Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3d412964-caa3-4d1c-885e-6b357e15fdea.roa
File: 3d412964-caa3-4d1c-885e-6b357e15fdea.roa (raw, json)
Hash identifier: PUGam0ZCxpzD15NcB6SKRDiaqCRaYBa9XtAmac2Tv5Q=
Subject key identifier: 68:8B:65:48:E1:13:7D:94:6F:E1:A1:FE:07:8C:F4:45:03:E3:D4:ED
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2AB93D5696DC11DAB82BD518904C8F0845FF2791
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3d412964-caa3-4d1c-885e-6b357e15fdea.roa
Signing time: Sun 21 Jul 2024 00:00:00 +0000
ROA not before: Sun 21 Jul 2024 00:00:00 +0000
ROA not after: Sun 25 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:b9:3d:56:96:dc:11:da:b8:2b:d5:18:90:4c:8f:08:45:ff:27:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 21 00:00:00 2024 GMT
Not After : Aug 25 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d2:39:a7:fe:5e:2c:a9:e8:3b:42:b1:c4:48:
9c:7c:3f:82:e2:47:5a:58:31:15:f4:3a:2d:16:6e:
f1:87:3d:9b:29:bc:f6:be:b0:e9:45:41:67:76:1b:
81:e6:4e:c3:4f:eb:ef:7b:1e:e6:67:0b:9c:03:cd:
96:74:ad:86:3b:10:a6:39:eb:3b:20:ea:b0:10:7b:
05:1e:5d:f7:ba:bd:57:73:b4:31:71:6a:a4:10:43:
b1:ce:cb:ea:46:fb:e4:d9:09:b0:b4:22:f8:f1:e3:
de:9d:c1:c0:40:b9:41:84:71:d4:fc:be:e5:bd:4a:
3a:1b:d7:69:d2:55:2e:47:86:c4:aa:b9:d0:95:b7:
94:2a:4f:9a:d9:5c:9a:15:64:ee:66:93:32:50:ad:
55:d1:07:dd:24:88:72:37:66:07:6f:1d:0b:56:97:
9c:8c:d6:65:ef:c6:f0:06:12:dd:84:9b:bc:32:c0:
94:82:a7:7e:d1:6a:52:29:1b:f3:34:a4:9a:94:70:
19:01:ea:fe:17:7f:96:b7:6e:42:f5:93:ac:9a:3d:
04:aa:3c:55:d5:a3:c2:07:68:58:d5:78:db:dd:15:
cf:75:87:91:b2:47:a4:b7:38:32:69:92:4d:f1:8b:
36:de:fd:49:f5:48:19:76:75:94:cc:8e:a4:ef:bb:
7d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8B:65:48:E1:13:7D:94:6F:E1:A1:FE:07:8C:F4:45:03:E3:D4:ED
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3d412964-caa3-4d1c-885e-6b357e15fdea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:c6:97:e5:fa:99:12:69:93:7d:14:8d:df:e4:e0:2f:70:f2:
8e:68:75:c6:56:90:e9:89:6a:46:93:65:3a:c8:01:02:b0:8e:
0a:f3:44:d0:e1:bc:a1:35:bc:b8:1a:9b:24:49:45:9f:5c:ec:
9b:68:09:9f:f5:36:1b:58:d8:c1:91:61:0d:5d:e0:66:f2:8a:
7a:d8:92:da:98:85:f6:11:d1:8a:4d:0f:aa:78:c4:39:80:b0:
ec:e8:cb:08:8c:c7:ac:09:e7:76:8b:9a:a2:1b:fb:e6:20:37:
41:46:49:5a:58:4d:ca:27:f5:cc:3a:ef:e3:ca:47:ca:ca:62:
93:87:fc:27:1b:c2:f0:89:56:b6:3f:2d:07:3a:df:32:45:b6:
20:e1:fa:fb:95:2a:0d:ba:1e:1a:a3:85:e3:e4:c9:cf:4d:99:
56:46:4d:9b:aa:7e:b3:4b:a7:27:ce:d9:13:10:ac:b9:f4:c9:
38:46:0f:7e:c7:cb:2e:d1:ec:0b:e5:cf:a9:70:0e:c7:a4:5b:
97:4c:1f:a5:4b:f8:81:32:4e:fe:d5:6e:00:f9:23:1d:f8:cc:
ab:c8:07:59:ad:91:0b:9f:27:9b:b7:8c:0c:e8:6e:75:54:57:
63:a1:ea:22:83:1f:50:18:49:d4:0e:ab:65:6e:41:34:f5:0f:
fa:f9:7b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:41:11 2025 by rpki-client