Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/86c38f68-26d6-487a-ba17-64029cd53645.roa
File: 86c38f68-26d6-487a-ba17-64029cd53645.roa (raw, json)
Hash identifier: t/CKOgdoZ4ODm3j+TJzcxTcYMjiZLvhRjQxT3FXotLo=
Subject key identifier: D8:1E:28:30:00:C5:5C:D7:8A:AE:CB:A1:25:34:CF:46:2A:D5:C0:B7
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 715B52F2795E8EE5EDAC4AA2DB51E986C843F64D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/86c38f68-26d6-487a-ba17-64029cd53645.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:5b:52:f2:79:5e:8e:e5:ed:ac:4a:a2:db:51:e9:86:c8:43:f6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:c9:6d:20:43:72:05:89:c4:a4:31:e2:55:
85:c8:cf:73:f9:02:47:ba:9e:11:a9:33:a3:42:3b:
0e:87:e0:e5:5a:3f:a8:33:87:a4:1f:4c:d9:21:41:
3b:e0:7e:01:fc:53:dd:18:65:57:49:4b:17:8d:50:
22:87:cb:79:9f:ff:79:10:e9:29:93:9e:1a:c5:9f:
0f:9c:f9:aa:99:f7:53:bb:b5:4c:a8:1d:b2:b7:09:
ba:f5:18:62:df:ee:24:e6:ec:0c:8a:0a:13:21:43:
4c:00:ef:3e:d0:5e:d0:5a:ba:0a:39:7b:d0:d3:c9:
7f:bd:b9:8c:56:3b:e5:bb:9b:18:0f:9d:b8:0c:87:
30:53:a4:23:72:e6:b0:b9:7a:37:c7:96:eb:64:65:
92:79:18:bb:65:f6:56:dd:48:3f:fc:aa:f6:dd:47:
0d:22:3f:b8:6d:42:4d:6b:38:4c:d9:a6:0d:f1:94:
69:c0:31:37:b0:35:3a:6c:30:51:07:0a:8e:22:00:
e4:97:de:1e:da:7f:64:15:94:6a:1c:a7:aa:22:62:
e2:a1:fd:3a:ed:c7:8b:fa:69:e3:a8:2d:b8:7d:c6:
c4:37:13:70:54:24:36:35:fe:49:62:fa:9d:fc:b7:
6f:4d:ea:9f:21:24:6e:66:99:5a:7d:f6:e8:1b:37:
b0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1E:28:30:00:C5:5C:D7:8A:AE:CB:A1:25:34:CF:46:2A:D5:C0:B7
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/86c38f68-26d6-487a-ba17-64029cd53645.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
00:13:3a:c8:ae:75:61:83:76:82:8a:46:ac:64:04:4b:76:2d:
ca:59:84:5c:c7:48:dc:a0:9a:1c:12:cf:9e:2e:42:97:11:b1:
b4:94:68:f0:e6:f5:37:39:17:ee:d0:f5:59:99:20:c5:e0:13:
a1:6b:9f:ae:9e:c8:ba:9c:8b:2e:b9:24:2a:ee:01:08:db:8c:
58:af:79:84:39:7b:1c:4f:5d:dc:9f:58:90:13:5e:c3:23:f4:
ff:cf:96:6a:a0:d1:c8:84:e5:61:ac:bb:53:12:ec:05:12:bb:
df:05:06:96:39:a2:5e:3d:9f:20:a6:af:0c:66:c8:b9:47:6d:
ab:0f:04:65:c8:f0:a4:8f:a6:ae:20:75:75:f3:1c:05:d5:42:
e8:94:78:c2:ff:c3:6f:98:71:84:f6:32:25:84:73:8e:fb:87:
bd:d4:54:a0:a8:dd:be:e7:07:4d:62:b4:50:d2:23:0e:b9:be:
4e:3a:eb:66:7b:5b:0e:27:0a:cc:aa:60:d4:a2:e2:dc:06:7a:
03:36:73:78:06:e2:cc:bb:58:de:e6:30:ab:33:c7:3a:f6:8f:
65:8f:c9:85:40:d2:05:f0:ab:45:79:76:c8:d5:f9:91:db:52:
3f:9a:c4:fc:0f:00:71:c5:62:94:33:89:db:24:cb:b9:73:86:
2d:da:cc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:32:47 2025 by rpki-client