Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/865a0467-919e-414e-be55-d20c12d95566.roa
File: 865a0467-919e-414e-be55-d20c12d95566.roa (raw, json)
Hash identifier: qPT0MtTLEYxUspoaW6cVIu8NWWVQhKrp83k9MCk61Ac=
Subject key identifier: 21:52:01:C9:33:EE:37:31:40:9D:1A:8E:A7:B8:7C:48:C6:CB:5D:B8
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6141D406D191AA1C38BAC70233C279DC66A5413B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/865a0467-919e-414e-be55-d20c12d95566.roa
Signing time: Thu 19 Dec 2024 00:00:00 +0000
ROA not before: Thu 19 Dec 2024 00:00:00 +0000
ROA not after: Thu 23 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:41:d4:06:d1:91:aa:1c:38:ba:c7:02:33:c2:79:dc:66:a5:41:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 19 00:00:00 2024 GMT
Not After : Jan 23 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8b:0f:76:87:35:46:37:85:99:88:ee:b1:d5:
81:0b:a5:dd:25:76:39:bc:42:f6:80:76:3e:6f:63:
48:e0:31:d3:ce:be:6e:f2:04:78:d6:89:52:e8:03:
42:cd:1e:d8:74:6e:e4:d2:9d:68:89:11:48:16:67:
1f:fd:5e:76:06:d2:d2:cc:38:5e:96:3d:5e:ef:38:
81:a1:3d:85:96:f2:1b:c3:c4:1d:16:fa:a1:38:21:
5a:0a:a5:63:f4:b1:67:bb:d9:07:40:1f:03:1d:11:
ea:7e:dd:e6:d4:ad:d1:b7:e7:65:b1:5c:06:e4:7e:
e1:a5:ca:a8:fc:72:bc:eb:7e:4a:04:75:6b:f5:14:
26:cc:fe:d8:fe:2e:62:38:08:0c:4a:e2:69:02:f3:
a3:60:73:ba:09:55:9b:f5:39:3c:46:85:d5:02:3e:
ef:37:b4:e4:0d:c9:1d:38:9b:22:1d:96:fa:65:79:
b0:a6:11:d3:88:c8:d7:ed:ec:7f:9e:c5:4f:bd:d2:
dc:86:30:3c:6e:85:8b:f1:0f:d9:fe:9f:53:e7:9a:
95:a8:b3:42:1f:bf:a7:48:c3:09:b6:2d:56:cc:8e:
31:41:65:45:9c:56:32:a0:44:a7:f5:89:62:02:48:
f6:e0:cb:d9:77:47:73:60:a9:c1:39:9e:dd:63:bf:
24:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:52:01:C9:33:EE:37:31:40:9D:1A:8E:A7:B8:7C:48:C6:CB:5D:B8
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/865a0467-919e-414e-be55-d20c12d95566.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ef:61:60:de:83:da:56:01:bc:53:bf:35:cb:a9:3c:b3:61:
13:94:70:29:3b:65:b3:e7:54:2d:5a:e4:1d:e9:17:a4:63:de:
5c:1d:ff:9d:d8:11:6a:59:4a:17:da:30:72:63:56:61:7d:d0:
e5:fc:0e:c7:aa:4a:8b:03:d1:87:70:5b:f0:6f:79:03:35:18:
a2:15:3d:58:b7:5d:a4:a7:33:23:6d:1b:a2:a4:2b:79:73:f6:
8d:c1:ee:b9:d6:8a:9a:51:08:3f:01:8c:e0:1b:d1:67:19:69:
94:f9:93:4d:be:a3:ff:c8:21:53:61:72:65:26:eb:e4:0a:f7:
5d:29:29:7b:ec:7f:35:f4:30:10:2b:e3:de:ca:93:8e:4b:44:
dd:08:e5:83:91:e5:1c:a4:5b:a0:1d:c3:33:81:8a:ef:22:5d:
cd:b2:5b:b2:04:1b:31:24:1a:19:17:90:4d:13:1f:fb:25:43:
d0:b4:e5:23:3f:e0:cd:57:1b:a7:61:50:82:35:fb:21:d1:39:
dc:51:e8:3b:ec:06:90:9b:88:71:99:31:16:11:19:11:3c:ce:
1a:ce:39:78:0e:09:17:99:c5:ef:e4:14:27:32:60:cd:1f:28:
ac:85:05:4f:66:fb:6e:c9:db:12:40:8f:e6:49:f6:f5:a5:11:
e3:cf:c9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:19:35 2025 by rpki-client