Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/50ed12c9-de6c-4bf4-9627-d8d0ec70e4d9.roa
File: 50ed12c9-de6c-4bf4-9627-d8d0ec70e4d9.roa (raw, json)
Hash identifier: h2lLNMqPlfXRfU6KxN8Mk1Pi5ah82t5X9IXMJeOE91Q=
Subject key identifier: 78:C1:01:64:CE:CF:C7:FF:33:F7:FF:1D:E9:B7:B3:8E:2E:55:C4:80
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1048FF90288378D4C77A3BBC77FB64AC30798147
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/50ed12c9-de6c-4bf4-9627-d8d0ec70e4d9.roa
Signing time: Mon 10 Jul 2023 00:00:00 +0000
ROA not before: Mon 10 Jul 2023 00:00:00 +0000
ROA not after: Mon 14 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:48:ff:90:28:83:78:d4:c7:7a:3b:bc:77:fb:64:ac:30:79:81:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 10 00:00:00 2023 GMT
Not After : Aug 14 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e8:23:d9:1d:3b:1c:50:05:f7:d5:7b:81:ed:
2c:85:4a:4c:23:83:34:07:ad:ef:9e:a1:dc:9b:5e:
a0:5f:91:6b:38:e6:28:26:ff:1f:05:cf:b9:f5:06:
04:98:5c:f7:ca:cb:65:63:05:7b:73:b1:2f:3b:14:
7e:78:30:90:d1:2c:ec:83:ee:ab:d0:00:d3:e5:cf:
ef:42:40:39:2e:d6:70:b8:03:53:71:cf:e8:0d:5b:
b7:a4:a2:bf:f9:e4:ef:ff:e9:ff:d0:b9:1a:f5:9e:
f0:63:6c:97:ef:45:33:56:ce:ef:47:a2:df:99:78:
c0:8d:67:59:43:f6:cb:3c:b9:0b:fd:d8:d9:9f:de:
f9:ed:3f:34:da:c2:25:9f:41:5a:00:d9:83:26:ee:
71:75:f6:77:70:7c:a8:fc:d4:76:9c:7e:1d:fa:2c:
90:c6:b4:0c:08:05:bc:6f:73:86:ab:ac:39:87:8a:
c3:45:fa:93:34:48:5a:c0:82:41:c6:60:87:ca:67:
cc:c6:16:06:cd:64:9e:c5:af:2a:2a:51:2b:30:60:
ca:70:e0:17:e5:7c:22:a1:37:c0:64:d3:dd:76:c1:
39:0f:99:87:09:2a:44:cb:15:29:95:eb:c2:af:c9:
03:83:a8:6c:81:63:c9:90:5d:e9:a2:a3:29:2b:8f:
70:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C1:01:64:CE:CF:C7:FF:33:F7:FF:1D:E9:B7:B3:8E:2E:55:C4:80
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/50ed12c9-de6c-4bf4-9627-d8d0ec70e4d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
15:4f:68:e7:7a:89:3e:d1:82:20:2c:99:33:42:51:4b:ab:14:
a5:8e:ff:ef:56:95:ff:57:25:22:ae:f4:d8:ec:a8:a8:ed:59:
40:60:dd:23:1d:ab:5b:6f:0b:f1:0f:2b:1a:c3:89:9e:9d:05:
2a:a5:3f:c4:73:a7:9c:c3:36:e4:43:2c:d6:0b:ea:33:21:2f:
89:ef:53:be:04:f1:bd:e6:e6:4d:5c:5c:40:f7:a7:58:73:3a:
e8:62:89:32:10:b2:77:ab:c9:95:ea:b2:da:7f:db:73:d8:51:
71:8e:7b:61:eb:b3:cc:e8:50:5b:b7:5b:5c:cd:3a:e6:09:48:
aa:66:63:72:df:a0:c4:b7:63:5f:e3:9e:36:94:26:f0:43:0d:
bf:2b:75:43:f2:12:1c:4e:af:fb:51:78:20:01:2a:07:a3:0b:
01:2b:23:79:51:d8:64:7e:aa:f9:de:85:6f:6f:3f:43:bb:71:
31:4b:b2:7a:b2:d9:ea:36:95:d0:1e:a5:e1:64:71:d7:5e:c3:
5c:2f:e1:d1:ff:8d:e1:a4:96:77:3b:02:a1:83:af:6c:0f:f2:
f0:49:36:dd:25:b6:fb:2f:7d:4c:4c:7c:d5:3d:2e:6c:ed:3e:
f6:00:50:c8:29:39:fa:37:ef:d1:ce:e8:4e:50:ff:59:7e:7b:
ae:ee:47:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:42:02 2025 by rpki-client