Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8629fb81-33f9-424a-a143-3eeeb48f1829.roa
File: 8629fb81-33f9-424a-a143-3eeeb48f1829.roa (raw, json)
Hash identifier: MJHqKrqkZ3Rp/9NUItCoBgTuGaL3FEZGKByY+HDwa18=
Subject key identifier: 8C:D3:F9:31:83:FB:7C:DE:1F:C3:1F:1B:C6:C8:F4:74:2B:CB:6F:8E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4A5827B5A45BE9520C76A8958DD77B37CF3465F1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8629fb81-33f9-424a-a143-3eeeb48f1829.roa
Signing time: Mon 17 Mar 2025 03:53:20 +0000
ROA not before: Mon 17 Mar 2025 03:53:20 +0000
ROA not after: Mon 21 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:58:27:b5:a4:5b:e9:52:0c:76:a8:95:8d:d7:7b:37:cf:34:65:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 17 03:53:20 2025 GMT
Not After : Apr 21 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:44:24:01:5c:19:7e:59:66:a0:88:74:23:
f4:31:4b:c7:00:77:05:5a:9a:ab:2a:98:22:e5:36:
7c:66:41:68:dd:4d:0f:93:43:b5:85:6f:d6:84:f8:
c5:ff:b3:0a:e5:c4:ce:4d:31:fe:c5:da:6b:86:a6:
48:d2:b6:6a:c2:23:95:94:68:c2:41:26:e8:88:06:
7b:a0:39:8b:c2:4c:3a:3b:8f:00:ea:cc:72:ed:86:
bd:7d:45:32:ca:c8:f0:3f:80:a0:2e:0c:71:18:2a:
b3:f5:07:31:87:8b:92:b7:e5:70:a0:8c:bb:ea:69:
3f:7c:a5:7a:23:01:6f:e6:fb:92:38:90:65:d2:0b:
26:9b:bb:e7:3e:c2:50:d0:eb:64:7f:e5:1b:75:59:
13:2b:1d:5a:4e:ce:64:33:f3:24:1c:58:d2:2e:a0:
d7:c7:60:16:5c:63:58:45:2d:51:ac:18:23:ae:ed:
7a:23:56:ab:9e:53:a2:8c:e4:a2:1d:37:fb:d8:9e:
ed:78:e0:71:b0:92:fe:9a:75:bd:20:01:e5:9b:8d:
75:88:8a:0f:9d:f0:48:7a:d2:68:91:fa:79:63:ac:
49:fc:c3:98:96:64:a6:4f:3f:15:b5:74:a0:58:e5:
6f:9a:83:36:b7:4a:1a:db:dc:d9:f0:16:ed:d3:77:
3e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D3:F9:31:83:FB:7C:DE:1F:C3:1F:1B:C6:C8:F4:74:2B:CB:6F:8E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8629fb81-33f9-424a-a143-3eeeb48f1829.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:96:91:d1:d4:8b:ab:19:d8:8d:bb:d3:bb:c1:0d:49:47:e5:
8c:52:f1:2d:c0:58:02:47:ec:bf:35:48:24:74:49:9f:96:00:
64:55:44:a8:4e:12:c7:6d:b2:09:38:8f:c6:11:7f:88:fb:41:
31:44:df:ea:01:8f:11:95:3b:e5:29:43:ac:c5:de:87:d1:be:
90:82:65:66:8c:8a:f6:ee:9a:99:ba:77:1f:6a:23:0f:33:6c:
d2:38:57:49:34:4c:af:3b:24:6d:bd:6b:66:74:fa:65:b0:b7:
51:f0:91:c2:80:c4:52:d2:d6:f6:d8:c3:a8:e7:95:29:b6:00:
fb:92:bd:35:8b:e2:7b:f3:d5:9c:b3:0e:f4:9b:e5:f2:0f:1d:
b7:c0:64:91:b4:17:4a:dc:43:7d:c9:63:fe:8f:3c:98:42:a4:
24:b2:f3:08:bd:94:72:ea:51:e3:32:90:77:65:b0:8d:c3:c5:
a2:e9:ba:ca:b3:13:1a:44:d0:4d:10:6e:4d:bf:7d:de:6f:b1:
f0:ea:d1:93:71:c6:e4:0d:97:e6:35:b7:53:aa:d6:9e:8f:35:
cb:88:2d:96:a6:a1:3b:84:2e:c8:9b:d7:5e:66:c1:b8:3a:fd:
55:9d:89:d5:fa:29:81:8b:42:37:40:e8:39:2c:c2:33:70:0b:
d6:86:d4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:05:26 2025 by rpki-client