Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8416c94f-d751-4af4-960e-fa29a985b340.roa
File: 8416c94f-d751-4af4-960e-fa29a985b340.roa (raw, json)
Hash identifier: ggClw7+y/3HvzuxAxsNJ6o5g+MCvhJ7QLSPHj6nWyBU=
Subject key identifier: 87:79:FA:60:05:D0:F5:DB:19:47:3C:AE:CD:07:2B:BD:30:B1:97:00
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 61F65CF7F4199A79F092DEBC36D440C567510869
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8416c94f-d751-4af4-960e-fa29a985b340.roa
Signing time: Sat 01 Feb 2025 00:00:00 +0000
ROA not before: Sat 01 Feb 2025 00:00:00 +0000
ROA not after: Sat 08 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:f6:5c:f7:f4:19:9a:79:f0:92:de:bc:36:d4:40:c5:67:51:08:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 1 00:00:00 2025 GMT
Not After : Mar 8 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:fe:fb:52:bf:b8:f7:2d:a7:6d:00:95:15:
c8:bf:e0:1e:95:58:c8:62:ad:e4:39:02:91:a7:90:
33:1c:c2:3d:7d:e6:87:ab:62:55:32:54:c0:90:8a:
5d:37:20:36:15:f3:00:6b:93:3e:84:5d:e4:fa:93:
c7:95:59:fb:08:7c:a0:12:85:bf:bd:fb:d8:07:db:
d0:6e:bb:30:19:2c:97:03:6c:25:8f:f7:7e:9d:24:
49:3a:fe:5a:f2:cb:90:40:aa:cf:13:54:a3:aa:5f:
be:d2:18:a8:68:a0:da:04:da:62:6d:33:22:c9:af:
32:09:f9:62:f4:2f:86:7e:a1:8b:fa:77:61:17:88:
eb:21:e5:8d:7e:30:f8:5d:59:61:c1:d7:61:9b:24:
8c:10:3a:3b:30:2c:67:a5:b5:a8:bb:dd:b9:00:a5:
43:54:e5:84:cd:f7:f1:1f:04:96:c8:d8:fb:5b:f9:
a9:99:e1:4f:fc:bb:16:e9:a3:29:c7:c6:bd:b4:59:
8c:7c:b9:0e:24:2e:c3:21:0f:e1:55:cc:f2:c3:5e:
0f:2a:f5:56:16:74:56:0d:31:d7:6a:df:c8:d0:12:
d2:0b:7a:d5:4d:1b:6a:51:7d:3d:a0:0b:e2:42:5d:
5e:52:76:8b:5f:cd:ae:4f:a0:65:33:4c:62:b6:3a:
0c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:79:FA:60:05:D0:F5:DB:19:47:3C:AE:CD:07:2B:BD:30:B1:97:00
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8416c94f-d751-4af4-960e-fa29a985b340.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:0b:a7:c6:53:42:6e:b8:a0:cf:86:9d:dd:45:75:83:37:d8:
5a:ad:68:cf:94:88:7d:df:08:7c:92:9f:ce:02:d8:c5:03:32:
bb:66:a1:b0:17:88:41:56:1d:d8:14:7d:a0:d1:0b:41:1e:44:
bd:9c:f3:fa:33:e0:b7:96:bd:58:ac:ad:92:32:93:ba:52:0f:
0c:9b:ac:cf:bb:a5:fc:6d:51:24:7c:81:37:97:9c:54:79:20:
10:a9:21:9e:2e:c8:7e:ec:2b:a2:94:66:47:d2:4c:be:5f:bf:
54:90:80:d7:ee:81:d9:85:e7:96:ac:1a:17:57:29:5d:fe:86:
d0:4f:2a:6f:9c:1b:34:27:e1:61:c0:6a:10:41:00:02:93:38:
82:3f:36:f2:d9:fc:e0:d7:7c:71:f4:af:75:d5:2f:b8:9f:e9:
cc:c0:8a:a3:32:4f:44:59:63:28:c5:77:a6:32:5d:4c:0c:bd:
93:ab:47:f0:d9:e8:fd:f2:72:52:23:0a:6c:b7:ff:96:40:d4:
d7:43:7e:61:a8:8c:7e:b2:1e:a4:20:4c:59:b0:87:75:6d:3e:
86:9c:27:59:ad:1d:d1:ca:1a:8a:e4:63:83:84:90:24:e4:dc:
9b:88:fb:c8:e9:53:f1:d7:76:4e:55:d4:9a:94:21:8a:43:7c:
59:f3:a1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:04:16 2025 by rpki-client