Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3f350f57-673b-45f5-8ad6-4b4953e01468.roa
File: 3f350f57-673b-45f5-8ad6-4b4953e01468.roa (raw, json)
Hash identifier: NVqtUYbfaRcPwl+VbeROHwa3dFDcaWRU9l0AMEUW2Ag=
Subject key identifier: E0:A6:1D:51:81:48:D2:A3:27:EC:AF:37:C4:D8:F6:ED:53:88:FD:2E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3F68803E5F82B29937FEC4A9BE00F7C5C8874588
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3f350f57-673b-45f5-8ad6-4b4953e01468.roa
Signing time: Fri 21 Mar 2025 09:58:18 +0000
ROA not before: Fri 21 Mar 2025 09:58:18 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:68:80:3e:5f:82:b2:99:37:fe:c4:a9:be:00:f7:c5:c8:87:45:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 21 09:58:18 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fa:51:80:cb:e9:7e:3a:56:13:95:35:47:c8:
f9:c7:69:3c:1f:a8:14:66:d0:dd:c6:a8:94:36:0b:
74:14:f9:49:da:b3:1c:92:8e:da:22:b5:a7:45:56:
a8:a0:86:01:81:db:2d:24:ae:11:0d:6e:c8:7f:9d:
8b:ff:bc:c4:6c:7e:5c:62:e4:b7:e9:9e:84:f2:01:
d1:1d:c6:c1:f5:49:50:a9:83:c4:da:9b:1a:b1:ca:
b5:e6:18:e9:f9:af:1a:31:2a:5b:19:a9:0d:da:06:
4d:1f:d2:d9:04:8e:2c:d6:eb:b9:7f:ab:02:63:6e:
ee:e2:cf:f2:ab:c7:78:a1:bd:ee:e6:4e:0c:db:04:
fc:8e:3e:f3:09:ad:2f:5e:dd:43:37:d8:1a:e4:55:
65:5e:bc:b1:e0:40:a0:30:d8:e6:b6:8a:a3:52:73:
20:75:86:7c:27:00:4a:f4:10:ee:ea:87:36:95:3f:
da:3e:03:89:a9:6b:69:5e:83:19:5b:6b:4b:95:11:
6c:54:b5:5b:f6:0a:5f:d5:66:69:db:ad:75:4d:12:
3d:29:0b:e8:d2:a6:de:67:1c:4d:59:8f:f4:06:f0:
21:8d:a0:13:69:49:83:f6:94:e8:5e:b8:89:a1:48:
1f:2e:12:1d:68:2e:1d:d8:87:fd:30:a1:25:bb:69:
62:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A6:1D:51:81:48:D2:A3:27:EC:AF:37:C4:D8:F6:ED:53:88:FD:2E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3f350f57-673b-45f5-8ad6-4b4953e01468.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
01:c0:4f:eb:e9:dc:a7:d4:b2:74:88:a7:a9:8d:ac:61:b8:f8:
7d:11:fa:32:f7:17:1f:02:d5:78:87:b2:d8:27:16:aa:e6:3a:
77:b3:da:dc:b4:14:19:a8:be:b8:bd:f2:bc:fe:09:72:e2:88:
52:c5:d1:0b:fa:41:32:2a:c1:1c:aa:32:77:06:da:3b:4c:80:
c9:dc:bc:c8:56:11:43:a5:91:4c:88:bf:0c:5e:db:90:7e:96:
19:65:c4:3c:b4:51:45:66:32:d8:98:76:60:aa:42:ae:7a:e4:
bd:6d:04:39:49:3b:9d:30:f8:8d:53:02:d6:c7:fd:57:f8:31:
ba:21:f9:5a:be:71:e3:98:4a:a5:d4:04:4e:c1:66:59:47:1f:
14:57:81:68:98:49:28:3e:6b:19:1e:31:48:0b:af:b6:bf:1c:
72:27:81:89:08:0d:dc:d0:bd:de:f9:7f:28:43:a8:71:56:38:
09:94:9f:d6:98:23:18:8d:df:0b:0e:28:d5:07:fd:ba:fc:78:
01:73:2e:e7:e4:6e:62:6a:10:bc:4e:bd:5d:cb:5a:15:cd:c1:
45:6f:0e:c2:8f:5b:7f:51:60:e5:ab:87:f8:40:18:b7:ae:62:
26:db:9e:70:3f:9b:93:f1:af:dc:9c:eb:01:86:19:bd:56:79:
2a:e6:21:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:51 2025 by rpki-client