e:c1:
c8:f3:62:21:f3:63:f6:d5:7b:ac:4d:b3:7f:fd:93:1d:ca:f7:
46:ec:a4:d4:32:6b:85:f5:97:f7:c1:90:1e:10:5a:51:83:e6:
2d:87:84:4d:e3:f0:a5:55:e8:2b:e8:b2:34:6c:ab:4a:ab:27:
a5:9c:59:3e:b0:7a:59:d0:a8:89:6c:2d:73:15:35:7a:6b:f7:
e1:cf:f1:db:e7:57:32:e1:2e:f7:ef:4b:0e:e9:22:fc:fe:6f:
16:d0:2f:9d:fd:fa:0d:66:9d:42:31:d5:97:ad:5f:4e:1b:13:
5c:b2:3c:a0:43:57:77:02:01:b9:1c:92:9f:16:6f:ad:96:87:
69:32:c3:83:66:99:23:41:48:8b:09:3c:3d:87:38:55:95:f3:
aa:74:86:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:38 2025 by rpki-client