Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/47f3f387-93f6-4049-936f-dbb23e9312f6.roa
File: 47f3f387-93f6-4049-936f-dbb23e9312f6.roa (raw, json)
Hash identifier: mMdlY1UgOAYRiLRhkRa3r5vxxABpZkD6wL36p4HDEgs=
Subject key identifier: DC:9C:23:70:6B:5F:8E:17:CB:D6:73:6A:93:3E:76:32:D7:A2:9B:6A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2290F42C2D4A845451D9AE04AD5C12F747E97C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/47f3f387-93f6-4049-936f-dbb23e9312f6.roa
Signing time: Sat 28 Oct 2023 00:00:00 +0000
ROA not before: Sat 28 Oct 2023 00:00:00 +0000
ROA not after: Sat 02 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:90:f4:2c:2d:4a:84:54:51:d9:ae:04:ad:5c:12:f7:47:e9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 28 00:00:00 2023 GMT
Not After : Dec 2 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d9:d8:3d:1a:7a:2a:7b:d3:49:57:cc:c7:b6:
cf:79:59:01:46:30:03:df:10:09:10:8f:7c:aa:98:
87:a1:72:ab:eb:2f:e8:cb:b2:e9:7e:a2:83:10:c1:
a2:6f:c8:49:9f:9f:fc:4b:78:4a:e5:e8:fa:29:6e:
1d:70:12:6d:76:0b:fe:08:94:14:01:61:33:7f:ca:
dd:cf:5d:eb:38:16:37:5a:09:bc:cb:d5:e1:62:a8:
57:e9:c6:d4:3a:9d:9a:e9:4b:da:96:fe:7e:66:69:
c8:e1:ba:8b:12:f2:e6:31:01:18:19:a1:1b:e8:20:
e8:e9:5d:c3:da:ae:4a:11:24:1a:2b:43:17:16:54:
d8:59:8a:6f:1d:85:c5:cc:35:65:3f:52:a7:a4:e7:
a5:1e:39:7c:7e:ae:f8:16:7f:0a:40:f6:04:83:65:
92:38:15:09:7b:20:ee:32:e0:55:4f:2e:40:49:65:
74:8f:8a:ef:7e:1c:b8:cb:15:40:b7:41:04:e9:3c:
47:ec:cd:1d:8e:e9:e0:75:9e:25:b4:a9:a0:c8:2f:
56:b2:cb:31:0e:fb:90:11:cd:6d:df:6f:22:1f:bb:
f5:1c:46:01:31:68:14:36:b6:11:02:da:8a:e9:b5:
09:12:9c:fa:22:6b:2c:d6:09:6a:14:65:c7:9f:63:
9b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9C:23:70:6B:5F:8E:17:CB:D6:73:6A:93:3E:76:32:D7:A2:9B:6A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/47f3f387-93f6-4049-936f-dbb23e9312f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
91:87:ef:41:79:0d:0c:5a:6b:30:b1:5b:21:4a:1f:b3:0c:af:
ce:e4:b0:9f:60:5e:56:02:40:9a:19:e6:16:cc:83:82:9a:6e:
30:af:bd:dc:0f:d7:4f:18:d2:5c:50:81:96:1c:06:cb:a5:52:
c2:7a:38:bc:00:7b:c6:54:a4:5e:c0:e8:b8:bf:99:fa:3e:0e:
d7:17:b6:79:c2:65:69:ab:c3:91:b3:f7:32:14:2e:8f:75:ef:
27:f8:f1:2e:a6:7f:55:e2:1b:c0:7b:fb:32:7d:c0:21:d4:a1:
03:4d:7d:9d:7c:c8:9a:8b:7c:11:3d:d8:6d:f4:48:1a:d6:88:
b3:bc:a0:72:f1:65:e5:b3:0f:b4:2f:e2:bb:b1:06:8a:6d:c7:
f9:e6:2a:ec:4a:8b:bc:c6:4e:9b:c7:39:e4:2d:d6:d1:6f:0c:
18:9b:cf:87:8b:31:2a:58:d0:45:d5:44:90:41:64:f0:56:4a:
af:a5:b1:fb:db:60:29:8d:c0:78:19:d7:05:d9:3e:8e:df:ff:
87:81:f3:e4:d8:41:21:de:c1:ec:dd:90:0e:b3:8b:25:d7:02:
2c:78:ab:16:f3:bd:ab:92:10:f9:a8:77:d4:e9:dc:f4:c7:3f:
49:9e:f8:61:e3:85:7d:02:56:87:35:3d:66:63:04:b5:9e:59:
78:71:6b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:04:16 2025 by rpki-client