Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6b775a78-1893-4df4-91ee-a00700e7c72b.roa
File: 6b775a78-1893-4df4-91ee-a00700e7c72b.roa (raw, json)
Hash identifier: /6wdGQTka0SH9BJJwCROWuOBNnd87RP4LLVJANF56EU=
Subject key identifier: 39:06:8B:8D:3C:89:D2:F8:78:16:FD:DE:C0:7E:35:AC:C2:72:93:03
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 750028A07AED7E41992F04131BE5EE7E98649E8D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6b775a78-1893-4df4-91ee-a00700e7c72b.roa
Signing time: Sat 09 Nov 2024 00:00:00 +0000
ROA not before: Sat 09 Nov 2024 00:00:00 +0000
ROA not after: Sat 14 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:00:28:a0:7a:ed:7e:41:99:2f:04:13:1b:e5:ee:7e:98:64:9e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 9 00:00:00 2024 GMT
Not After : Dec 14 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:53:09:af:6c:bc:b0:3d:12:72:48:38:88:ed:
94:88:13:ed:39:cd:22:b7:dd:87:5f:66:c8:ee:28:
a8:83:0e:90:ec:fd:65:f4:29:e3:98:3e:ff:d5:2b:
ac:e7:10:c6:b1:19:9e:60:7c:50:5c:70:83:c0:0c:
9b:7d:8e:eb:54:60:0f:f0:68:c7:62:10:38:3e:58:
3a:84:fe:20:b2:43:c2:11:be:03:ea:0f:89:26:cb:
c2:7f:f0:29:53:40:c3:b2:e8:61:6a:ba:be:09:87:
8b:34:86:16:f2:8f:56:3a:52:7b:f5:66:3c:5b:32:
59:2f:40:59:26:d0:27:80:07:b7:78:48:b2:3d:0e:
0d:8a:84:2b:d0:d9:b2:d7:46:73:5b:b5:1e:8d:1b:
03:e3:c1:fb:08:95:ea:c8:97:c1:a0:f2:a4:e8:15:
59:72:34:66:a4:87:e3:2e:dc:e4:44:27:bf:a5:c5:
69:a7:d9:29:5c:b9:d8:99:87:d4:1b:83:e9:a7:be:
4e:77:6c:0a:f5:3a:62:91:6b:14:f0:08:98:64:9d:
c7:a0:b9:9c:fb:e8:7c:cf:4b:e6:ce:ec:80:78:b7:
3f:31:e2:b3:0e:99:63:ca:65:98:ef:b2:b4:22:e1:
6b:14:6a:3f:1f:3d:23:dc:af:cc:2a:cb:b7:3f:05:
b1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:06:8B:8D:3C:89:D2:F8:78:16:FD:DE:C0:7E:35:AC:C2:72:93:03
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6b775a78-1893-4df4-91ee-a00700e7c72b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:91:4d:ef:20:88:51:87:00:59:fc:61:99:f3:f2:e9:5a:04:
64:6a:83:52:da:71:5b:8d:55:14:ed:5e:dd:b4:ca:3b:a9:88:
e1:62:4e:57:00:aa:7d:9f:e4:81:d2:cd:fb:37:d8:d4:05:6e:
f7:b2:97:e7:ac:41:e4:2b:8e:79:d1:8d:59:95:92:77:be:5f:
8c:fd:bf:d3:3e:8e:56:26:62:2d:af:26:85:28:f0:af:c0:27:
db:e3:ec:95:30:8e:fe:29:1e:b6:18:63:9c:f1:d9:8f:25:ea:
fd:d0:7e:55:84:d7:3b:d2:97:5b:af:81:14:31:ef:30:65:ee:
20:73:2a:07:0e:41:ff:aa:f0:0e:42:84:5b:e6:f2:4b:5a:5b:
ad:cb:90:d3:8d:e7:a5:03:4d:4f:29:ab:2c:73:be:0d:81:14:
64:5b:dc:ef:20:7a:a2:32:f8:f9:b2:95:8e:63:b1:db:94:0f:
12:19:1e:58:ac:00:83:bf:e2:30:0e:b9:1a:d2:09:4c:c5:9a:
99:4b:19:8b:f4:aa:07:64:56:9f:e5:b0:dc:59:52:52:42:3d:
5f:0e:52:75:7d:0a:bc:1e:09:c3:25:71:da:6b:cc:57:dc:07:
97:0b:f8:51:0d:02:1d:30:16:01:b9:1a:21:0f:de:0a:74:e9:
5a:27:1d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:36:41 2025 by rpki-client