Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4a0fd2b5-2a2a-49aa-bbde-6ba7037c1f55.roa
File: 4a0fd2b5-2a2a-49aa-bbde-6ba7037c1f55.roa (raw, json)
Hash identifier: gKNMZPvCWpkTIdPEb+9X9KdlRghOUSucX9GVVH2atfo=
Subject key identifier: B6:E2:62:05:AD:67:60:19:73:CF:0C:F2:D0:84:F4:CA:F3:1E:24:C6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2F06884B318244AD944CE1643BB4719EB4E1E3B4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4a0fd2b5-2a2a-49aa-bbde-6ba7037c1f55.roa
Signing time: Thu 06 Jul 2023 00:00:00 +0000
ROA not before: Thu 06 Jul 2023 00:00:00 +0000
ROA not after: Thu 10 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:06:88:4b:31:82:44:ad:94:4c:e1:64:3b:b4:71:9e:b4:e1:e3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 6 00:00:00 2023 GMT
Not After : Aug 10 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:6d:d9:30:e6:fe:f9:7d:ef:e9:91:bb:15:
e6:1b:3f:21:bb:ba:84:c4:61:3f:01:ae:69:14:c9:
4b:fc:ff:37:58:ad:0a:1c:f8:49:3d:47:a2:a5:80:
41:bf:04:be:e6:8b:4a:62:92:ca:35:90:c9:28:ea:
e3:ac:88:1c:5c:d3:36:51:69:99:9b:25:ad:62:a1:
9f:36:d6:ce:93:ab:7e:43:80:30:29:d3:37:76:62:
67:e4:fe:c5:ee:cf:5f:3e:d0:1a:48:73:2a:06:0b:
3b:a1:bb:ac:3a:e7:10:08:a6:35:ba:98:e5:07:fd:
95:a7:c7:13:f0:80:a3:02:fa:4f:57:cb:4b:df:9f:
41:f8:1b:e9:6a:68:a4:1d:91:97:1d:15:c3:75:b3:
70:c8:99:6c:9b:4e:35:22:aa:7b:80:21:49:41:c1:
86:4d:90:ef:2f:f0:09:99:ae:9b:29:75:6a:6e:06:
59:83:22:10:a4:42:b6:d9:fc:5e:e5:80:f5:be:fe:
f8:a3:8e:39:72:ea:8f:5c:91:4f:86:98:39:ed:9a:
32:ba:ea:88:3c:d1:47:9e:1d:e0:28:92:c9:72:51:
2e:65:9d:6d:61:30:ce:54:8d:b0:8e:e7:40:1e:41:
b5:73:9e:c7:2e:aa:bf:56:ed:b4:09:90:10:79:78:
40:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E2:62:05:AD:67:60:19:73:CF:0C:F2:D0:84:F4:CA:F3:1E:24:C6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4a0fd2b5-2a2a-49aa-bbde-6ba7037c1f55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:a7:ee:e3:4c:68:02:20:74:e6:cb:95:91:d6:af:da:3d:fa:
72:c6:cb:e3:7a:bc:29:6e:b5:a6:fc:8d:c4:13:8e:fa:dc:58:
fe:80:be:95:47:ef:b0:1c:a2:e2:66:71:b9:b9:c5:bb:43:39:
9e:97:26:ca:78:00:f7:9e:f0:33:be:03:2d:ef:eb:fd:62:d2:
9a:10:5e:59:a7:ec:71:65:05:9d:1e:c5:4c:ef:c0:a8:13:4b:
dd:ea:37:4e:db:4a:02:c3:b8:37:02:9f:4b:e2:6d:4a:65:1f:
83:1d:9c:2f:97:b1:b9:bd:97:ae:73:7c:08:1c:0a:e7:c6:e6:
ac:ef:ca:24:8b:79:1d:05:ef:f6:10:cf:dc:df:2d:6e:2c:e0:
cf:e4:fe:73:49:52:bd:74:90:19:6e:f8:a9:c3:fb:27:70:c3:
b4:10:84:17:b5:c9:64:4a:fa:48:b9:a5:de:09:fa:65:c6:2f:
4f:ae:2c:ce:3b:f3:e7:81:b4:d5:ca:fb:b1:4d:28:f7:68:03:
80:18:39:22:92:82:d2:a4:a7:37:6c:46:16:ca:f3:52:a3:8d:
6b:a2:28:7a:32:3a:ff:64:01:5f:73:0c:ab:a0:6b:18:19:e1:
63:9c:a8:68:48:e2:be:ca:37:d9:3b:41:dc:3e:60:b2:36:29:
d6:a9:e9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:37:13 2025 by rpki-client