Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/79b2b6cc-1bf2-41f5-9d18-a6b863c273ba.roa
File: 79b2b6cc-1bf2-41f5-9d18-a6b863c273ba.roa (raw, json)
Hash identifier: jdnJnpHuEX+VXtga8ObOcAM7m4Ul5ATZExW6sJr2uIA=
Subject key identifier: 56:20:C3:89:C2:4C:FD:E3:08:C9:92:05:55:0D:DF:8B:58:FD:02:E8
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 56D95C386D33285441AB824C80630E351821DAE9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/79b2b6cc-1bf2-41f5-9d18-a6b863c273ba.roa
Signing time: Sun 22 Dec 2024 00:00:00 +0000
ROA not before: Sun 22 Dec 2024 00:00:00 +0000
ROA not after: Sun 26 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:d9:5c:38:6d:33:28:54:41:ab:82:4c:80:63:0e:35:18:21:da:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 22 00:00:00 2024 GMT
Not After : Jan 26 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:f1:af:c3:e6:f6:06:12:c3:2a:3a:29:ec:
ec:75:b6:79:90:79:46:b4:2e:ee:21:84:ca:71:ac:
9b:59:65:16:81:9b:28:23:37:66:5b:55:a9:8c:79:
cd:63:25:7e:32:cb:b4:7e:0c:24:b7:f6:51:99:0d:
8c:28:7c:b4:f0:52:b1:dc:e4:c5:82:68:de:61:02:
f8:42:e7:33:7a:32:16:52:f5:78:5d:27:4c:73:68:
b2:ba:46:d4:64:87:c0:94:ea:93:c0:81:6c:63:80:
99:ac:96:6c:2b:60:94:d0:31:eb:55:8c:96:ba:f2:
9e:0d:2f:d2:e1:48:29:7d:69:5b:c7:e8:ba:7a:64:
40:64:6a:53:88:45:05:d0:e8:59:60:9f:b5:58:91:
d5:41:ed:02:1e:f1:11:37:2f:a1:0c:0f:1a:b8:07:
de:41:52:83:61:9d:db:f8:c4:c8:12:ff:08:6f:88:
3a:45:d8:96:12:86:ba:fe:b5:f3:dd:2e:1e:b1:08:
12:cb:87:92:9a:f6:ca:0d:27:ef:82:f6:b1:54:2e:
88:dd:45:61:f9:8f:08:ee:ea:fa:7a:8a:67:62:16:
8d:61:09:d1:49:e4:0f:3e:12:ab:dd:2e:fd:5c:e0:
0f:f0:a6:b1:d0:96:00:00:7c:b5:03:bb:b6:3e:e6:
ac:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:20:C3:89:C2:4C:FD:E3:08:C9:92:05:55:0D:DF:8B:58:FD:02:E8
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/79b2b6cc-1bf2-41f5-9d18-a6b863c273ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
02:aa:cb:07:10:10:3a:e9:0f:bc:24:54:f9:a1:48:1d:f0:5d:
d6:f3:99:77:99:ed:72:c7:f3:d1:63:4d:a7:48:62:99:39:48:
91:71:da:a4:bd:7b:8b:8b:d7:2b:34:44:77:67:b6:5f:15:67:
1c:7c:cf:96:21:57:7a:c6:77:14:27:48:6f:af:27:e6:49:4b:
f9:5b:0a:17:26:00:b2:e6:9c:0b:59:df:13:47:09:41:12:7d:
98:5e:3f:10:a7:7b:7f:73:d5:21:60:83:13:45:a4:41:40:e9:
a3:fc:a5:68:a6:99:ec:f9:36:e3:be:71:e4:29:53:55:30:60:
2e:0f:1f:44:08:5b:3f:f6:06:a3:9b:4a:f5:30:cb:07:34:ef:
ee:11:bb:2f:e4:2f:96:e8:bf:a8:b5:4e:47:f7:38:a6:35:2a:
73:c9:63:2a:51:ab:65:bd:7c:39:77:14:9b:51:83:aa:d2:c0:
ec:17:70:00:47:3a:eb:35:82:60:bb:ed:99:5f:ed:69:3e:95:
8d:06:ea:e1:14:4d:88:8f:90:2f:00:43:d3:21:14:58:87:b1:
27:e1:bd:28:9f:f5:37:6f:d0:a6:49:d4:a5:30:35:92:27:34:
c3:75:d5:0d:74:be:a1:93:69:1e:bf:7d:27:85:fe:5b:a4:5f:
5b:01:0f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:49:37 2025 by rpki-client