Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/82bfe6c0-c358-4265-a122-86b6e818b4c8.roa
File: 82bfe6c0-c358-4265-a122-86b6e818b4c8.roa (raw, json)
Hash identifier: qtPeanNW9obqnOpt1wRAnSyifNg2LGlnPp6J2OA0RHM=
Subject key identifier: 07:64:DC:1E:70:BB:8C:06:00:F9:3B:C1:EB:C2:76:17:35:AE:66:E8
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6CC77960DBDB22D036C81A054471D857B3CF7E89
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/82bfe6c0-c358-4265-a122-86b6e818b4c8.roa
Signing time: Sat 24 Jun 2023 00:00:00 +0000
ROA not before: Sat 24 Jun 2023 00:00:00 +0000
ROA not after: Sat 29 Jul 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:c7:79:60:db:db:22:d0:36:c8:1a:05:44:71:d8:57:b3:cf:7e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 24 00:00:00 2023 GMT
Not After : Jul 29 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:15:89:c0:39:05:45:73:6b:af:89:32:c4:c0:
d3:b8:8e:c8:a7:69:aa:49:85:72:af:15:c5:42:21:
75:f9:fe:52:b2:72:b2:72:88:1b:7e:6b:ff:5a:77:
e5:2b:6c:58:0a:7f:85:e0:ba:54:ce:f3:ea:69:36:
0a:12:7e:eb:90:81:ab:ae:5f:f4:9c:b8:e5:66:42:
55:fc:8e:29:77:d3:0d:77:4b:3a:2a:71:4d:b1:c1:
3d:2b:55:32:8e:f4:66:81:c8:67:86:13:72:b4:72:
99:3b:bf:c1:c5:e0:9b:a1:41:d6:e3:2c:63:24:82:
b8:3a:7b:cd:5e:b7:fd:c7:61:3d:21:47:49:93:65:
d6:5c:a0:2f:b8:bb:5b:bf:45:f2:76:70:c3:98:32:
ef:2e:3b:d0:55:9f:0a:aa:ff:cf:1b:11:c6:37:ad:
0a:59:83:5d:bf:27:13:28:86:99:fe:f9:de:15:5b:
4c:0f:49:16:5e:6f:79:e3:76:d7:37:0a:1e:06:9d:
11:76:a8:9f:29:91:58:28:cc:eb:c1:62:61:5b:6d:
26:c3:e9:53:75:da:c1:05:b3:b9:92:f6:bb:4c:8d:
de:8e:de:31:90:e1:f3:92:68:62:dd:15:a4:9d:0e:
59:c7:83:fc:ef:6a:b5:29:32:07:8b:8a:60:f7:ab:
17:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:64:DC:1E:70:BB:8C:06:00:F9:3B:C1:EB:C2:76:17:35:AE:66:E8
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/82bfe6c0-c358-4265-a122-86b6e818b4c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
73:ae:73:c4:12:ba:08:02:9a:5a:36:d9:ca:55:8b:6c:09:76:
9a:75:7d:12:0e:b7:41:0b:76:fb:17:e5:d4:77:12:8b:fa:c4:
de:6d:5b:2b:20:58:64:9e:f9:02:e7:c5:e5:a4:f4:1f:2e:c7:
a0:11:20:2c:fd:49:d0:15:0a:b3:f9:67:09:6a:4e:46:5f:e3:
2d:cf:da:ff:fa:f5:97:5e:4f:5a:ec:60:12:9c:22:2a:eb:18:
11:58:42:7e:5e:98:b5:0d:42:06:fa:8c:96:bb:30:10:18:f6:
7c:bf:bf:c5:2b:35:53:fd:b1:ad:69:99:ed:bc:28:3e:61:f0:
cf:7f:5d:ca:79:e0:06:ee:62:04:ac:a3:74:5c:95:4a:72:4e:
03:08:93:41:0b:1c:3e:87:4e:12:98:c5:5f:7c:96:b4:26:a6:
8f:bc:88:0f:5d:3c:a1:fb:a4:90:bb:04:ce:bd:99:05:7c:98:
26:b5:19:17:61:a4:b5:db:7b:e2:8e:13:9c:35:31:a3:83:06:
f5:9f:9b:d5:c7:e0:f1:2f:d6:87:65:c7:7a:53:3a:16:c7:70:
dd:4e:87:0e:7e:3c:84:52:60:b2:41:27:ce:32:08:3f:bd:75:
59:38:50:8d:1c:25:81:ef:7d:34:db:31:29:3f:40:ec:9d:aa:
5e:7e:7b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:54:32 2025 by rpki-client