Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/669774a5-97e9-4549-8e47-f168b5f8763f.roa
File: 669774a5-97e9-4549-8e47-f168b5f8763f.roa (raw, json)
Hash identifier: 7koEhTFXj+NCxTKcRYeygWJqxfG9ZDL4IVRk/j1sHDM=
Subject key identifier: 29:96:81:64:F5:CA:DE:B7:45:2E:B4:38:D3:51:13:64:74:1A:DB:9B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 714712D3C7B76E39BCE9BFEF07C5DEE9F0E25E57
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/669774a5-97e9-4549-8e47-f168b5f8763f.roa
Signing time: Sun 02 Jul 2023 00:00:00 +0000
ROA not before: Sun 02 Jul 2023 00:00:00 +0000
ROA not after: Sun 06 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:47:12:d3:c7:b7:6e:39:bc:e9:bf:ef:07:c5:de:e9:f0:e2:5e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 2 00:00:00 2023 GMT
Not After : Aug 6 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:3a:72:0a:bd:7e:98:22:7d:72:5e:98:a4:
f3:75:b5:98:76:c3:9f:bd:f7:5e:0f:c1:6f:08:da:
1d:14:c4:a4:bb:d5:67:16:8d:fb:f5:c4:e6:26:61:
26:1d:ab:08:2a:4a:32:da:ce:cc:3b:63:1d:a3:2b:
ad:c1:72:d3:da:23:68:fd:ed:11:74:3b:f2:07:01:
8e:1e:44:9c:86:16:ec:02:d7:2e:57:a5:ba:f0:5a:
aa:b9:a1:1f:ca:fb:84:d1:e8:6c:28:bb:06:2c:1b:
20:15:41:f3:63:d2:bf:f2:c5:a7:f8:66:23:7e:e3:
fd:cc:bb:90:ba:c5:9b:b1:d1:c8:6a:42:dd:69:3b:
e3:b2:e0:00:11:db:15:6a:26:1f:60:73:87:5a:7d:
5c:11:ca:ec:ce:12:f2:1c:6e:9f:20:62:76:27:05:
e1:d5:e8:06:c2:7c:c9:58:8b:f7:98:97:9f:ab:c6:
78:56:1a:f5:20:e8:23:3f:4b:c6:64:b5:92:53:b7:
ae:54:3b:1a:d0:91:37:1f:0e:ac:7e:8a:2c:e0:26:
09:a2:b6:f4:ca:0c:f2:05:73:99:cc:51:31:24:1f:
d9:d1:bf:51:e1:78:28:10:9f:70:c8:0e:73:df:67:
a1:ff:91:31:ac:39:19:27:54:bc:bb:25:e8:c0:96:
2e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:96:81:64:F5:CA:DE:B7:45:2E:B4:38:D3:51:13:64:74:1A:DB:9B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/669774a5-97e9-4549-8e47-f168b5f8763f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:54:ff:a0:4c:bf:3c:78:b1:15:c1:1f:a6:df:ff:99:90:c3:
08:c4:0b:2c:1f:53:48:5c:91:84:9f:6d:94:57:3d:f9:d4:28:
94:d4:15:ee:06:73:0c:0c:91:2e:46:11:f6:01:12:41:7a:c6:
50:fc:99:01:97:d3:ce:dc:8f:93:66:48:30:ce:0e:55:fc:dd:
dd:8c:3e:e9:5c:9d:da:b6:38:8e:ff:6b:ca:cf:63:f1:e7:33:
c5:e0:b5:74:05:48:71:ad:04:4b:3b:ed:75:46:66:3e:f8:e8:
f3:c2:3e:e1:76:f0:e3:c8:a8:92:0e:08:2b:44:64:3a:05:72:
e3:6b:5c:ea:23:95:fa:3d:c5:81:36:9c:45:76:fc:a2:1c:f2:
c2:f0:03:c5:fa:1a:d5:43:1d:c0:c2:56:85:a5:59:bf:ad:9b:
fb:73:65:55:80:6f:9d:b7:23:ab:ba:e4:e1:bf:1c:45:6e:e4:
31:72:13:74:45:27:1f:ff:71:fd:f3:b5:51:08:79:59:ce:5c:
32:c6:dd:6c:11:47:c6:93:78:42:9c:fd:44:d8:0d:35:7b:73:
c6:8d:ce:7f:06:e0:92:10:c9:58:7a:32:c6:ba:b7:e6:86:a8:
0b:19:29:a0:c0:a0:54:2c:d0:49:de:6a:52:be:c1:82:da:bc:
46:c6:90:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:13:02 2025 by rpki-client