Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f89e84f-e508-4871-ad22-386670fcae5a.roa
File: 7f89e84f-e508-4871-ad22-386670fcae5a.roa (raw, json)
Hash identifier: XdWD1+2GhPzyIccUpEpkICCc+euUoPGlyJKmxgOUqsI=
Subject key identifier: 5E:0D:7F:CB:0C:8E:7C:D4:C2:12:08:F6:0B:22:55:FE:63:BA:01:ED
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 22694D8BA3641C3376D563579B210DB14CCF853E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f89e84f-e508-4871-ad22-386670fcae5a.roa
Signing time: Sat 09 Dec 2023 00:00:00 +0000
ROA not before: Sat 09 Dec 2023 00:00:00 +0000
ROA not after: Sat 13 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:69:4d:8b:a3:64:1c:33:76:d5:63:57:9b:21:0d:b1:4c:cf:85:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 9 00:00:00 2023 GMT
Not After : Jan 13 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:a4:55:92:de:5b:32:15:da:e8:9a:8a:75:
fb:03:d5:c4:fa:93:a0:bd:5b:e3:85:db:a4:db:bc:
15:13:f3:0e:60:3a:fc:38:b0:01:98:18:9e:61:23:
b1:02:ef:95:10:68:5a:f8:f3:f6:30:56:cc:e0:62:
96:9f:fc:18:d5:33:ef:da:40:df:c7:7f:27:4c:5b:
9c:c5:20:44:1d:f5:06:8b:d5:5a:fb:68:e1:fc:bf:
d0:6c:0b:94:98:03:94:57:d2:69:71:74:07:4e:c9:
d5:4d:65:7e:fd:d6:e7:7a:2d:20:8b:83:a6:7b:56:
c4:7b:3a:73:85:1d:8d:8d:0c:3c:3a:4e:c3:c7:d5:
06:81:60:27:c7:87:d4:6d:7a:5f:cd:8e:ad:c3:36:
17:5d:2f:66:17:4d:bd:4c:fb:0d:26:01:73:47:88:
50:4f:c5:b2:39:ea:f5:8e:ca:53:d1:47:a0:64:88:
c6:f7:c6:0d:f5:86:d1:6e:c6:4f:bc:f7:77:27:e5:
cb:17:5e:ec:3c:05:50:3e:30:58:4b:3a:82:5a:b2:
08:65:c4:6e:71:1d:a8:66:08:67:0a:6d:7d:02:93:
38:b6:c4:d5:aa:58:a6:05:d1:be:01:79:81:bd:1c:
74:1f:5a:58:b5:bd:2e:0a:c3:1a:23:97:54:83:eb:
46:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0D:7F:CB:0C:8E:7C:D4:C2:12:08:F6:0B:22:55:FE:63:BA:01:ED
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f89e84f-e508-4871-ad22-386670fcae5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:a4:e3:67:46:6c:ee:62:4c:5f:91:41:cb:fb:b9:b4:09:81:
43:c9:92:8a:2a:b2:7c:d9:c7:21:3a:21:f5:5f:ac:5f:03:0d:
72:f9:d4:d8:29:e1:27:92:61:7a:04:29:ea:48:4a:fb:5a:63:
58:49:70:d9:cf:2a:fc:1d:51:a5:a9:3e:b5:13:c2:23:b0:71:
7f:80:b7:58:49:55:f8:4a:7b:4e:e6:a5:a3:80:b8:97:e6:f0:
30:6f:04:7f:c1:76:91:0a:8c:1b:19:eb:86:67:72:0e:da:42:
d0:47:26:38:30:36:30:eb:c6:8d:25:18:ff:c0:6d:cb:e7:dc:
3e:c9:a0:e2:c8:1c:37:e2:45:32:0f:9a:71:74:54:50:e1:26:
ec:e9:a0:40:6d:45:bb:3c:ea:95:69:f2:3d:a4:59:76:57:c6:
b3:12:83:09:b2:32:c2:4f:f5:a0:83:20:48:6b:8e:61:a0:a3:
ae:36:4c:70:9a:df:60:a5:00:93:f0:09:72:8d:61:ff:62:65:
8f:58:51:85:aa:ec:72:68:b4:b6:ac:ee:6f:9b:ac:3f:12:6a:
25:d0:d1:87:07:0f:ce:a6:83:bc:45:00:c1:7c:21:1a:32:66:
37:ca:2e:59:3c:06:50:48:1b:fe:2d:ac:a1:5a:81:cf:0d:78:
c7:02:ff:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:15:06 2025 by rpki-client