Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7eb494c5-5ff4-4263-8ea1-26d4caf31553.roa
File: 7eb494c5-5ff4-4263-8ea1-26d4caf31553.roa (raw, json)
Hash identifier: XbbvHt7RbInvgqo8nzf7/2/2tmKD/gFYKiC8coUULaU=
Subject key identifier: EB:B3:1E:4E:0F:65:39:8B:93:59:6C:55:4B:C1:2F:05:63:9B:DC:E1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 791BA1CB1931EE664C73002C4CBD80F840D7AF49
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7eb494c5-5ff4-4263-8ea1-26d4caf31553.roa
Signing time: Sun 22 Sep 2024 00:00:00 +0000
ROA not before: Sun 22 Sep 2024 00:00:00 +0000
ROA not after: Sun 27 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:1b:a1:cb:19:31:ee:66:4c:73:00:2c:4c:bd:80:f8:40:d7:af:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 22 00:00:00 2024 GMT
Not After : Oct 27 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5c:38:11:a1:c9:98:0b:8b:98:aa:c3:75:b8:
61:19:67:cc:46:34:c4:82:57:07:35:02:43:44:40:
58:db:bb:ad:9f:3e:1b:b0:85:54:9d:f9:7b:89:08:
ef:c6:ca:ed:d1:5b:c5:8d:88:cb:f7:93:ab:2b:b2:
16:75:02:4f:7f:79:9b:67:8a:26:5a:76:5d:e9:15:
70:72:e0:02:c2:8b:31:78:49:30:8e:8c:ea:3a:f2:
35:56:66:54:90:64:4f:2d:0f:98:e3:f2:4c:9a:de:
b8:1c:3f:8a:ce:c1:d4:4a:4c:ac:42:6b:58:3f:92:
af:3f:d2:27:59:3e:29:a1:8b:0f:94:d8:cc:25:78:
ea:a6:10:24:74:f9:08:ef:8f:95:b0:31:9a:09:8b:
b0:35:13:2d:28:d2:bd:be:a7:f5:84:4f:6d:2f:08:
63:12:10:17:0b:25:84:1a:76:25:fc:fd:55:9f:fb:
fc:f9:40:3f:42:d8:75:71:1a:93:94:8e:27:c6:2f:
86:58:bb:f3:17:2a:53:1d:52:34:05:13:be:27:00:
2c:f9:1e:68:59:fd:50:38:61:6d:32:b5:b6:ff:6d:
70:55:ce:3e:46:ea:9f:2c:88:19:a2:03:2c:1a:67:
2e:0f:61:88:ce:75:04:4a:76:a4:3e:44:d5:3a:b9:
41:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B3:1E:4E:0F:65:39:8B:93:59:6C:55:4B:C1:2F:05:63:9B:DC:E1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7eb494c5-5ff4-4263-8ea1-26d4caf31553.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d1:76:66:73:fa:e0:f4:02:b1:f7:90:33:08:7e:79:52:69:
94:6c:6b:08:2d:ef:d1:b4:8c:02:d4:30:2d:35:07:7c:73:7a:
f3:88:57:32:ee:d5:2c:5e:41:ac:66:ff:74:a5:76:d4:1f:b2:
00:3c:21:43:5c:d5:d5:3e:80:87:ac:ce:10:2d:45:69:30:87:
13:7f:4c:f1:61:ed:0c:11:ca:c7:5e:6f:63:6e:65:f7:44:3e:
db:a9:94:a5:dc:f1:de:5b:77:be:dc:da:d1:42:29:21:91:89:
16:1f:a3:16:99:a8:49:4c:58:61:e3:3b:75:22:b0:d5:61:59:
59:bc:b0:89:da:d5:d3:6b:47:0a:5d:89:76:12:46:0f:ec:41:
76:da:fe:de:4a:c4:ba:4d:3d:bd:28:b1:e6:d6:81:2e:2c:8f:
3e:67:2f:33:73:3a:fb:33:4a:1c:19:98:95:0d:82:32:a2:10:
8b:9f:a1:fa:f1:22:49:77:03:42:ac:1b:fb:65:c3:6b:18:d6:
94:ed:6a:e3:dc:0f:72:5b:f7:22:f6:50:db:01:de:5b:e4:49:
f6:55:83:58:21:6d:bf:36:3e:7a:ef:68:34:5f:43:16:51:22:
2b:60:0f:a4:48:16:cc:e0:39:c1:cd:25:92:b5:f4:1d:a8:86:
0e:65:68:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:18:47 2025 by rpki-client