Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/55402f8f-be56-4cd9-b22b-63ff209ec592.roa
File: 55402f8f-be56-4cd9-b22b-63ff209ec592.roa (raw, json)
Hash identifier: HT+gxBE6bq601Z/WomVzL1HM6vtykN+zOlDWDwH1kBE=
Subject key identifier: EF:73:3D:01:2F:BE:48:BF:03:37:6D:37:0A:6A:AA:A5:0F:71:2C:AE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0559C6511FEFB17049A9FD5DF04498D81E549698
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/55402f8f-be56-4cd9-b22b-63ff209ec592.roa
Signing time: Wed 25 Dec 2024 00:00:00 +0000
ROA not before: Wed 25 Dec 2024 00:00:00 +0000
ROA not after: Wed 29 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:59:c6:51:1f:ef:b1:70:49:a9:fd:5d:f0:44:98:d8:1e:54:96:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 25 00:00:00 2024 GMT
Not After : Jan 29 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:a4:3f:32:4e:78:97:75:9d:d9:db:73:a0:
6e:d9:c5:60:99:db:11:be:89:32:5c:c6:a3:c1:f5:
bd:c4:97:69:ff:ea:b5:e9:b3:13:51:a2:a2:66:12:
68:34:5e:69:b0:53:e3:95:00:d0:6c:75:90:71:d4:
28:42:05:e8:58:bf:14:c5:0b:e6:0a:18:e0:c9:c3:
84:53:5b:4d:6e:5b:77:cd:95:ad:c3:72:ef:45:51:
dd:c3:43:f7:d8:00:07:e8:d0:53:34:b5:25:b2:f3:
65:d5:95:d5:81:08:b9:63:63:d5:20:e2:77:e8:c3:
c5:ba:59:0c:99:56:c3:86:1b:c4:74:9c:6a:61:98:
7c:63:83:77:1d:98:d9:46:6e:0f:81:b9:36:fa:1c:
db:42:44:ba:1d:76:86:62:51:32:06:7d:a3:14:77:
23:e4:d3:f0:4f:03:c2:23:ed:56:0d:e0:30:e9:65:
d1:af:6f:c7:d9:1f:3a:14:58:83:38:39:27:e1:8e:
da:00:ab:9b:90:6d:a0:8e:c6:34:98:e5:7b:6e:d7:
6a:0b:63:cc:80:5c:33:8d:0c:44:70:2d:21:58:4a:
c4:ca:3a:bd:91:44:89:44:aa:4a:46:24:46:f9:95:
df:d0:e7:08:a6:e5:64:96:6a:3a:bc:f6:35:cc:f3:
f7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:73:3D:01:2F:BE:48:BF:03:37:6D:37:0A:6A:AA:A5:0F:71:2C:AE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/55402f8f-be56-4cd9-b22b-63ff209ec592.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
61:68:c4:42:f9:62:f5:cf:89:6a:ca:8b:60:84:5a:04:d9:32:
a5:a1:0f:6f:cf:a7:6b:dd:55:fc:52:42:35:b0:13:16:2a:0f:
1a:bf:53:68:c6:a4:bf:51:b2:de:f0:1c:0b:e2:22:0a:29:78:
49:26:92:9a:d4:c9:f7:45:d5:4e:f9:fe:d3:ae:e9:c6:d6:5c:
e8:ba:e0:e6:30:95:e5:1d:0b:ee:0d:10:38:5f:43:18:d5:65:
5f:fc:53:83:69:85:fb:1b:5d:00:d6:1a:2c:a8:1f:8f:87:8b:
4b:ca:82:2a:9c:c6:9c:df:ea:b3:f1:0c:f4:94:b5:5d:ab:81:
a8:04:dd:2b:a5:d5:b7:d7:7b:a4:e1:04:bb:ae:9b:fc:79:3b:
71:c4:67:5a:e1:ea:fa:08:b9:09:e4:cc:db:9b:14:8e:9a:72:
1c:69:c4:b8:d4:b2:c9:75:86:56:86:20:29:95:87:2e:8c:72:
99:1d:51:db:02:b5:d4:20:fd:d1:bf:08:d5:cf:96:d5:33:af:
20:1d:64:5f:8b:f9:14:23:aa:44:3e:0f:13:6d:e7:75:07:40:
39:f7:1c:0f:61:a5:f0:ec:ef:c1:43:9e:9f:e3:48:b6:eb:93:
38:ed:54:25:db:05:f8:98:6c:90:17:3b:fd:e2:a0:77:81:95:
7f:0b:89:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:35:44 2025 by rpki-client