Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/64e2cee6-33e0-4713-a263-7f5cb5e96fc4.roa
File: 64e2cee6-33e0-4713-a263-7f5cb5e96fc4.roa (raw, json)
Hash identifier: JWrJcF+cNZisiFb6FZXPD5qjee/isCJRQeCqG1a7FmI=
Subject key identifier: 00:83:EE:2C:30:6E:F9:2C:62:F0:EA:DB:CD:68:4C:5D:47:2B:F6:70
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 03CB96B5F858A7F89C60AEC5DAA6200884F66355
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/64e2cee6-33e0-4713-a263-7f5cb5e96fc4.roa
Signing time: Wed 05 Feb 2025 00:00:00 +0000
ROA not before: Wed 05 Feb 2025 00:00:00 +0000
ROA not after: Wed 12 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:cb:96:b5:f8:58:a7:f8:9c:60:ae:c5:da:a6:20:08:84:f6:63:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 5 00:00:00 2025 GMT
Not After : Mar 12 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:40:30:e8:48:0b:e1:26:1e:87:7a:fb:f0:3a:
2d:26:00:57:df:b6:92:23:63:57:3a:64:bc:5e:2d:
0e:e3:df:ac:9a:12:68:a0:a9:97:a9:3f:36:78:94:
92:43:6d:30:2d:eb:c9:ee:55:a4:67:a0:5c:eb:b1:
7a:90:dd:b4:49:f9:18:3e:c1:61:45:c6:ae:ed:71:
c8:38:8b:c9:a1:1a:df:5e:b2:3d:82:fd:eb:f1:8a:
4c:57:86:f7:83:07:5b:23:6f:c1:df:88:ee:f6:17:
39:5b:4b:d5:09:f8:69:3f:c9:41:f4:5a:67:ff:db:
4b:31:f0:fb:19:8e:71:e1:93:85:04:4d:7f:f2:6e:
66:53:61:ed:09:72:fa:3e:0a:be:d6:ad:bd:50:a2:
43:b8:21:6d:29:2d:5b:a5:08:95:37:f1:56:61:d2:
42:04:41:a3:52:43:72:23:7c:dc:e0:04:b1:88:a1:
a8:e4:c4:5b:8a:e2:ea:48:02:8c:6e:f9:5f:56:a5:
66:eb:d5:41:5c:18:e9:5a:21:94:26:dc:34:ec:ea:
f7:5e:15:9d:8f:fe:18:c6:eb:3f:3f:82:26:fd:ad:
73:07:96:32:90:d5:40:a8:d2:9c:a3:6d:33:8a:45:
38:95:0a:79:24:07:65:e0:b8:c1:61:18:b6:08:f9:
e0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:83:EE:2C:30:6E:F9:2C:62:F0:EA:DB:CD:68:4C:5D:47:2B:F6:70
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/64e2cee6-33e0-4713-a263-7f5cb5e96fc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ba:e2:76:eb:dd:85:ad:74:5a:ac:7a:b7:51:8c:ff:a8:4a:
c6:70:70:03:e0:7d:10:4a:b3:cf:59:49:2e:5a:e4:9f:9f:7a:
85:54:d5:37:a2:e5:cf:1f:8d:f7:a6:f7:1b:3e:58:6d:5d:b0:
78:1a:57:c0:42:19:37:5a:a4:7c:5b:74:f1:96:5f:ca:c5:9b:
48:3b:93:23:39:2e:55:53:70:98:ce:97:04:73:48:1d:34:38:
d4:82:24:1e:ae:6d:ae:46:e1:b7:4f:25:17:64:5a:3c:2e:32:
09:29:e9:b3:4d:15:a2:43:eb:41:7d:a9:9f:43:24:a4:d5:45:
a4:b6:f1:9e:88:33:e8:a8:41:f4:fa:7f:ae:ba:11:0c:bc:bc:
1c:5a:7a:ee:67:b8:4a:62:f3:ed:cf:89:c2:3c:b6:66:82:7a:
e6:77:e7:ec:d6:52:53:4e:be:ec:fa:f7:65:fa:81:9d:c3:86:
bc:97:31:23:35:6e:2f:5b:70:e1:a3:36:06:9c:f1:0b:43:42:
63:e2:1c:26:16:5c:ea:e9:b5:f9:30:b7:fa:e3:07:e9:3d:68:
1b:08:10:b5:c8:a9:a1:f2:5d:b6:6b:72:0f:2e:55:bf:cb:9f:
ce:98:eb:35:4a:1a:0d:c1:bf:aa:b6:e0:70:f9:96:a7:5e:7c:
1a:1a:8a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:45:54 2025 by rpki-client