Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6ba1f356-b5aa-463b-a56c-65d19aa3efe7.roa
File: 6ba1f356-b5aa-463b-a56c-65d19aa3efe7.roa (raw, json)
Hash identifier: batY+xeSznhG3msPqgr5sHfGNHjQE9xXUWLQGwo2kso=
Subject key identifier: 8E:97:0C:84:21:C1:00:E3:1A:25:79:B8:2C:1C:B7:E6:D3:9B:C8:88
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 39B0964C81B8F41AB39883DAA9379A238A41B94E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6ba1f356-b5aa-463b-a56c-65d19aa3efe7.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:b0:96:4c:81:b8:f4:1a:b3:98:83:da:a9:37:9a:23:8a:41:b9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:06:81:28:f1:f7:3e:26:e6:4b:bc:d4:a6:f6:
0a:df:b3:94:b2:65:70:6c:29:68:3e:e2:ac:48:a6:
3f:71:ea:ce:70:66:4e:7e:d6:9f:c1:5e:02:36:b0:
a2:c4:56:6d:70:a7:31:08:e6:09:56:40:36:ee:9a:
92:fd:26:cd:42:4b:0c:d8:fd:8b:dc:22:8f:6c:1f:
03:ec:59:76:fc:23:94:8f:4c:e7:9d:be:b0:8c:71:
64:f4:8c:27:05:81:14:f0:d4:8e:fa:a1:ed:4d:8a:
67:32:74:2b:f9:a1:08:fb:9e:60:0f:8f:8d:5b:e2:
ac:c6:94:6d:08:8c:a5:4d:66:bf:3b:1a:67:7a:2c:
ea:35:8a:a9:08:55:ca:a5:93:cb:32:91:a9:68:01:
06:2e:df:ab:3c:bc:81:fe:cb:85:b7:24:93:73:8c:
65:f5:1e:cb:01:d8:62:13:ec:fe:ed:62:dd:ce:14:
50:8a:ff:19:6f:7b:07:85:e8:26:79:e4:93:83:db:
75:3c:8f:e2:e5:7d:72:4f:fc:3e:83:0b:48:3c:e2:
91:5b:a5:b8:3d:6f:81:28:d0:18:cc:d6:56:0d:f9:
b8:3f:62:f1:60:25:cd:e1:ba:ad:54:4e:32:63:6a:
77:71:b6:a7:04:ac:8e:62:6f:19:20:12:23:1b:3f:
2d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:97:0C:84:21:C1:00:E3:1A:25:79:B8:2C:1C:B7:E6:D3:9B:C8:88
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6ba1f356-b5aa-463b-a56c-65d19aa3efe7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
28:7a:61:12:98:74:69:09:33:af:d0:4a:a2:61:d1:27:1f:61:
0f:c9:d8:16:63:15:93:c6:65:c1:a6:05:e5:aa:de:10:d4:c4:
2f:59:30:1e:d5:47:29:69:2a:3b:99:55:b9:b3:52:6c:1f:0a:
06:58:c4:e4:a0:9c:63:f8:27:cd:15:9a:9a:8e:da:85:e3:7a:
69:7b:0b:09:22:be:7d:6e:21:9c:88:d7:03:5f:b7:da:be:99:
84:9d:77:e2:66:1a:f8:0d:78:7b:f3:b7:d5:53:ab:2c:4b:07:
df:d6:d6:e8:ca:ac:44:ce:5a:a1:2f:4c:37:8c:e0:01:38:cf:
2b:16:86:48:6c:6e:12:16:b7:a4:59:68:be:44:62:4a:52:f7:
6d:c0:ff:09:9d:d5:d1:fd:f3:cd:2f:09:33:8e:d5:22:37:b5:
3f:de:99:c5:26:aa:19:f6:51:1b:c4:31:d3:2f:db:ae:84:63:
85:a4:a4:dd:02:43:a8:a3:82:71:21:45:87:85:95:9d:6b:95:
81:fa:6a:8b:8b:04:77:67:4f:a1:8f:ad:64:28:84:ea:d2:7d:
c7:ae:80:46:be:d8:3b:7f:fe:3b:05:c0:83:50:8d:15:46:19:
be:9d:56:1c:b8:66:b6:0e:7b:ac:58:62:b8:57:95:21:8c:47:
95:ba:3b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:04:13 2025 by rpki-client