Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/641c278d-5af2-422f-8b9d-4520f4ab0d29.roa
File: 641c278d-5af2-422f-8b9d-4520f4ab0d29.roa (raw, json)
Hash identifier: hDOERVBwyMv9ZD+ik/lbqoRq9RkoMkg0gQsVyMo5KGA=
Subject key identifier: F3:A8:40:3D:B7:80:01:22:94:77:75:00:F3:9F:39:13:A7:5C:F0:B2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 162C60112E0F4D26FE88BB346C87AFD643E9FBCD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/641c278d-5af2-422f-8b9d-4520f4ab0d29.roa
Signing time: Sun 22 Oct 2023 00:00:00 +0000
ROA not before: Sun 22 Oct 2023 00:00:00 +0000
ROA not after: Sun 26 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:2c:60:11:2e:0f:4d:26:fe:88:bb:34:6c:87:af:d6:43:e9:fb:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 22 00:00:00 2023 GMT
Not After : Nov 26 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:92:d7:3c:67:5c:c6:ab:a5:ff:c3:6b:fd:d2:
07:d4:b9:b7:3f:f9:4e:8a:7a:a2:74:bd:b0:a1:0f:
9f:b8:c0:b3:df:10:2d:bd:cb:e2:57:94:2c:20:a1:
32:13:b3:42:2a:12:e8:b1:f8:7b:79:dc:39:a0:64:
d9:3c:a2:21:56:2f:d1:4a:83:9e:4c:59:83:9a:28:
d3:98:1e:ed:e4:b7:81:29:8f:b6:4b:22:b6:d9:4a:
67:d8:64:e5:70:d1:d2:d8:05:5b:2f:71:4d:a5:89:
ca:9a:c1:24:b3:f0:26:43:0b:23:62:15:91:76:ae:
b6:a6:b2:80:22:99:8b:23:1e:13:17:b4:4c:42:fd:
eb:08:b0:3b:0f:54:fb:dc:6e:78:91:1c:de:ff:2c:
80:d7:03:6e:05:74:50:0f:d8:ed:95:42:d8:b8:ec:
28:bd:8c:1c:6a:21:36:cd:a4:4d:d0:62:c6:e9:c8:
5d:c1:2b:84:42:6f:e3:97:b9:c8:d5:0d:5c:50:ae:
5d:e5:2c:c9:aa:ad:c2:88:34:60:d7:e5:e5:fc:98:
ce:22:47:e7:20:a0:df:b4:5f:64:9d:95:df:aa:27:
13:05:87:18:94:37:78:99:f1:09:f0:23:02:b9:f7:
91:86:db:43:1b:d0:a8:10:10:9d:eb:1e:bf:cc:14:
4f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A8:40:3D:B7:80:01:22:94:77:75:00:F3:9F:39:13:A7:5C:F0:B2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/641c278d-5af2-422f-8b9d-4520f4ab0d29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
67:39:b7:22:a2:fe:cc:ce:ce:2a:19:9d:8a:95:1a:bd:a0:17:
6b:ee:7c:25:37:0b:da:52:64:4d:07:59:33:9c:b0:77:b0:4b:
26:1c:1f:04:b2:94:e5:43:48:26:8c:ee:69:d4:25:ea:c0:f7:
c2:93:24:fe:9e:ae:a8:b9:2d:a2:4c:66:87:f0:c1:23:07:17:
cd:c8:e9:fc:ca:b0:67:2e:50:0c:84:f2:21:26:cf:f6:a4:5e:
46:1e:a7:6d:ac:69:7b:0b:c5:c7:53:26:ff:1a:f3:32:5a:29:
6f:36:4a:97:cb:4b:aa:ea:6b:a1:65:e0:32:a8:b4:b7:9b:a7:
1e:c0:0f:72:40:87:b5:26:1a:60:36:45:df:af:75:09:a3:5e:
4b:e4:11:7a:80:1b:1f:81:e1:59:42:8a:50:08:a7:2e:77:3d:
7c:ee:9c:46:3b:4a:87:d4:91:a2:23:a6:d5:4b:ea:a3:56:b0:
ac:59:6f:13:94:89:b6:dd:de:e0:ed:b5:52:2c:40:71:fd:ed:
b2:3b:61:03:09:76:66:95:8c:b3:5f:31:2b:3e:f2:3a:50:05:
ce:87:74:e6:fb:ec:54:9a:49:3e:6f:f2:5c:78:d4:b9:f3:7c:
38:ed:b1:7b:dd:6d:f7:57:0a:6f:ea:06:b6:53:e1:d7:03:60:
11:4d:92:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:17 2025 by rpki-client