Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/74a2f294-3fd2-4efe-99f2-a00752610ff9.roa
File: 74a2f294-3fd2-4efe-99f2-a00752610ff9.roa (raw, json)
Hash identifier: I3TiApc1IY1m2B7ha7DheOOexEsnDc1AflwFokWwqOw=
Subject key identifier: 37:9D:F3:DF:5D:E9:2A:09:17:AD:19:4F:9D:B3:0B:85:6D:FD:87:C1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4E2CB44E8DD4CFA6CF88E817EEFEDDD03D015F8E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/74a2f294-3fd2-4efe-99f2-a00752610ff9.roa
Signing time: Wed 19 Feb 2025 23:33:20 +0000
ROA not before: Wed 19 Feb 2025 23:33:20 +0000
ROA not after: Wed 26 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:2c:b4:4e:8d:d4:cf:a6:cf:88:e8:17:ee:fe:dd:d0:3d:01:5f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 19 23:33:20 2025 GMT
Not After : Mar 26 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c2:82:38:90:81:ee:92:e4:1e:93:dc:76:96:
af:77:15:d1:4d:0f:56:90:ce:7b:89:0e:67:d2:0b:
c8:14:ba:3b:f6:7e:ef:09:df:10:37:e4:41:54:ff:
93:ed:8f:d4:88:72:d4:d5:bd:c8:3f:e2:76:ac:77:
d9:96:ef:77:3d:9a:d3:d0:8f:a7:b1:00:29:f2:9e:
22:c4:ce:20:e4:30:cd:a2:de:08:f4:a7:d5:52:4c:
d6:fa:95:1c:1d:d7:f1:df:6f:9f:68:d5:91:f8:c2:
c9:24:06:5f:bc:6a:a1:04:47:b3:75:26:b9:8c:60:
e0:3d:1f:65:04:08:34:5c:98:7e:20:88:03:6e:e5:
6e:7d:57:48:da:c0:58:34:1c:98:c6:fe:9a:ed:97:
00:82:00:3b:dd:27:db:9b:5c:97:aa:55:13:1d:cb:
fe:34:ee:b5:ed:8f:b3:a2:ce:d2:65:16:4e:06:2a:
ed:da:7f:d5:89:18:59:34:76:7c:30:da:c1:51:f3:
09:ed:6a:db:e8:f7:0b:c7:f8:25:84:15:a0:bd:5e:
95:8f:f4:b6:21:28:22:f0:fa:90:c1:3c:98:06:ec:
d1:b9:16:f5:99:8b:b7:55:64:1f:84:27:50:2e:ac:
8c:28:f9:36:a6:d6:c0:06:ac:87:ab:46:0a:ee:e0:
19:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9D:F3:DF:5D:E9:2A:09:17:AD:19:4F:9D:B3:0B:85:6D:FD:87:C1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/74a2f294-3fd2-4efe-99f2-a00752610ff9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
38:22:06:76:14:0b:df:5e:80:9d:cd:7f:61:7b:75:ef:01:ed:
27:70:b5:56:d8:5d:90:b9:a0:bd:1a:45:20:21:aa:c7:47:0e:
6d:51:6c:ff:9b:9f:a0:c3:69:05:04:e8:6b:c7:5f:2a:58:af:
85:da:3b:c9:af:6c:48:b4:ed:45:14:8d:5c:f6:e7:f3:d7:8d:
df:af:20:b9:26:76:e6:11:3f:ef:a5:e1:a0:a8:c2:b8:87:3f:
88:5c:50:32:b3:94:33:56:33:c4:c6:83:18:d7:4c:84:8d:42:
e0:2f:a1:a9:50:37:b1:3d:ea:87:8d:b3:ea:31:8b:42:05:3e:
4a:85:c1:f7:7f:19:b7:6a:c2:89:64:d6:21:e4:00:27:3c:a4:
bd:f4:66:75:55:0e:66:d5:a0:f3:f7:fa:e6:a9:d2:4b:f2:81:
94:46:66:bd:ae:cf:a4:f6:65:49:47:08:5e:ee:cb:51:50:16:
6a:06:bc:ab:ff:fb:1c:9a:eb:58:e0:03:71:db:10:29:fc:1a:
92:e1:85:c3:75:32:a4:11:2e:a9:0c:c7:71:19:e0:10:2c:6f:
91:21:91:fb:c4:e8:1f:8d:16:98:0e:f1:2e:3e:c2:2b:d3:b8:
fd:fb:9b:93:e0:8f:c1:f7:fb:d3:c1:05:c6:05:08:00:13:a7:
5a:25:73:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:50:47 2025 by rpki-client