Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/81ca0d37-233e-449e-bcb5-90564e7499cf.roa
File: 81ca0d37-233e-449e-bcb5-90564e7499cf.roa (raw, json)
Hash identifier: exEpwNzlzRRn+uRP0lEf5uXf5g9ipC/yAbC2eIr59ds=
Subject key identifier: 25:01:AB:36:1A:60:B6:D8:31:68:B4:2F:C3:24:B0:CA:1E:34:C1:EE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 58F58F8B28D91B8BD7D2D67C9E5ECC23E86619E5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/81ca0d37-233e-449e-bcb5-90564e7499cf.roa
Signing time: Sun 02 Jul 2023 00:00:00 +0000
ROA not before: Sun 02 Jul 2023 00:00:00 +0000
ROA not after: Sun 06 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:f5:8f:8b:28:d9:1b:8b:d7:d2:d6:7c:9e:5e:cc:23:e8:66:19:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 2 00:00:00 2023 GMT
Not After : Aug 6 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2b:1e:0c:8f:cd:53:8f:d1:ca:c2:f8:1e:41:
55:51:bc:b7:73:4c:58:88:a7:12:25:32:c9:b8:c7:
f4:e6:23:db:69:e8:a8:fa:e4:6e:68:60:e4:eb:e4:
a0:fe:a0:7d:9d:79:a5:33:59:22:e5:4c:dc:a1:67:
b0:25:38:dd:97:49:e1:bc:af:95:90:b1:9e:99:95:
01:85:79:d5:30:97:87:67:8a:ff:6b:3a:d6:01:80:
4e:e6:a2:8a:cd:f9:83:8a:b6:11:96:20:0c:b3:5c:
4f:d1:d0:e0:14:3e:92:bd:dd:99:85:e3:8d:7c:73:
47:67:f4:fb:88:60:3a:40:e9:20:ed:e4:11:30:c0:
5d:1e:64:15:ff:2e:c5:76:7f:07:20:83:fe:5b:b5:
a1:6d:54:06:a8:48:d0:d6:08:98:ab:43:f6:53:9d:
c5:56:05:b5:73:bd:bc:00:ff:85:5f:9b:e3:21:19:
47:4a:6f:42:e1:2c:fc:cf:1a:57:2c:71:20:5b:42:
3c:ac:92:ff:19:15:90:dc:36:be:2a:78:f0:df:0f:
24:b5:e4:0b:e8:b7:0f:51:c2:c8:2d:e6:aa:dd:d5:
fc:ee:b7:ef:ec:39:b3:1f:99:cc:a5:14:51:a2:2a:
0a:c2:f1:10:91:97:70:f9:68:7d:3a:b9:30:3b:af:
fc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:01:AB:36:1A:60:B6:D8:31:68:B4:2F:C3:24:B0:CA:1E:34:C1:EE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/81ca0d37-233e-449e-bcb5-90564e7499cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
93:57:22:83:55:01:04:5c:a2:18:dd:dd:90:a8:27:ae:b3:e8:
3d:60:fb:3f:fe:3e:8f:60:e1:e6:ae:14:65:b3:3c:a8:72:2d:
f8:5e:3f:2e:26:e7:4a:9d:49:00:3c:1f:da:d7:a9:4f:7f:ec:
a6:38:2f:da:27:51:47:2a:17:08:73:03:56:47:53:a6:c1:9b:
a3:6c:58:c4:e8:81:9a:30:83:2a:42:dc:ac:e0:7d:70:81:69:
0d:5c:bf:76:ca:2f:5c:66:b0:3c:79:2e:d6:5f:35:fb:9b:d6:
54:36:7c:eb:3b:ec:18:7e:fb:82:6c:b4:5a:c1:81:79:29:c0:
f9:a6:11:45:c8:fd:ed:df:ae:64:02:fd:fb:d0:f3:8d:f2:0c:
5d:49:68:73:fd:0f:f4:79:79:c7:f7:05:7a:39:63:d1:1a:28:
54:07:77:e6:c2:82:ae:73:87:a9:99:0f:33:0a:a6:f7:14:67:
d7:15:e3:55:8d:a1:03:75:86:9d:da:8c:70:9d:fa:ee:7a:33:
78:13:93:03:43:80:55:1b:11:79:ea:07:ec:9f:0c:8b:eb:68:
4c:53:38:29:16:33:a2:2a:4d:a0:7a:0b:b6:e5:9c:12:e1:ac:
a9:8e:a2:ec:2d:27:38:35:c9:d7:70:d2:65:ed:69:a9:cd:dc:
75:5a:0d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:16:44 2025 by rpki-client