Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6c00d235-a488-4604-b5ef-1064ed4b4bb8.roa
File: 6c00d235-a488-4604-b5ef-1064ed4b4bb8.roa (raw, json)
Hash identifier: HUCu8J87X791txdlIFtbqUsP5g9IsHbBvaqZX/Engp0=
Subject key identifier: 1D:59:5E:C1:01:D9:A1:AF:BC:30:1B:F1:B6:86:E6:2B:47:F4:FE:73
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 181C275A40285A4087E3E96495F3BF770F8BDC41
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6c00d235-a488-4604-b5ef-1064ed4b4bb8.roa
Signing time: Sun 02 Mar 2025 18:58:20 +0000
ROA not before: Sun 02 Mar 2025 18:58:20 +0000
ROA not after: Sun 06 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:1c:27:5a:40:28:5a:40:87:e3:e9:64:95:f3:bf:77:0f:8b:dc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 2 18:58:20 2025 GMT
Not After : Apr 6 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0a:41:fe:12:df:47:63:ba:51:89:f1:cf:8c:
d6:26:43:9e:9b:ba:a5:64:5d:81:f1:c3:71:c6:3e:
d3:06:a4:5b:48:6a:b3:d9:31:e2:aa:77:d2:65:65:
77:c9:1a:65:c1:02:1d:af:cf:2b:cf:f1:45:08:d8:
c2:c9:23:38:2c:6c:f0:bc:19:e6:be:16:83:e0:0d:
0e:82:a8:85:47:ff:eb:9b:77:51:5b:e1:13:f6:f0:
00:5e:47:af:d5:70:a6:f8:a4:84:24:05:53:cc:69:
ef:09:b3:7e:4d:96:c4:9e:a9:fa:59:45:4b:13:a7:
84:aa:1c:4c:98:99:4b:1e:27:25:5c:7c:b0:69:99:
22:38:00:e4:a7:aa:27:1c:36:e4:2e:26:b4:04:b0:
1b:e5:51:72:46:95:0a:af:c4:aa:2d:97:b0:5b:f6:
86:20:3b:a0:6e:69:f9:af:04:43:f0:84:e5:a3:e4:
1a:a3:24:82:63:7a:d8:5a:14:f5:9a:13:3e:b6:a9:
7c:3a:93:f3:7d:d9:9d:8a:f4:b8:93:99:3a:a0:23:
18:44:05:f5:57:33:61:46:55:4c:6b:87:07:df:e8:
c3:49:f5:c0:68:6b:f6:0f:85:fb:c1:66:05:92:e0:
bc:f7:9b:85:09:bf:7d:be:41:1a:2d:f6:82:69:d6:
ef:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:59:5E:C1:01:D9:A1:AF:BC:30:1B:F1:B6:86:E6:2B:47:F4:FE:73
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6c00d235-a488-4604-b5ef-1064ed4b4bb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ca:0c:42:24:bf:40:c5:4a:69:4e:18:ed:e1:b7:e4:0f:a1:
e3:fd:96:e7:40:e2:15:ab:67:3d:f3:0a:48:a1:25:89:c5:de:
0f:ca:6f:bb:ba:91:30:32:77:07:20:27:31:d9:cc:53:44:fd:
22:32:9d:b2:68:71:58:01:b5:c6:6d:29:3e:74:50:25:03:41:
d5:ca:6b:74:26:e4:b7:ea:36:79:dc:d2:98:70:6b:ee:9c:aa:
ff:5c:7a:14:46:3a:ff:b4:34:c3:c6:e1:06:30:66:91:4e:74:
d0:d5:e6:78:56:79:41:5e:2d:17:77:a3:f9:50:45:18:9a:f7:
41:6e:50:da:36:85:3f:34:a9:02:f8:95:7c:22:63:c4:e5:67:
9e:ae:f9:72:04:23:0c:10:62:cb:50:4e:33:8a:ab:d4:84:61:
42:d6:80:60:9f:c0:45:ac:6c:52:2c:a1:c8:d8:ee:b6:cb:cb:
f1:65:95:cf:48:8b:f5:72:e3:24:38:0e:da:94:8f:2f:fe:27:
c1:d0:a4:b0:2c:e4:7e:50:92:37:a7:48:63:7d:cf:61:9d:9b:
76:eb:97:72:a2:5d:4c:7c:9c:b3:40:a2:d1:28:3f:da:78:f3:
ed:62:21:3a:2f:2a:a8:a4:b0:ae:21:85:50:53:85:18:ed:24:
a3:54:3f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:13:01 2025 by rpki-client