Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/50a23b49-befd-4c00-a4d6-ecf30b475e74.roa
File: 50a23b49-befd-4c00-a4d6-ecf30b475e74.roa (raw, json)
Hash identifier: TTrFyXRA6Q5m++caJROLRAubvUFxkp86PS3VKJ9vISc=
Subject key identifier: 30:82:D4:22:C4:93:9F:1D:C1:5E:17:1A:B6:76:A0:1E:D0:82:8D:F9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 26BCF303E232B5401E1504DC71F063BBA1242DC5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/50a23b49-befd-4c00-a4d6-ecf30b475e74.roa
Signing time: Wed 21 Aug 2024 00:00:00 +0000
ROA not before: Wed 21 Aug 2024 00:00:00 +0000
ROA not after: Wed 25 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:bc:f3:03:e2:32:b5:40:1e:15:04:dc:71:f0:63:bb:a1:24:2d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 21 00:00:00 2024 GMT
Not After : Sep 25 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:81:78:00:d2:d0:89:eb:6d:ed:26:7b:14:63:
53:7e:10:59:be:6c:ee:aa:1b:18:bf:d0:96:b3:be:
83:fa:93:9b:9f:f1:2b:41:9e:0b:b3:dd:aa:ce:f2:
68:92:73:d9:fd:f8:49:71:35:f4:aa:48:6f:7f:2c:
8d:0f:bd:31:4d:15:df:a8:65:b8:4a:b2:1d:7d:e5:
a0:4d:b3:84:70:0f:00:e8:27:2d:5a:bc:44:38:87:
5e:6e:c6:f8:29:d6:64:68:fc:52:d9:24:ef:6b:aa:
d0:a3:d4:86:db:fe:d7:aa:ac:d6:dd:12:85:c4:1d:
b2:1c:60:ec:5c:9d:35:df:74:df:34:7a:04:89:a0:
11:e4:8e:7b:5e:da:78:39:cd:b9:4d:72:97:a3:3a:
45:57:ff:38:a1:c4:c6:f7:20:e4:ff:55:d1:2f:c9:
6e:75:e8:87:02:fc:63:28:7e:aa:18:dd:a5:35:63:
6d:89:eb:8d:17:90:9d:e3:ae:38:f3:75:20:89:4a:
c7:15:ff:c3:6a:f6:ee:11:c6:50:d1:b7:f1:b5:be:
09:00:c0:a2:77:fc:97:24:e7:95:9f:2d:47:e4:51:
a4:6d:b7:b9:19:53:48:de:a5:a5:87:93:4c:f2:f6:
cc:8e:93:c2:c0:58:e5:44:a2:7a:d5:02:b1:32:c9:
00:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:82:D4:22:C4:93:9F:1D:C1:5E:17:1A:B6:76:A0:1E:D0:82:8D:F9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/50a23b49-befd-4c00-a4d6-ecf30b475e74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
69:86:01:57:3e:2d:a1:41:3b:68:c2:75:d8:7b:e2:e6:32:a0:
00:27:b4:1d:63:c4:45:f3:b6:23:1e:99:04:24:bb:27:3c:a3:
bc:62:67:70:58:81:23:8d:10:7b:1a:51:95:d2:3e:0d:1d:8f:
58:22:3e:9d:ea:f8:e0:b1:cc:c0:a2:a8:86:a2:a8:4b:ba:3c:
dd:b7:c0:29:30:2a:37:d8:00:ed:0e:1a:31:af:03:62:af:70:
7f:d2:a2:02:7b:69:ca:3f:b1:71:71:83:a6:ba:b3:95:e8:ae:
34:06:5d:17:d5:42:f6:64:6f:80:b9:ba:38:cf:24:d7:46:2a:
d9:1b:32:59:37:5a:17:83:4a:53:81:75:34:04:d0:4f:2e:62:
2c:13:73:06:f3:88:b7:64:5f:13:c8:d6:7d:7e:59:f9:76:fb:
7c:fc:4a:c5:f1:b2:32:61:34:4c:1f:c4:c2:10:5b:06:65:1f:
e0:3e:d3:05:59:d6:e9:46:27:46:e3:5c:2f:0b:da:35:3c:30:
15:ae:80:35:6a:e6:92:94:38:2f:4d:f1:d5:e1:e9:26:bd:72:
06:c8:b1:60:ef:10:dc:ac:a2:ad:7b:fd:e1:70:e2:9c:da:31:
ff:69:72:61:3e:09:69:1f:41:32:45:66:cc:5b:1a:57:f1:c8:
4a:bf:72:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:45:00 2025 by rpki-client