Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3e680949-4d1f-4841-9eab-140d58d9d211.roa
File: 3e680949-4d1f-4841-9eab-140d58d9d211.roa (raw, json)
Hash identifier: uBvsymf7DerALRAiSTZXHJugwvZU+w7Lek4LEjABsr0=
Subject key identifier: 8E:1E:28:62:7F:14:B4:14:93:DF:E9:FB:BF:B8:B2:90:15:F9:F9:4A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 37516627632080F5343D09A22662785065C67BBB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3e680949-4d1f-4841-9eab-140d58d9d211.roa
Signing time: Mon 03 Jun 2024 00:00:00 +0000
ROA not before: Mon 03 Jun 2024 00:00:00 +0000
ROA not after: Mon 08 Jul 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:51:66:27:63:20:80:f5:34:3d:09:a2:26:62:78:50:65:c6:7b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 3 00:00:00 2024 GMT
Not After : Jul 8 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0a:f3:75:47:90:71:41:e3:44:59:f1:60:00:
ba:6e:7f:52:50:5f:68:6e:77:0c:98:07:02:0d:91:
e4:6c:5a:83:90:f5:5e:61:bf:a9:cd:f1:77:ad:23:
d0:39:1a:59:fa:e6:6f:e1:00:37:79:37:5c:7f:81:
1e:2a:7e:99:20:b7:a0:31:2d:9c:26:a7:7b:2b:c7:
fc:de:6a:e5:49:23:aa:a2:ed:4b:ca:c3:8b:de:cc:
b5:76:ee:fe:a5:84:71:f6:85:ad:81:32:ef:dd:83:
0b:78:cf:78:58:32:4f:22:50:71:fc:e6:a0:28:df:
82:98:84:6e:8c:94:63:a6:69:0e:83:f1:41:fc:05:
c1:df:63:38:3c:13:4e:9a:d5:ad:01:76:e9:94:e1:
e0:49:9f:01:7a:11:9a:b2:39:52:cd:2f:d7:d0:ad:
ed:d0:3c:10:0d:cc:4a:53:88:5f:62:f4:10:c0:f2:
37:67:6b:fb:6a:c0:04:2b:2f:66:7f:7f:1a:09:c1:
f8:50:71:6d:35:71:e7:d1:61:06:72:ff:90:25:99:
96:e9:ef:ec:1f:99:0a:c8:7f:29:79:6c:3d:22:a2:
ad:f6:8f:0a:31:49:61:78:9b:c7:f1:8f:2d:72:36:
e3:df:ca:b4:bc:ee:8a:ae:40:25:67:9f:0c:e7:08:
f0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1E:28:62:7F:14:B4:14:93:DF:E9:FB:BF:B8:B2:90:15:F9:F9:4A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3e680949-4d1f-4841-9eab-140d58d9d211.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:43:8e:e1:2f:be:9b:09:92:09:80:79:42:be:cb:df:5e:63:
42:d9:75:07:c9:2f:ac:80:0f:71:4a:5a:5f:df:02:05:d6:0b:
c4:7a:57:00:eb:51:11:9f:6b:3d:43:11:44:b3:7e:72:f5:e7:
4d:46:04:5d:fe:36:47:cf:ee:b5:92:c0:4f:e0:eb:b9:6e:12:
47:25:c0:dc:f4:9d:b2:8d:63:35:64:84:c2:46:43:40:37:2e:
31:9a:9d:00:e8:85:21:03:37:ae:c1:de:32:41:4b:f1:50:71:
02:96:ca:32:73:e7:c4:77:21:d4:22:d4:67:71:88:16:18:c4:
b6:27:2c:0c:44:70:29:96:e1:e3:e9:6f:d8:4b:13:a9:95:fb:
7d:80:2e:ab:9d:df:e7:a3:c6:68:48:0c:18:84:35:06:8a:eb:
26:30:bb:e0:fc:c6:12:8d:29:c5:e7:ed:fe:b4:9a:0a:55:67:
7f:f5:d3:63:53:34:e8:e1:12:93:fb:c2:92:0c:db:9c:56:7d:
a7:b9:f0:0e:b7:84:ae:fa:95:7b:db:75:32:7a:4a:89:51:bc:
75:23:17:30:15:f4:cf:8b:82:02:94:92:34:d4:c2:e5:09:47:
a4:99:1c:fd:e8:5b:e0:24:0c:51:74:99:ca:b2:ff:5c:2b:9b:
da:10:9c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:49:00 2025 by rpki-client