Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6e507cb8-f2e1-4526-b663-7af524323de6.roa
File: 6e507cb8-f2e1-4526-b663-7af524323de6.roa (raw, json)
Hash identifier: TXkexsO9EHS9ZYnyG73RgWGkKAeiwvZ75Hb+R594y2s=
Subject key identifier: B3:EA:6E:AE:B1:11:43:E8:84:BA:D3:A3:85:91:42:AF:4B:7C:10:A8
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6379C0086D0F4CBE9BD5A36C71ADC06E6DC1D629
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6e507cb8-f2e1-4526-b663-7af524323de6.roa
Signing time: Thu 02 Jan 2025 00:00:00 +0000
ROA not before: Thu 02 Jan 2025 00:00:00 +0000
ROA not after: Thu 06 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:79:c0:08:6d:0f:4c:be:9b:d5:a3:6c:71:ad:c0:6e:6d:c1:d6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 2 00:00:00 2025 GMT
Not After : Feb 6 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:de:19:09:99:32:fb:bc:8d:82:29:5c:e7:
94:0f:18:cf:d7:08:fa:b6:b2:d0:9d:dc:9b:f1:70:
2c:f3:34:9b:69:15:b7:7c:34:02:88:1c:c5:75:63:
a1:99:86:bd:8f:c1:57:b1:e0:da:ad:90:6f:39:f0:
8e:10:d7:c1:79:94:a7:ae:d3:a4:c5:5a:44:07:68:
64:79:38:5c:32:aa:05:3d:fe:ee:35:3b:35:d6:62:
f8:bb:e0:5d:94:57:5b:b9:d2:d6:3f:65:e8:ce:03:
0f:75:21:60:ff:0c:e8:6d:c1:6f:4a:23:7c:ff:31:
21:5c:6a:a8:56:17:69:a7:ad:e1:f0:e8:6a:10:08:
5c:ee:66:92:8e:07:b9:19:41:bf:a5:72:40:d5:d8:
46:a9:75:20:eb:7d:0a:c4:a8:97:53:1e:a2:82:b9:
15:92:7d:88:8f:a0:09:8b:5e:fc:9c:5b:43:87:33:
00:61:8e:1a:19:40:d8:ed:a6:62:67:3f:30:b0:68:
d4:67:e5:b2:00:69:f9:54:03:4b:81:9a:68:03:f8:
a3:2f:99:a1:aa:02:30:7c:5d:07:ab:b8:2f:5e:d9:
cb:73:67:3a:6a:6a:29:7f:fe:ce:fd:f5:9e:01:9b:
99:0b:04:8d:46:83:00:d4:a7:5e:72:e6:09:ee:2e:
72:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EA:6E:AE:B1:11:43:E8:84:BA:D3:A3:85:91:42:AF:4B:7C:10:A8
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6e507cb8-f2e1-4526-b663-7af524323de6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
32:5a:78:75:e4:b9:50:1d:43:d5:1b:08:cf:a7:4d:8d:1f:00:
a1:97:f1:91:55:0b:2e:54:cd:90:57:14:ac:07:c4:f3:31:0a:
50:dc:a7:48:b6:7f:58:d9:da:a0:bf:e3:99:90:ac:54:16:30:
db:08:74:0e:df:d9:0e:18:e5:c1:04:fd:d7:94:db:02:9f:92:
11:57:d3:a0:a4:7b:5a:ce:9e:3d:e1:b7:36:16:8a:a5:0b:af:
73:f8:76:9d:09:31:e8:4e:fe:93:81:d2:19:9f:29:98:9a:47:
9d:ab:dd:22:3b:bc:cc:2f:de:f5:7a:d9:a4:e6:40:d1:10:b1:
e8:87:31:f3:dd:1a:5f:08:cd:58:76:49:db:30:6e:f8:53:96:
13:33:46:f2:80:15:bc:57:50:e0:26:99:d5:b4:14:36:46:b4:
e5:e7:8a:2f:cc:de:38:f4:da:72:df:e3:01:5a:7c:fd:51:1c:
41:36:ae:23:d7:47:76:5b:ba:85:d0:22:00:32:57:41:76:1b:
c3:00:9f:ec:45:03:b6:52:b1:08:f3:20:48:34:ef:89:2b:6c:
64:bf:2a:5c:d3:9d:eb:d3:bc:dc:27:c5:fb:14:e5:c8:b8:2b:
54:94:98:62:87:bf:21:5b:c4:89:01:23:fa:8b:25:fb:18:17:
a8:6f:8f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:15:07 2025 by rpki-client