Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/499d8231-b8d9-4ecb-b66d-2afe29bed664.roa
File: 499d8231-b8d9-4ecb-b66d-2afe29bed664.roa (raw, json)
Hash identifier: bVNiawUpFmzrLiXCcPK4XYpIBlmNApEHZ8Mco7uBbJk=
Subject key identifier: 84:B8:35:0E:7E:B4:F2:75:58:48:72:59:29:BA:A0:44:9E:20:66:90
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1B8ECDA81F79ADA44C59142154D5583BF3C0379B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/499d8231-b8d9-4ecb-b66d-2afe29bed664.roa
Signing time: Tue 05 Mar 2024 00:00:00 +0000
ROA not before: Tue 05 Mar 2024 00:00:00 +0000
ROA not after: Tue 09 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:8e:cd:a8:1f:79:ad:a4:4c:59:14:21:54:d5:58:3b:f3:c0:37:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 5 00:00:00 2024 GMT
Not After : Apr 9 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:f9:fa:40:6d:d1:23:f6:06:f1:d0:39:e1:
f8:3c:2d:ff:28:31:2e:6b:59:0c:be:40:e1:8c:e7:
2e:81:af:0f:23:ea:0f:5f:5e:af:65:35:96:31:d7:
33:19:01:99:42:6c:40:0f:0b:15:ae:eb:6e:f5:be:
24:84:eb:fd:d7:95:7c:f8:15:b5:14:4c:a5:da:14:
22:d8:f2:72:93:07:aa:7a:b5:5e:80:fd:90:ae:6e:
2c:32:4c:62:c1:07:ef:a8:da:f1:83:6c:65:66:b3:
e6:5f:8a:2f:aa:b3:74:fe:a9:13:84:cb:6a:67:c1:
7e:a8:f0:81:49:0c:3f:d4:8c:12:d2:0e:1f:ae:9c:
d6:94:0f:b8:b5:ed:b3:9d:9b:64:95:27:e5:fb:58:
3d:3f:34:0a:2a:e1:b1:1f:70:22:c6:e7:0b:26:b4:
a7:5d:02:d4:96:2f:d6:f6:ee:f3:ea:ff:3b:47:46:
b7:b8:06:0a:8e:2c:c6:79:ab:f2:37:2f:54:a9:f4:
9e:99:b9:57:68:82:0f:71:f5:67:b4:ec:70:f9:d3:
26:30:53:e8:2b:01:bd:f3:77:e3:90:de:98:9f:d3:
39:5c:36:e0:a3:93:98:ea:0e:da:f6:9a:06:38:46:
32:ea:bf:00:04:93:e3:32:d4:52:47:f0:44:9b:23:
36:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B8:35:0E:7E:B4:F2:75:58:48:72:59:29:BA:A0:44:9E:20:66:90
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/499d8231-b8d9-4ecb-b66d-2afe29bed664.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:46:16:2b:3e:9c:eb:bc:c4:b5:a7:2a:a4:8b:f8:cd:3d:b9:
49:cb:b9:00:9e:bf:19:97:fa:30:16:c6:50:93:56:43:2d:eb:
ce:3d:4c:12:05:50:5a:9c:d5:20:a7:0b:8e:a3:e4:8f:f4:17:
07:57:4b:1f:00:80:b4:da:07:59:47:74:11:d2:7a:b1:35:6e:
35:c1:33:05:29:82:87:68:a9:42:5a:77:c9:bf:d9:d1:44:6b:
d1:e8:aa:b2:18:12:b8:e9:4f:51:18:8e:2c:e3:4c:d7:b9:d2:
39:5d:40:f2:50:f0:5e:d2:1d:35:44:ce:96:e7:6f:1b:89:42:
21:59:32:57:96:82:7d:59:f2:ab:c6:04:97:f7:5c:17:2e:25:
f6:21:b7:cd:e1:51:9a:bb:77:50:9a:48:27:1a:d4:45:9f:00:
ae:bb:d3:49:e4:08:90:f6:5e:37:22:31:10:41:a2:78:5f:91:
13:35:c2:a5:74:6f:4d:ce:2b:b8:46:97:2d:c8:91:a5:90:17:
6c:9d:63:3c:ea:6a:7e:df:1c:b1:42:ad:87:8d:74:a6:06:22:
e6:91:fb:b2:69:1f:08:3f:cb:d2:22:6f:32:da:11:5f:45:25:
93:7f:da:d2:ec:86:4c:6d:ca:22:12:0f:b7:1c:ab:0b:ca:fc:
59:33:7f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:12:53 2025 by rpki-client