Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5f871609-0367-43f4-814b-180708a7474c.roa
File: 5f871609-0367-43f4-814b-180708a7474c.roa (raw, json)
Hash identifier: P/AHoNgNdjvTvZ5SDi4+9siuODkc8/lU9Z5Tk2GxL2A=
Subject key identifier: E3:F6:78:60:6F:2D:41:3A:B5:FA:FC:92:98:CD:E5:E5:4B:C8:BE:14
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0CDDFC094B5495E60590D82B742E9BB661A885C2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5f871609-0367-43f4-814b-180708a7474c.roa
Signing time: Thu 12 Dec 2024 00:00:00 +0000
ROA not before: Thu 12 Dec 2024 00:00:00 +0000
ROA not after: Thu 16 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:dd:fc:09:4b:54:95:e6:05:90:d8:2b:74:2e:9b:b6:61:a8:85:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 12 00:00:00 2024 GMT
Not After : Jan 16 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9b:8c:cb:6f:2b:79:0c:22:09:1f:8d:e3:1e:
ee:65:aa:29:6b:b4:96:72:16:4d:00:06:cf:00:62:
ce:de:c7:e4:89:ad:5c:6b:51:08:2c:12:0c:99:51:
ef:e0:fc:ec:8d:94:ea:4d:54:33:3b:bb:6c:50:fa:
01:bd:13:d4:63:7d:a5:cd:e4:d0:0f:bd:2f:25:bb:
c4:0b:b0:2a:55:99:15:4e:84:42:f5:3e:17:af:83:
83:94:c1:31:4f:65:6d:69:3c:b1:7f:b2:35:2f:1c:
74:45:d4:33:2c:89:a4:75:c0:89:f6:a0:b9:0a:8c:
23:0a:11:d2:7d:de:c3:70:b6:f0:84:b0:00:27:95:
97:3b:e6:f0:9b:81:6b:64:95:ee:dc:f6:c1:b6:6c:
4a:3f:30:98:8e:5f:06:04:ca:15:1b:db:5f:a9:30:
b9:d6:35:81:d5:a8:50:60:75:13:6f:b1:a0:79:a8:
0d:46:da:69:3e:8f:97:34:ab:b9:6f:b0:c6:e1:3a:
5f:4f:70:be:e7:c9:12:3a:bc:93:36:1e:8b:1b:03:
13:92:52:5b:6b:fa:97:36:38:8c:ff:4f:3e:ee:e9:
68:8b:f5:49:ae:24:71:cc:f4:a9:c6:ab:90:43:72:
ea:68:89:33:21:69:8a:31:b4:47:7b:fd:ef:ae:26:
3f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F6:78:60:6F:2D:41:3A:B5:FA:FC:92:98:CD:E5:E5:4B:C8:BE:14
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5f871609-0367-43f4-814b-180708a7474c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
24:f9:e9:1f:42:cd:86:42:92:a1:3b:5e:7a:b2:3d:ca:2c:c4:
74:55:af:9b:3e:81:73:71:b5:7d:05:a8:7b:2c:1b:d9:df:41:
9b:9f:04:32:b1:2a:f2:80:e9:1e:ce:b7:7f:48:da:cb:33:78:
c2:8e:ab:89:0b:11:03:f4:2a:44:cd:b3:5e:bf:61:85:7c:28:
d1:ac:a8:a7:cb:69:a7:6d:f5:ef:58:dc:ba:c4:b5:b4:88:ef:
1b:31:e2:66:38:7f:f7:e5:b6:b0:9c:b1:52:64:05:7b:46:59:
b2:ce:8e:5a:e6:ce:18:86:8e:55:7e:93:43:e4:7b:bd:e2:08:
be:9e:43:5f:1f:3b:3f:77:94:8d:5f:fe:dc:85:0d:cc:5a:85:
a6:0e:b8:8f:61:37:ee:f4:f4:be:64:b3:e9:0f:14:76:74:22:
6f:75:68:22:72:d1:1b:c0:5f:2c:cf:48:38:3b:0b:b9:c4:89:
55:2d:eb:52:86:2c:ca:76:c8:c8:4b:39:61:46:65:24:7a:24:
a3:79:b7:f6:40:5c:fd:0f:02:08:c4:2e:ee:c5:f0:f0:b0:a5:
11:90:01:78:3d:54:6f:af:0b:0b:ae:ba:25:76:35:65:52:79:
5f:f3:52:f2:62:15:e1:c1:fb:72:a7:f2:35:db:5d:51:09:94:
ec:61:88:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:18:29 2025 by rpki-client