Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/692941c1-1a2a-45f0-ad9a-2adc6910cab5.roa
File: 692941c1-1a2a-45f0-ad9a-2adc6910cab5.roa (raw, json)
Hash identifier: n7lCu2j6Szhao4cnBAQlYzs0EhYXM5aBWFo8bpFSb/c=
Subject key identifier: 6F:58:FA:40:4B:72:46:6A:9A:F0:C8:22:2A:80:B7:11:86:22:1A:C6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 376399687E500118563633D1215DA5DED4C3854D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/692941c1-1a2a-45f0-ad9a-2adc6910cab5.roa
Signing time: Fri 24 Nov 2023 00:00:00 +0000
ROA not before: Fri 24 Nov 2023 00:00:00 +0000
ROA not after: Fri 29 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:63:99:68:7e:50:01:18:56:36:33:d1:21:5d:a5:de:d4:c3:85:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 24 00:00:00 2023 GMT
Not After : Dec 29 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:10:f9:8b:63:4f:de:45:87:0b:73:28:b7:4c:
19:15:8b:2f:25:b3:12:82:26:9f:0d:5e:d1:58:e2:
cc:cb:d1:7a:23:53:8e:a4:7d:36:dc:9b:c9:55:ee:
2a:60:c7:7e:3e:aa:60:25:94:f0:7c:7f:81:40:9c:
c2:bb:cd:01:55:c9:2a:59:d0:26:fe:4a:e5:4b:0b:
10:71:3c:99:c1:c8:7f:60:d8:49:f0:8f:70:6a:b5:
ca:bb:4a:da:a8:f4:eb:df:cb:d8:aa:6c:7a:79:b0:
2b:19:93:c7:e0:24:10:9d:30:04:aa:85:ec:e5:83:
fc:65:d7:7b:ed:f1:0b:b7:48:bf:07:aa:d4:26:83:
33:b2:84:6d:45:06:2e:8e:4a:c5:b3:b2:75:1d:32:
cb:b2:ee:da:c8:bb:a7:54:9b:aa:37:46:0e:01:33:
7b:59:4d:68:6d:81:a6:9b:63:ee:30:02:19:ce:91:
42:1f:89:e4:3e:5d:a9:f3:50:61:6a:2d:96:cb:da:
6f:20:58:21:81:73:a9:39:21:e2:4e:40:69:f6:17:
16:c0:ed:56:88:ba:89:47:af:d9:5a:a2:b5:42:5d:
67:e5:9f:c9:95:12:20:da:84:3b:87:d3:38:86:98:
19:a3:fb:81:64:12:f8:cc:69:40:09:a1:05:c0:2b:
f6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:58:FA:40:4B:72:46:6A:9A:F0:C8:22:2A:80:B7:11:86:22:1A:C6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/692941c1-1a2a-45f0-ad9a-2adc6910cab5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:65:87:4d:58:ce:bd:7f:fe:28:d8:2f:e2:78:1b:cc:e4:6a:
59:95:2e:25:01:a4:34:34:52:0b:51:68:85:ce:00:00:7d:18:
5e:86:c3:70:3f:aa:cd:81:50:f3:84:32:49:51:1c:5b:ea:33:
e1:a5:29:a3:c9:70:c7:96:5a:f8:e0:65:00:ff:11:1d:bd:08:
1d:dd:ef:f9:b2:bb:11:7a:ce:16:1f:83:3d:2e:81:f7:8d:eb:
1f:50:a5:dc:de:aa:25:a0:18:bf:49:f9:29:58:d1:b5:4c:f9:
49:bf:b6:9b:a9:ed:69:0d:85:13:4e:d4:1c:91:3c:e1:12:c7:
9d:8c:53:01:82:45:a2:30:03:6b:55:4c:1a:d6:9e:6b:87:e2:
99:62:89:3c:6b:82:2a:d2:b1:a9:4e:3e:ea:50:5d:6e:fc:89:
a8:78:89:06:74:1e:b2:78:48:0c:54:b9:ee:93:f7:2a:e5:49:
02:51:7c:6c:ad:41:75:aa:86:70:50:b2:84:11:95:dc:33:a9:
1e:e2:9e:61:58:72:c9:e9:aa:8f:52:1c:68:e7:1d:48:62:2e:
b8:3e:69:0f:27:7c:c3:ef:52:17:5f:39:64:3f:41:88:bc:37:
dd:34:c7:6c:b0:5c:53:00:22:f6:d0:34:42:4f:0b:33:0a:78:
94:78:a2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:34:35 2025 by rpki-client