Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/79569ac3-3d02-4fce-b7c4-5aac86e2609e.roa
File: 79569ac3-3d02-4fce-b7c4-5aac86e2609e.roa (raw, json)
Hash identifier: kGM7B/UKX0t/iXz1nhyLFlIa3Gb6FDefggBMEpptYlY=
Subject key identifier: 71:F1:9A:A0:56:C4:10:74:1A:AD:D3:92:17:E9:B9:CF:91:75:95:4E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 358B51B07D7642EADF8264C27C8BDA972A83AC56
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/79569ac3-3d02-4fce-b7c4-5aac86e2609e.roa
Signing time: Tue 18 Jul 2023 00:00:00 +0000
ROA not before: Tue 18 Jul 2023 00:00:00 +0000
ROA not after: Tue 22 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:8b:51:b0:7d:76:42:ea:df:82:64:c2:7c:8b:da:97:2a:83:ac:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 18 00:00:00 2023 GMT
Not After : Aug 22 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cb:39:b4:ab:ed:5c:34:1e:14:bb:69:00:8d:
90:ad:55:74:7f:1e:af:f5:66:b0:07:32:0f:66:58:
29:2a:6d:a1:ef:33:37:67:f1:41:92:30:84:b3:b2:
0f:ba:38:5c:53:55:0d:78:4e:ee:cf:56:b3:72:a3:
a0:25:26:ae:91:4b:9d:66:cb:b4:c7:2a:8a:09:b9:
22:5b:4f:aa:c6:86:5b:a1:9c:fe:e4:9b:f2:ad:83:
2e:b1:e2:8d:a0:82:70:39:86:db:c3:8d:e2:14:b7:
41:13:51:10:15:23:5a:35:72:03:49:eb:17:3c:02:
f2:73:19:86:96:d2:8d:ed:e0:f6:0e:14:dc:0a:87:
59:c3:7b:d9:46:9f:de:44:b1:be:1a:64:95:ca:f7:
a5:1e:91:85:e3:2a:57:3a:05:42:a5:d3:d7:28:80:
a5:ec:41:63:6d:61:0a:65:8d:b1:95:89:b5:96:44:
db:d6:36:ab:58:6a:8e:f6:46:37:b5:e5:5f:67:e7:
10:ec:ae:6c:24:4c:b4:d8:02:43:42:a8:c2:a2:12:
c8:95:f1:13:ec:3f:e3:35:b8:c1:6e:cc:58:f7:62:
72:35:55:43:29:93:44:93:a9:60:94:e3:d5:c2:84:
b5:24:3a:04:d0:e9:df:6c:5d:a7:e7:97:23:bc:19:
b1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F1:9A:A0:56:C4:10:74:1A:AD:D3:92:17:E9:B9:CF:91:75:95:4E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/79569ac3-3d02-4fce-b7c4-5aac86e2609e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
84:ab:78:f6:13:4c:60:b7:4b:26:2a:a0:d3:96:6b:fe:bf:2d:
c1:57:51:75:4f:54:25:8c:20:9f:6f:91:b2:78:12:d7:c6:1e:
c3:56:2d:a6:e8:b1:1b:b3:d6:ee:c6:7c:bf:cd:bf:73:da:4b:
6f:5e:ce:e5:a3:b9:fc:da:13:aa:0f:e8:3b:72:b1:66:77:a7:
2f:cc:3a:fc:ee:3f:19:e5:2b:34:27:38:b9:79:3e:03:7c:56:
ea:7e:5c:57:14:0c:f8:61:13:39:6b:5e:15:ea:e4:ff:93:ed:
81:9f:9e:1b:2b:e2:cc:47:9b:62:6d:61:be:e7:7e:22:17:4b:
1f:42:a0:9e:b6:4e:4a:4d:34:aa:f3:7d:48:30:c8:5c:5f:bb:
f5:31:25:c2:f6:33:6d:a5:dd:8c:59:9f:d3:b2:ad:9f:82:05:
a8:c7:bd:03:e6:f4:da:a1:2f:b3:05:ea:79:41:50:03:b0:34:
79:53:40:8c:e3:0c:fd:a8:d4:01:09:50:7d:a8:27:df:b6:6f:
22:5f:b0:d4:2b:51:09:d0:82:35:15:54:94:1e:2d:4d:11:04:
42:d0:49:a1:57:63:b8:7a:89:9a:50:aa:6d:04:7e:d2:94:67:
58:a8:cd:dc:a0:e3:1d:58:5f:dd:e0:aa:60:c6:4c:8e:51:d0:
16:c6:3b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:16 2025 by rpki-client