Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5505fed6-e164-4609-80fc-bfa06260cd7c.roa
File: 5505fed6-e164-4609-80fc-bfa06260cd7c.roa (raw, json)
Hash identifier: iovHG5DCsZSrP/epfE5ZFJsjWqen6OUCF9BAoWwnjpc=
Subject key identifier: C4:78:53:88:90:B6:D0:BE:DF:4C:3F:ED:8B:C3:92:5D:B4:28:A6:3A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 65B29FC08C3B4B73853A58BCCF8DB1C7D6409FD2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5505fed6-e164-4609-80fc-bfa06260cd7c.roa
Signing time: Fri 13 Oct 2023 00:00:00 +0000
ROA not before: Fri 13 Oct 2023 00:00:00 +0000
ROA not after: Fri 17 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:b2:9f:c0:8c:3b:4b:73:85:3a:58:bc:cf:8d:b1:c7:d6:40:9f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 13 00:00:00 2023 GMT
Not After : Nov 17 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:66:ec:b0:6d:ee:10:99:b4:d3:2d:34:e4:06:
6e:44:bd:59:81:31:f3:62:3a:68:33:60:15:53:69:
fe:a4:c0:d8:8d:4a:e3:09:e7:11:38:75:98:8e:47:
06:40:69:6d:e2:92:ae:1d:e4:3b:93:40:a9:0d:7c:
9e:0e:01:f8:dd:6d:02:6a:ff:1e:f8:ca:1f:e7:44:
85:8f:cc:08:12:66:38:55:2f:ef:99:74:47:56:ab:
22:78:81:92:2e:b0:71:b7:a9:9d:3f:d5:cb:ba:d5:
7c:ff:9b:3d:b5:eb:20:45:41:a8:da:19:02:2d:43:
13:3d:f3:5e:6c:8c:11:f6:ff:8f:f4:c9:57:71:08:
81:03:c9:cd:7c:bd:78:c0:6c:fe:b0:d8:b1:3c:29:
11:2c:0c:60:64:9f:27:1f:c3:bd:c2:b8:83:95:5f:
04:ed:96:05:29:9c:0c:fe:52:71:bb:23:2e:36:c2:
fb:6b:79:84:c6:e2:9f:08:69:e9:4d:77:39:2d:df:
4c:97:b0:0e:67:af:e7:0c:2f:30:61:11:b5:66:91:
79:88:57:8c:dd:5e:cf:97:9c:87:e6:07:2a:3a:95:
bc:62:0f:37:91:a5:54:b0:d3:a6:08:91:61:f5:26:
e4:7f:30:18:d0:72:fa:7c:39:f1:68:85:a7:4b:3d:
0d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:78:53:88:90:B6:D0:BE:DF:4C:3F:ED:8B:C3:92:5D:B4:28:A6:3A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5505fed6-e164-4609-80fc-bfa06260cd7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:c3:fc:ef:85:51:b8:72:da:72:a5:ed:bc:8c:46:b2:86:87:
e7:bc:6d:fb:9f:ed:fa:51:56:48:ad:f2:ae:29:f4:6e:bd:d3:
a1:c2:13:ca:64:eb:77:3c:c8:3b:e3:9e:03:68:35:a1:5e:0c:
48:f9:8c:5f:c1:cd:76:81:2d:64:04:d5:86:eb:b6:d6:5a:c4:
47:b0:49:74:03:f8:ad:5a:e2:65:9d:ae:09:21:ff:93:40:b5:
c3:30:0a:73:f9:d2:32:68:8b:34:b5:b5:e1:65:e0:1c:e9:55:
4f:e5:c7:71:3d:ec:52:b4:41:76:e0:6a:2f:fd:4d:d1:99:90:
cd:ee:34:b5:3c:19:ab:b8:ae:4e:79:4b:63:35:e3:79:a2:17:
b2:5e:8f:7c:a8:b8:6a:79:00:b2:c9:a4:e9:c7:9e:13:55:de:
5d:93:77:d5:72:88:c0:db:7a:da:1a:ce:18:2f:a1:ea:b2:2c:
2b:59:cf:5b:08:0a:78:aa:19:e0:b5:0a:97:fa:58:64:d8:eb:
e4:69:e1:d0:c6:3c:a3:5b:5a:e7:b7:67:9e:71:dd:bf:a5:c5:
e3:c6:50:97:13:40:57:06:97:cb:c6:3f:19:36:51:85:bb:8d:
b4:7a:42:d3:53:2b:14:fd:f0:fe:90:89:da:68:b3:2f:63:b3:
c1:08:05:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:42:52 2025 by rpki-client