Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/79d44626-2c1c-4e0a-9349-18d0872abc84.roa
File: 79d44626-2c1c-4e0a-9349-18d0872abc84.roa (raw, json)
Hash identifier: 5x6ENWiUmJNKiSZtFYrqokERX8hXmRSOC9gV139Tcwo=
Subject key identifier: 49:3C:66:7C:1C:6B:1E:12:7A:1C:07:AD:00:05:D9:37:54:95:CA:CD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4738C7F4540B3B054EF2FE3DC8035F09FB294855
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/79d44626-2c1c-4e0a-9349-18d0872abc84.roa
Signing time: Fri 22 Sep 2023 00:00:00 +0000
ROA not before: Fri 22 Sep 2023 00:00:00 +0000
ROA not after: Fri 27 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:38:c7:f4:54:0b:3b:05:4e:f2:fe:3d:c8:03:5f:09:fb:29:48:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 22 00:00:00 2023 GMT
Not After : Oct 27 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5b:31:f7:85:7a:ef:01:a4:fa:f5:fd:75:22:
fa:e2:87:d1:17:c8:26:67:ef:64:a1:f1:5d:12:a0:
c8:7c:34:af:af:e8:10:9d:5a:e2:c7:22:70:29:e6:
d3:e8:87:66:d3:40:50:01:b6:dc:63:a8:57:d7:ab:
1e:07:90:2f:bf:6d:2b:9a:d3:ae:1f:a4:8b:70:83:
13:1b:06:4f:31:93:20:dd:98:e5:cc:4a:46:ae:45:
2a:1f:3b:af:cd:c5:ae:88:8c:65:72:e9:ec:e9:ba:
ff:4a:0b:f7:d3:44:96:de:12:34:24:a4:19:4b:29:
29:c7:7d:3a:01:da:2e:28:5b:7a:54:93:67:75:9f:
3c:9d:60:ac:3c:c1:b8:8c:63:28:08:8d:b2:06:be:
aa:ea:aa:80:7d:8f:cd:6c:43:a1:e3:62:60:e2:27:
33:30:13:50:76:57:77:d6:7c:6b:01:33:29:6a:c2:
90:c9:e9:f3:35:b2:82:a3:a3:19:cf:69:6e:7c:e5:
01:64:e8:a0:4b:78:13:91:fc:3a:9a:e6:11:59:14:
ad:7e:90:6b:2e:8e:8d:e4:e7:ee:1e:34:b8:f4:56:
c1:8e:fb:50:ab:d7:6e:58:22:97:7f:0e:60:24:1f:
38:63:f9:0d:d5:ef:c5:91:c7:b4:db:83:88:a7:e5:
54:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3C:66:7C:1C:6B:1E:12:7A:1C:07:AD:00:05:D9:37:54:95:CA:CD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/79d44626-2c1c-4e0a-9349-18d0872abc84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:0e:56:d8:ea:52:60:28:cd:ec:2c:29:a1:99:49:83:2a:bc:
cf:95:12:01:95:ac:4d:5e:13:87:26:61:fb:f6:2b:4a:c5:59:
8c:fa:66:ad:ae:5e:7d:ee:9a:2f:87:51:30:98:8c:21:96:5d:
6a:35:f4:54:49:1c:98:b8:ec:d9:4f:48:4a:a9:2c:24:1f:63:
51:5c:12:c6:37:8e:cd:1d:8d:b9:6a:0e:85:08:db:9f:f6:1d:
17:6b:41:23:7e:34:09:e0:57:13:b3:7b:3f:24:08:0a:67:92:
3d:ee:b5:16:8a:d5:90:38:5e:1d:75:91:73:2e:83:0b:65:2c:
23:73:09:de:2c:00:ee:8b:ad:e8:ce:a4:54:35:a7:33:34:17:
ac:64:c2:83:ec:10:56:c5:aa:6b:4c:34:ca:e8:36:94:f0:3a:
92:c3:52:43:d3:d8:2f:9a:ef:bb:ec:2e:b8:02:6b:78:7f:f7:
02:29:d4:37:cf:d9:57:aa:bc:e5:6d:c3:c7:d6:cb:0b:d0:45:
e0:16:d7:fa:ff:ca:f5:88:bb:ba:c1:9b:da:ee:2f:3b:59:c4:
84:f3:ec:7b:01:58:20:9a:d6:14:1c:1d:68:03:5b:6f:76:9d:
35:5e:9f:b4:b9:92:8a:5b:fa:a9:0c:93:2c:e0:d9:9a:a4:57:
1f:19:24:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 07:33:27 2025 by rpki-client