Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7bd4d167-45f0-49af-8a89-f6c4511953f8.roa
File: 7bd4d167-45f0-49af-8a89-f6c4511953f8.roa (raw, json)
Hash identifier: u/7EAicRRVtLr5vOqGZ6k2iAFl7c354vOz0aZbMO5jM=
Subject key identifier: 49:78:1F:C5:49:D4:91:E9:7C:69:4C:98:FB:4F:32:A9:1B:48:EC:1D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 472E94557F374B5A5E2A4D2DB1597003CF0DFCCA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7bd4d167-45f0-49af-8a89-f6c4511953f8.roa
Signing time: Sat 02 Mar 2024 00:00:00 +0000
ROA not before: Sat 02 Mar 2024 00:00:00 +0000
ROA not after: Sat 06 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:2e:94:55:7f:37:4b:5a:5e:2a:4d:2d:b1:59:70:03:cf:0d:fc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 2 00:00:00 2024 GMT
Not After : Apr 6 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:63:c4:1b:5a:49:2b:76:a5:e5:33:75:d5:83:
c3:26:12:c0:df:f1:1a:54:ec:f5:2c:d6:02:a4:3a:
df:8e:01:a7:52:4b:5c:5d:e8:07:13:5b:30:e2:89:
35:c6:a5:c1:d6:1f:12:69:50:5c:6a:29:34:3e:e7:
04:b6:21:52:86:65:1a:bf:4c:0a:ef:72:66:f6:52:
42:ec:94:0d:9b:fd:bd:b2:d2:1b:9e:70:a7:c7:d6:
53:44:97:f9:61:5c:7c:91:6e:fd:ac:f9:94:31:99:
9e:d2:3e:b2:27:db:6d:af:54:09:a3:25:76:51:47:
79:4b:34:ae:48:4a:c9:19:9e:7b:10:1c:1d:bd:6c:
55:99:95:c1:42:7d:d2:15:bc:12:7c:ba:fa:d6:c5:
c4:7d:52:96:f2:71:c8:ec:c7:ee:79:d7:3e:72:14:
ad:15:f5:0a:87:36:3f:f1:5d:13:f2:f6:71:70:b6:
4d:ba:24:73:85:ca:7f:ae:ee:c4:92:77:62:ea:c3:
4b:e7:61:f6:de:6c:70:45:3d:f8:5d:d4:95:8b:66:
c9:44:25:97:7c:19:15:bd:0b:72:dd:4d:f4:41:59:
76:38:06:c1:29:94:b4:47:d1:5e:41:23:31:9f:18:
be:47:2c:ec:26:8b:75:9d:59:e1:f6:a5:1e:48:cf:
1c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:78:1F:C5:49:D4:91:E9:7C:69:4C:98:FB:4F:32:A9:1B:48:EC:1D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7bd4d167-45f0-49af-8a89-f6c4511953f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:b9:a1:75:62:1f:e3:df:3d:68:69:5a:27:f8:21:81:fb:18:
ed:bb:71:87:13:7a:6c:fd:b5:fa:1f:f6:58:bb:8d:8e:b6:bc:
7a:76:c7:47:ee:a9:ef:5b:2d:8a:71:57:36:b0:6b:d7:5b:c3:
38:f6:f6:fe:75:c3:b9:c4:43:31:49:ba:e8:0e:8e:73:d5:e4:
f2:37:3d:02:fb:3e:39:2e:a9:95:93:80:42:91:9a:7a:37:e8:
e6:22:46:4f:bd:29:1e:b7:5e:7f:06:cf:fe:ae:73:9d:79:34:
b7:67:8b:7a:2d:fa:20:9f:42:da:49:1e:db:be:44:d5:b7:4b:
cf:76:fc:1d:e4:36:db:ea:6f:8a:64:cb:9c:62:cc:63:f8:45:
cb:8c:d8:2a:b5:72:68:26:4c:f6:6e:49:cb:a8:8a:4a:b4:09:
48:d4:d2:95:d0:51:69:60:17:1e:2f:af:47:df:08:39:b4:f6:
50:de:8b:57:0d:d3:e8:78:a0:8f:0d:0e:d7:f1:b1:ca:80:03:
3e:2b:32:8b:d0:9f:48:70:d7:cf:99:89:47:46:77:c3:f1:60:
3e:d7:73:62:bb:cf:21:0c:09:27:21:50:b7:36:3a:d9:92:71:
b0:06:01:6a:98:70:5d:0c:15:99:56:08:e8:b6:ce:ff:50:27:
09:d5:4e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:26:47 2025 by rpki-client