Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/87d516a0-6867-43db-8a67-958679a92728.roa
File: 87d516a0-6867-43db-8a67-958679a92728.roa (raw, json)
Hash identifier: khmHjYe8YI56Un0ion6XZrEPhU4ZdCuNAWn3SajODyc=
Subject key identifier: 46:99:C4:1F:60:63:B8:DA:43:25:51:84:AE:EB:B6:73:0D:9F:E9:20
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 45A8D7EBC6D15F468F16380C5168103B4C305554
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/87d516a0-6867-43db-8a67-958679a92728.roa
Signing time: Mon 17 Feb 2025 16:23:22 +0000
ROA not before: Mon 17 Feb 2025 16:23:22 +0000
ROA not after: Mon 24 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:a8:d7:eb:c6:d1:5f:46:8f:16:38:0c:51:68:10:3b:4c:30:55:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 17 16:23:22 2025 GMT
Not After : Mar 24 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:36:87:2c:d6:45:3d:dc:85:7d:72:43:a7:
dc:5a:db:bd:7a:d2:db:7b:67:a0:9a:b2:44:ca:11:
ec:2d:72:17:52:93:29:cd:1e:fb:ce:bd:ad:d7:00:
98:db:00:b7:d3:2f:46:37:fc:ac:66:62:58:1f:02:
a5:90:0a:af:30:2a:73:aa:98:5f:03:a9:08:8c:ad:
7c:6c:b7:7f:a9:26:c0:74:21:18:22:a3:f5:91:46:
24:13:c1:cc:4b:68:a1:47:f8:3e:1a:9c:e9:20:6a:
2c:93:4f:6b:85:89:06:38:88:41:ac:af:f4:d4:b6:
a5:00:94:7e:bf:66:8d:83:e1:1f:2b:25:e1:30:a2:
60:9c:e1:e5:1a:05:50:2f:a8:bb:c2:78:59:18:e9:
ef:a5:70:1e:b6:3c:38:b0:fd:76:ea:46:4f:ae:ff:
6e:46:e4:14:6e:c6:74:9c:ca:79:c7:e8:7e:d1:a8:
c8:81:00:97:43:ed:a5:2d:aa:d0:06:78:2d:41:fa:
b1:66:d6:a3:12:86:f0:3a:fc:4b:26:03:be:d1:29:
93:4e:af:36:5d:73:a1:5d:2e:55:eb:07:49:f7:f6:
ae:6b:ce:64:f9:08:0a:01:76:08:49:b8:39:09:19:
04:3c:03:0d:7f:b6:64:65:00:c8:1a:83:5e:47:e8:
1f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:99:C4:1F:60:63:B8:DA:43:25:51:84:AE:EB:B6:73:0D:9F:E9:20
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/87d516a0-6867-43db-8a67-958679a92728.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a1:79:52:ce:dc:88:21:3f:10:e5:8f:fd:08:91:b6:1a:8c:
cb:5e:5f:0b:d2:c4:15:7e:33:4d:da:70:13:cd:55:5a:01:80:
32:43:cd:3c:0a:e2:7c:48:ce:40:2e:71:5c:9e:16:7a:f6:5e:
e2:09:f9:bb:fc:ba:69:00:c4:9c:23:5e:fd:0a:81:8a:7a:21:
f3:81:d7:44:8c:ac:8c:9c:fd:0c:a0:d4:17:d4:ba:12:c2:81:
2d:5f:f5:56:78:ed:d5:45:a2:9e:55:d6:45:f3:b7:7e:d1:ac:
f6:10:6a:e7:4c:3b:ac:a9:3e:26:c3:fe:7b:a4:14:cf:e2:42:
ac:4e:1c:8b:d5:b1:af:48:7a:4b:b5:a3:da:6a:46:b3:bd:3b:
29:12:42:8c:14:83:d5:0a:99:3b:46:9d:fe:24:cb:2a:8c:e0:
19:d1:f7:5f:7d:57:bb:46:ab:5b:b5:ab:9a:cd:f8:80:20:11:
b7:39:32:04:ef:51:c3:c0:aa:da:cf:56:9f:6d:9f:c1:59:27:
59:65:13:2a:46:42:9c:bd:69:2f:c3:80:ef:da:bb:ba:fd:64:
bb:96:d8:1a:3d:29:48:13:43:83:d9:67:c2:79:69:b7:cd:74:
c6:c7:c7:60:18:f4:af:56:14:8a:91:73:05:95:79:95:e7:25:
79:78:1e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:34:35 2025 by rpki-client