Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/74a4cccc-2af2-4bd8-92ff-414423c19ab0.roa
File: 74a4cccc-2af2-4bd8-92ff-414423c19ab0.roa (raw, json)
Hash identifier: oImbbEEalsDH55Q6HTjsfB58RZC5nSsB15duGOwc7Nk=
Subject key identifier: 75:DB:06:19:87:14:E0:00:E4:53:0C:35:21:3D:93:66:FE:62:2B:F7
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4CF25DA568EB42BF8448F3100C0317FF2F5645EF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/74a4cccc-2af2-4bd8-92ff-414423c19ab0.roa
Signing time: Thu 10 Aug 2023 00:00:00 +0000
ROA not before: Thu 10 Aug 2023 00:00:00 +0000
ROA not after: Thu 14 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:f2:5d:a5:68:eb:42:bf:84:48:f3:10:0c:03:17:ff:2f:56:45:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 10 00:00:00 2023 GMT
Not After : Sep 14 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f1:55:6f:69:2e:df:ac:ac:71:8f:fd:68:a8:
04:10:d0:03:59:6f:47:e9:75:b9:63:50:34:f6:27:
ee:fd:80:f4:0d:f1:b9:25:db:28:ce:da:1d:59:54:
38:fe:21:7d:57:bc:51:47:a1:66:f6:d0:f7:ab:97:
bc:08:d5:03:cd:21:6b:f8:98:d3:2a:98:62:be:cd:
85:17:05:30:58:c5:f3:74:3a:ce:06:d5:e9:41:80:
53:2f:f2:1d:94:81:63:15:dd:a3:cd:6a:47:bf:9a:
60:83:d7:43:b8:9c:30:5a:94:27:cd:61:2c:9f:4e:
4e:e0:70:ff:f2:f4:8a:5a:be:6d:d7:8d:70:1e:db:
62:81:c2:13:72:f0:bd:ba:ef:23:e6:6a:93:24:6a:
6a:86:78:fc:69:39:86:54:ab:ad:dd:02:dc:16:3b:
77:7b:99:44:2f:37:74:95:92:3f:7c:00:55:ef:86:
bd:a4:32:2d:f2:50:f4:ae:88:2e:39:4f:51:89:4b:
2e:a3:4e:e9:c7:41:24:ba:e5:6c:5e:14:ef:09:d9:
7c:8c:f4:7d:53:23:90:6a:67:32:12:ae:29:fb:87:
e7:0b:04:d6:19:ea:53:a0:46:bf:fd:f2:2b:66:dc:
ab:b6:4e:cc:4b:56:34:d8:15:d8:15:9a:82:51:b0:
36:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DB:06:19:87:14:E0:00:E4:53:0C:35:21:3D:93:66:FE:62:2B:F7
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/74a4cccc-2af2-4bd8-92ff-414423c19ab0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:d2:cf:0c:64:b5:6b:cd:d6:77:3e:57:6d:31:5b:22:e4:88:
d7:92:61:fd:33:d1:b7:98:68:15:a7:ab:b6:87:4b:c2:b5:7c:
fd:dd:3a:5b:a7:cf:51:66:70:03:19:04:51:9b:35:05:a6:e0:
05:ec:11:3b:4f:7e:f6:db:00:e5:f3:8c:1f:d2:1c:c8:9c:d1:
ce:d7:83:dc:ce:15:ab:ec:3c:d0:4d:ea:86:ed:1d:f6:52:ee:
0b:45:a1:8d:d7:46:65:b0:cd:b6:5c:53:bd:4e:b8:09:85:2c:
33:f8:b4:78:63:f5:ea:23:a8:87:50:e1:0b:23:ab:6c:ed:4b:
cd:43:03:25:e8:55:9b:ed:23:b1:c3:78:5b:ba:dd:24:ec:d9:
64:1f:dd:5d:1d:45:43:e9:f0:09:f4:c1:ff:6f:69:bc:e1:5b:
dd:3a:e7:2f:08:f8:d2:2b:94:cd:32:bf:2b:52:0d:72:e7:7c:
99:78:a3:ba:44:6f:bf:f6:25:c9:92:7d:32:cd:76:41:60:db:
68:5b:ba:ef:fe:e9:ee:62:b4:4f:e5:bd:02:92:4d:79:c7:77:
4a:5c:47:1f:b5:bf:41:36:e3:c5:23:83:b1:f0:f9:e5:68:44:
1e:49:04:1d:f9:be:7d:ea:b1:bc:3d:62:50:1e:12:ef:ac:82:
be:00:7b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:16 2025 by rpki-client