Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7a0d9b67-0c66-481a-90fc-0a1297186057.roa
File: 7a0d9b67-0c66-481a-90fc-0a1297186057.roa (raw, json)
Hash identifier: 0iu62R8badEY9yTZMzEKPTXD0h9sPy3DbbeYSqRww0c=
Subject key identifier: AC:B3:68:0E:33:5C:CF:B1:4F:EB:BD:96:08:A6:91:17:4C:5F:62:94
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 27F8A7A8ECFE5666117416F11DA87382134728F3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7a0d9b67-0c66-481a-90fc-0a1297186057.roa
Signing time: Fri 01 Dec 2023 00:00:00 +0000
ROA not before: Fri 01 Dec 2023 00:00:00 +0000
ROA not after: Fri 05 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:f8:a7:a8:ec:fe:56:66:11:74:16:f1:1d:a8:73:82:13:47:28:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 1 00:00:00 2023 GMT
Not After : Jan 5 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0f:fd:a5:32:29:44:71:fe:99:f5:80:35:39:
d7:69:f6:92:c9:b7:d9:e5:c3:21:e0:c4:ba:95:1e:
1b:a8:9f:1a:2a:ac:bf:62:3b:12:e2:1e:a5:f2:b1:
e5:8c:ac:89:a5:b2:85:bb:42:76:57:12:b9:39:f0:
a5:ee:1d:05:66:93:a9:d7:ad:f7:ad:8c:75:0a:4c:
55:ea:83:a5:4e:99:5d:58:80:b5:5c:01:ff:be:53:
5d:ee:02:d4:a2:4f:cb:8e:1b:a1:ea:82:7d:9c:85:
ff:12:c2:27:98:aa:86:1f:5c:01:64:7c:ff:04:c5:
9e:96:84:19:51:a8:48:89:7d:a0:39:fe:db:43:2c:
c8:e7:4c:3a:c5:52:d2:59:cf:e4:2c:5a:09:31:f1:
12:35:5b:3d:37:4d:6e:11:b3:19:a8:07:ab:24:7c:
a6:7b:b2:c6:77:67:ae:a0:f4:99:ab:ea:b8:6e:31:
a0:57:42:a9:39:4d:03:dd:73:f9:7a:64:52:78:cb:
76:3c:3a:9d:80:a9:7f:7c:20:78:33:77:c8:7a:7e:
27:00:b0:b3:9b:9f:84:72:13:1e:1a:6d:9c:b0:59:
90:4c:a5:31:89:2e:2e:41:3b:e0:58:ec:eb:06:2b:
c2:52:0e:81:79:0b:ac:f1:b3:d9:d2:7d:b4:1e:9d:
39:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B3:68:0E:33:5C:CF:B1:4F:EB:BD:96:08:A6:91:17:4C:5F:62:94
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7a0d9b67-0c66-481a-90fc-0a1297186057.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b3:f3:e6:a4:f7:6f:7d:84:7a:2b:fa:72:a7:bd:2b:5a:2f:
80:b9:79:ef:7f:54:4d:77:54:96:29:0a:97:7d:f1:a8:f9:8b:
10:4e:bb:f2:87:26:a1:38:98:86:ab:24:91:42:b6:ad:f3:07:
63:eb:a7:14:35:dd:2d:d4:c1:30:7c:03:cf:b3:dc:97:47:69:
91:9e:c4:97:15:ed:24:72:5f:27:ea:a7:79:58:a8:92:ee:8f:
98:10:af:dd:5c:05:02:8f:fa:67:35:ff:7c:36:5b:b0:81:49:
40:6c:95:1b:6b:df:62:79:81:f0:b5:bf:c1:50:61:e1:9b:40:
ce:33:37:85:f6:c2:e4:da:c2:0f:dc:71:c3:71:ed:fc:77:35:
25:d4:07:12:52:16:5f:06:e0:40:6e:95:1a:1a:cc:09:06:4e:
8f:1a:e1:b0:4d:4e:1e:c3:78:05:96:e1:6e:23:ba:80:09:9a:
f7:16:1b:fa:cb:bb:12:4f:d7:39:23:17:86:87:10:3b:69:e3:
de:01:17:1b:30:16:5d:ef:cf:38:1d:e5:13:71:83:67:a9:49:
29:e8:3b:da:d4:3c:23:33:9f:44:28:29:85:64:0e:05:82:ba:
45:d0:eb:76:1c:8d:4d:75:59:b0:cc:c4:48:c4:05:9b:2f:b6:
95:80:4d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:12 2025 by rpki-client