Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/676de026-7462-4151-b95e-14cc959fb779.roa
File: 676de026-7462-4151-b95e-14cc959fb779.roa (raw, json)
Hash identifier: GgKQCA9TAV5qXVE4mPZxdR5b3FlgAAF6E664RYht2P4=
Subject key identifier: BF:14:9A:3B:FB:64:EA:F7:A3:20:7D:02:4A:79:E1:2E:B4:F8:3E:6E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7C4D1250D01454248520B0DC27AF55C1788E1283
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/676de026-7462-4151-b95e-14cc959fb779.roa
Signing time: Mon 24 Mar 2025 12:23:18 +0000
ROA not before: Mon 24 Mar 2025 12:23:18 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:4d:12:50:d0:14:54:24:85:20:b0:dc:27:af:55:c1:78:8e:12:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 24 12:23:18 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:93:45:bd:f2:85:2f:6c:58:ad:72:e0:be:7f:
8b:f0:3f:0f:7f:c9:20:ea:9d:ec:60:4b:af:ef:4d:
d2:ab:29:0f:e1:3f:a8:68:27:0f:97:14:a5:ca:40:
77:5a:0a:ed:f8:f7:75:98:ee:84:03:00:50:ef:ae:
31:48:e6:8e:f2:24:3d:ca:f9:46:2f:18:48:ef:2a:
93:99:8d:e2:0d:f0:ef:56:53:55:5e:ab:c1:92:88:
b6:b1:c9:09:3d:f5:74:33:a8:29:cb:f7:43:4e:c2:
2e:86:28:ed:d8:7a:77:f5:2d:b2:57:a4:f2:35:45:
a4:0c:2a:78:5e:d7:d9:5a:fa:48:04:62:f0:b4:27:
55:a6:0c:db:03:ad:16:48:67:52:98:6e:0a:04:09:
ff:24:fc:6f:d1:54:47:7f:ed:da:18:8d:2f:17:c7:
a6:3b:6a:df:0a:fa:3d:e0:28:a7:c0:61:a5:7f:67:
87:a7:29:e7:cc:d4:9d:75:6b:23:6a:3e:8c:19:12:
21:84:99:9e:5a:56:54:c3:77:49:52:59:45:07:e5:
45:33:f3:ff:fd:9f:60:e6:06:3d:a1:9b:60:25:97:
e7:72:6c:12:12:e4:f1:b7:4e:16:e3:8e:94:b2:b5:
fa:1b:fe:5e:d8:1c:84:1b:ba:54:72:1a:9a:6a:04:
c2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:14:9A:3B:FB:64:EA:F7:A3:20:7D:02:4A:79:E1:2E:B4:F8:3E:6E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/676de026-7462-4151-b95e-14cc959fb779.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
90:92:af:15:5c:82:09:bc:b6:f3:d6:f9:30:3c:f9:58:76:1f:
86:e7:11:88:19:42:10:70:aa:4a:59:b0:25:e2:c2:c8:38:6b:
fc:af:9c:14:b7:68:e3:0f:09:dc:79:c8:1b:d0:72:d3:03:32:
7a:f8:6d:0a:a8:4c:a2:54:4a:09:e2:2f:0f:b9:57:fa:e2:3d:
44:5c:e1:5d:b8:6b:97:c1:a0:ee:7d:ee:25:21:4a:9d:7c:43:
d6:c9:8d:fc:eb:46:19:3d:80:e4:de:74:a1:20:94:13:1a:d8:
b8:b7:25:e5:2c:41:62:bd:03:fd:0c:d0:3c:e7:d8:00:58:36:
e2:c4:d5:96:b9:c2:5c:8e:73:e3:54:b4:93:32:f3:66:69:cc:
76:52:42:49:5e:97:a4:b2:8a:7b:ae:82:62:bb:ed:e8:4c:e2:
03:bc:0e:c7:30:63:b1:31:4f:6c:e1:b8:31:07:c2:bb:f9:5c:
3b:c4:9e:2b:16:e6:60:45:cf:33:cd:96:6f:b4:7a:48:64:07:
bc:cf:a6:7c:7d:98:00:73:68:31:d9:62:37:b2:fe:d4:61:1d:
b9:d6:14:d4:90:c0:42:b4:a6:49:15:01:f1:a0:c8:89:19:ff:
7f:09:e5:c4:5f:f0:99:f6:d4:e4:56:bd:74:3e:48:db:0d:03:
16:9f:8a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:13:23 2025 by rpki-client