Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/81849ace-4486-4286-afc7-8d3532ba2806.roa
File: 81849ace-4486-4286-afc7-8d3532ba2806.roa (raw, json)
Hash identifier: mlwlp1eCIjtGG3MpjQhtkLGkipjjPe4WC/kGAW5Tv2s=
Subject key identifier: F6:EA:1F:52:8C:89:1E:A0:C8:C5:E5:59:BD:60:DC:23:F2:FA:75:86
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0E1C72F1F1213221032EDDC22EB7BA5B4F343C6C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/81849ace-4486-4286-afc7-8d3532ba2806.roa
Signing time: Thu 20 Feb 2025 07:28:20 +0000
ROA not before: Thu 20 Feb 2025 07:28:20 +0000
ROA not after: Thu 27 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:1c:72:f1:f1:21:32:21:03:2e:dd:c2:2e:b7:ba:5b:4f:34:3c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 20 07:28:20 2025 GMT
Not After : Mar 27 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:94:e9:28:a4:83:ca:03:88:3f:9b:f7:9d:38:
b4:e3:91:8d:e3:f3:27:a8:f7:4a:f5:04:16:a6:65:
07:8c:2d:5e:7a:d1:38:8a:e3:d8:03:4a:4b:f0:76:
b6:28:7b:28:bc:9d:89:fc:e0:8b:58:b2:db:c9:44:
76:0e:72:8f:d6:c7:75:f6:0e:5d:7a:ae:13:7e:47:
b4:e4:79:53:90:ed:c0:f2:1b:da:ff:4e:6c:8b:2d:
bb:1e:6d:b1:e5:6c:2f:2b:3c:d9:05:f6:2b:3c:52:
ac:56:41:bd:54:af:e8:31:20:bc:9f:5e:11:0c:1a:
2f:e0:52:12:d0:22:8e:eb:d0:f5:5e:c7:4f:60:04:
79:62:32:06:a9:93:03:b1:e4:fa:b2:37:0b:d6:4d:
b6:9d:99:65:35:ec:eb:83:c0:ad:b2:d2:c3:34:0f:
e3:80:be:8d:98:f7:8d:c9:51:9d:2f:b1:75:d6:94:
81:41:7c:e5:29:4f:25:8f:a3:8d:4e:a2:9f:d3:29:
67:f7:49:00:44:21:ce:3d:e1:bd:a9:cb:54:63:f0:
07:8b:57:1d:04:ee:55:9d:a1:b9:47:76:54:d4:4d:
b9:76:eb:18:4e:73:39:bd:6c:23:07:1e:13:fc:fc:
d4:cb:31:fd:39:18:58:f8:77:df:da:33:aa:30:4a:
00:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EA:1F:52:8C:89:1E:A0:C8:C5:E5:59:BD:60:DC:23:F2:FA:75:86
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/81849ace-4486-4286-afc7-8d3532ba2806.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
18:63:14:e3:e5:de:b8:1a:b5:86:4c:f9:30:e8:68:19:45:93:
1a:97:d6:04:81:7a:90:83:5f:f5:e7:00:05:f3:aa:ff:ae:3b:
c6:89:62:07:b8:d0:77:ba:25:5b:99:ea:72:ae:81:7d:8e:dd:
cd:2d:f0:78:f1:f5:52:c8:dd:05:e1:33:ca:ba:3e:b5:6a:c1:
f3:89:52:ed:60:a1:4e:1c:9b:b9:59:86:11:45:6b:d0:7f:d9:
13:e6:76:22:d8:90:df:e3:ad:fb:bd:85:e2:9c:8e:ea:d7:3d:
d0:25:27:f2:b9:e7:b5:26:8e:68:ae:37:0e:73:2e:c8:60:62:
13:79:ca:02:42:1e:1b:82:3b:fb:27:84:a6:a3:7b:0c:c7:c9:
de:94:09:a0:32:3e:60:6d:24:ff:47:15:f8:a2:4a:23:d8:51:
fb:fa:ff:df:f3:1e:29:d8:f4:f5:19:55:11:9a:92:aa:ee:ed:
84:8d:30:47:ff:78:7e:c1:6a:f8:22:4c:c2:ae:f1:20:13:f1:
bb:92:00:2b:39:f7:07:48:be:49:e4:3b:00:88:cb:dc:a7:dd:
ce:83:7c:cb:ec:09:1a:77:1c:da:9e:51:ca:d2:25:33:b5:db:
d3:de:87:6b:44:10:61:30:c9:c2:d9:75:61:42:aa:75:81:4c:
16:f0:09:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:19:16 2025 by rpki-client