Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/550f77da-0f14-423b-8b5e-dc650524ddc7.roa
File: 550f77da-0f14-423b-8b5e-dc650524ddc7.roa (raw, json)
Hash identifier: pML+TFhpKau+JYFyWor678IZtnQPydKGkqCH9z11bE4=
Subject key identifier: 42:D0:52:7A:AC:8E:F3:D4:47:AC:E4:12:AD:B2:89:65:B6:67:C1:1C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 34E4920E9DE99CC85DA7FFEE4663DE6BC0A8B67A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/550f77da-0f14-423b-8b5e-dc650524ddc7.roa
Signing time: Fri 14 Mar 2025 18:13:20 +0000
ROA not before: Fri 14 Mar 2025 18:13:20 +0000
ROA not after: Fri 18 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:e4:92:0e:9d:e9:9c:c8:5d:a7:ff:ee:46:63:de:6b:c0:a8:b6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 14 18:13:20 2025 GMT
Not After : Apr 18 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1a:80:88:88:24:36:14:f7:11:cf:17:55:bb:
ab:26:6d:27:97:f9:82:eb:0f:bf:5b:0b:2c:f7:67:
74:f5:54:a8:57:5d:33:d4:68:27:73:c0:e4:aa:bd:
69:83:3d:c3:87:63:50:7c:2e:fe:86:e2:01:e9:44:
d8:22:1b:25:9d:57:4c:1b:9d:91:92:b4:d1:87:cb:
77:72:09:b3:05:4a:d6:c3:32:5d:04:6e:ae:1a:ad:
31:be:5c:d5:a5:34:5c:67:76:ba:68:f6:17:6e:20:
cb:47:26:67:07:e3:dd:56:a3:99:8b:b6:0d:76:8d:
26:de:57:7f:d8:90:44:39:e3:23:db:61:87:64:76:
f6:51:66:db:f9:9e:58:df:15:0d:a4:2f:12:68:31:
74:e5:f4:15:8b:2b:94:24:57:2c:ad:2b:cd:d1:1f:
e4:0c:4f:93:d1:a7:b7:25:f9:ee:bf:42:45:40:81:
51:0d:8f:f9:41:19:11:27:1f:a9:aa:6a:29:64:f4:
16:d4:93:78:54:d9:04:d6:5b:18:21:de:17:8d:3f:
97:c9:68:4e:4f:12:2a:e4:2d:5b:1f:93:a5:b6:c3:
b4:f0:00:ff:5b:b3:2d:6c:8b:aa:e8:4a:6c:c3:18:
3e:c4:85:06:bd:87:7a:68:4e:4a:57:e4:69:b6:15:
14:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D0:52:7A:AC:8E:F3:D4:47:AC:E4:12:AD:B2:89:65:B6:67:C1:1C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/550f77da-0f14-423b-8b5e-dc650524ddc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
01:47:7f:ad:46:97:53:aa:2d:eb:00:9e:c6:4a:e1:35:0d:38:
48:8d:0e:47:0e:83:de:a7:86:f3:3d:5c:40:cb:d5:57:2e:9c:
09:61:0f:d6:34:e5:d6:ba:89:ba:b8:cd:5d:ce:4b:5c:c6:c3:
09:87:6e:9d:fd:36:c3:1a:45:88:5e:62:80:09:6f:a2:b4:2d:
eb:8c:ec:a2:8a:1d:c7:e0:48:d0:aa:6c:25:6b:d3:4e:37:ef:
77:9e:b4:91:76:5d:4b:5e:56:d4:5e:cc:22:41:bc:60:3c:d8:
11:2b:07:33:99:4b:03:83:de:6c:3c:26:5b:fb:48:ce:86:3d:
87:60:33:cf:c7:71:76:90:62:ff:7a:62:e9:35:a3:19:9f:2b:
09:44:ce:a4:eb:3d:0a:d6:6f:68:bd:62:5c:f9:25:5c:46:b6:
74:1e:0e:0c:44:74:cd:62:25:3a:b0:50:33:39:65:1a:c9:d5:
cd:e0:97:1c:1a:d2:19:fa:66:49:75:f3:9f:b0:35:ee:26:9f:
77:e9:ae:fd:be:1d:f0:dd:14:ce:9b:4c:4b:cc:ba:0d:eb:0e:
42:cb:d8:bd:ab:bd:bc:a3:32:78:02:ac:23:15:44:3a:19:f3:
9a:06:b8:d3:4d:93:89:10:cd:aa:a5:30:02:e2:c0:5e:1d:05:
30:e1:84:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:34:36 2025 by rpki-client