Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4135a74b-ab6b-449a-acb1-92cb0925dcb1.roa
File: 4135a74b-ab6b-449a-acb1-92cb0925dcb1.roa (raw, json)
Hash identifier: lq1IHW+K76H6q6rtlDJq43qk6aB/BJQFWUc6j7PUc8E=
Subject key identifier: 0D:D3:67:6E:43:8F:35:D9:F8:07:60:58:BC:91:AA:5E:39:99:73:0B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2AA57ABB842D4E3BBA814C582B15A09C9B81007F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4135a74b-ab6b-449a-acb1-92cb0925dcb1.roa
Signing time: Thu 12 Oct 2023 00:00:00 +0000
ROA not before: Thu 12 Oct 2023 00:00:00 +0000
ROA not after: Thu 16 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:a5:7a:bb:84:2d:4e:3b:ba:81:4c:58:2b:15:a0:9c:9b:81:00:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 12 00:00:00 2023 GMT
Not After : Nov 16 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:49:97:5b:00:d9:af:bd:9c:17:04:9a:48:
a0:c2:63:cc:b3:01:b2:39:03:4f:72:40:7c:86:fc:
96:10:53:ba:3c:24:bc:7e:99:7d:9b:6b:2a:7f:3f:
4a:3a:d9:34:1d:1a:80:13:52:1e:de:49:9d:39:c4:
33:7f:8b:64:ad:f9:f7:a1:84:fe:38:35:2a:dc:d7:
d4:c2:89:ba:5d:c3:c0:5b:0d:e4:bf:ef:d7:7e:97:
01:8b:ff:f8:20:7f:06:94:75:15:6a:ca:c6:51:50:
c4:53:00:e2:5e:43:8a:dd:79:55:8d:52:68:23:b9:
83:31:8d:04:5b:bc:16:ec:fb:49:49:36:3c:af:74:
11:76:1f:90:b2:57:8b:51:fa:16:b8:13:f0:6d:81:
8d:1a:ab:ab:54:f3:5d:ee:52:b3:d0:62:57:bd:70:
37:68:0c:9e:3b:e5:0e:a7:ab:5b:c4:a2:88:2c:68:
bd:65:d0:1e:41:01:1a:ff:79:e7:1e:04:67:17:a8:
49:f4:54:c2:4c:71:45:3d:cc:47:a0:6b:f7:31:73:
e8:23:14:96:3e:3e:a6:fc:51:f2:b8:35:98:cb:44:
9d:83:5e:09:d2:d9:fa:44:60:94:a9:c6:cf:cf:5c:
b0:31:c1:48:38:36:e2:0c:f6:e8:92:4e:65:44:b1:
b9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D3:67:6E:43:8F:35:D9:F8:07:60:58:BC:91:AA:5E:39:99:73:0B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4135a74b-ab6b-449a-acb1-92cb0925dcb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:26:77:20:c9:da:bf:a9:ed:de:6b:c8:7b:30:bf:5d:63:97:
6e:74:cf:7e:50:d2:f6:64:65:29:cb:2d:29:80:5f:b4:c9:4d:
bc:df:14:f5:08:7d:73:c7:d3:8a:76:ee:f5:4a:8e:08:24:e6:
ba:68:9d:d8:97:f0:61:ac:3c:b3:9b:87:54:ce:b6:5c:a3:37:
32:09:88:bd:33:8c:a3:15:98:13:71:f3:b5:c0:08:e8:19:ed:
c1:b6:4c:ed:76:cb:65:b9:13:a4:c9:72:de:ff:f5:00:e3:e2:
68:0d:ab:42:0b:85:05:ed:8f:4a:ff:78:0e:81:db:1f:ac:3a:
d9:5e:47:e3:e7:96:05:b6:c9:48:e4:83:25:13:9d:c8:65:bf:
57:93:43:a3:38:8d:65:dd:3c:10:b8:c2:5e:60:87:6a:21:fd:
07:14:8b:56:e9:1e:45:cd:68:8f:35:68:17:cc:f3:a9:70:84:
c7:83:3a:5e:16:cd:ef:8e:db:7f:8d:a7:65:ad:e6:d9:de:d6:
5e:b0:d5:e0:a1:57:9b:7e:8a:03:d0:85:a5:5e:bf:33:8d:a5:
8d:19:d5:18:41:7d:97:e1:91:e1:a4:6d:e6:10:1a:af:67:2b:
40:81:d6:b4:58:4a:db:bd:b4:63:49:aa:78:c0:44:2c:a4:bf:
cf:98:dc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:09:33 2025 by rpki-client