Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/57f9d489-c53c-4d8a-ae76-c2a81774f64b.roa
File: 57f9d489-c53c-4d8a-ae76-c2a81774f64b.roa (raw, json)
Hash identifier: ZkAyMsV87kQdMY6gE4sJOf0vCkWwRZZNTibUHirAo28=
Subject key identifier: 3B:C7:82:03:1B:2D:88:8F:1D:06:B1:23:1D:30:57:49:EC:03:D0:59
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0E5016AE3097499604F92A6DE6B32C09719A3E10
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/57f9d489-c53c-4d8a-ae76-c2a81774f64b.roa
Signing time: Fri 20 Dec 2024 00:00:00 +0000
ROA not before: Fri 20 Dec 2024 00:00:00 +0000
ROA not after: Fri 24 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:50:16:ae:30:97:49:96:04:f9:2a:6d:e6:b3:2c:09:71:9a:3e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 20 00:00:00 2024 GMT
Not After : Jan 24 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:58:3a:2c:35:dc:6a:01:a1:6e:3f:e2:0e:
9d:8d:6c:d6:6c:f7:09:22:40:a4:a2:68:51:81:68:
f3:27:06:35:e9:56:a9:9a:2d:94:af:48:30:31:fd:
ae:65:69:45:0c:c0:67:18:58:9b:9a:00:e8:2c:8b:
c4:6f:e6:ef:9b:1e:4b:7c:12:48:8a:11:e9:86:d9:
45:3b:e0:30:f9:ed:94:39:8a:99:aa:22:80:78:2b:
78:9c:0f:b4:13:b3:82:df:a5:bd:40:bd:72:48:5d:
58:87:0a:98:ac:0d:f3:a1:9d:a7:b2:a9:5c:a9:f9:
8f:37:9b:d2:32:02:88:bf:b1:1b:bb:92:32:37:ad:
36:19:3e:91:93:38:8c:4e:54:1f:56:18:76:8a:f8:
69:76:ac:a0:99:20:80:e2:b0:9b:c0:27:71:11:8f:
48:26:d5:a0:37:11:f4:dd:0e:14:31:28:1f:0d:09:
66:64:81:c9:60:c1:7d:ad:0f:ff:d9:56:6d:c9:b4:
b1:77:1d:e2:2d:8e:fb:6d:3b:7c:44:e4:58:50:ab:
97:35:44:70:1a:f4:83:37:8f:3a:60:d4:5d:ad:ab:
b0:f3:9f:fd:93:cf:c0:9f:76:6e:bc:ee:16:3e:79:
0a:bd:55:16:aa:f0:be:f5:e7:23:ec:fe:74:6c:26:
89:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C7:82:03:1B:2D:88:8F:1D:06:B1:23:1D:30:57:49:EC:03:D0:59
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/57f9d489-c53c-4d8a-ae76-c2a81774f64b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
35:1f:63:0d:50:39:ce:95:ec:97:66:cd:bd:0b:d3:2e:6e:0f:
a7:3c:8e:56:51:cc:df:98:ff:2d:b7:ff:00:b8:59:78:e9:c4:
f3:bc:07:cd:b6:48:52:61:62:6a:50:11:9e:df:14:b5:98:b0:
be:30:25:91:5f:18:c7:71:13:af:e2:da:7d:d4:df:6b:7f:58:
79:8b:0c:c0:93:7b:19:ff:7f:6c:0f:32:85:93:a1:3c:55:69:
a6:42:7c:28:82:07:ad:96:a1:45:26:31:46:ef:0f:6a:6f:e3:
eb:d6:3b:8a:ef:2a:e3:4d:8d:fd:e4:82:13:0b:f0:b8:90:99:
84:d9:e3:9a:5d:06:a2:cb:8a:56:37:e3:97:f1:6e:59:c5:ce:
4b:fc:c6:73:b5:cc:31:61:58:1c:5d:66:98:02:90:18:4e:22:
59:41:5e:53:10:9e:30:c5:b2:fa:61:f2:23:e2:ea:38:c1:ec:
3c:26:14:4c:ce:39:19:96:31:76:62:b0:8a:aa:4d:20:44:29:
8b:87:0c:f6:c6:9a:1d:7c:d2:cc:2a:e5:eb:98:dd:9b:3f:da:
10:28:73:70:f1:54:cc:b4:59:4a:8d:d3:45:a4:a8:87:bd:53:
4c:28:26:c5:27:ea:86:51:40:07:7a:a1:28:5a:00:98:4f:5d:
c6:5e:3e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:46:21 2025 by rpki-client