Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/88b230e9-9464-4972-93e4-fa474af1c897.roa
File: 88b230e9-9464-4972-93e4-fa474af1c897.roa (raw, json)
Hash identifier: iM80W95/hITe0TTBbi38Vgvrs6kIIwf6TOj4vQOakGE=
Subject key identifier: 0F:93:83:88:60:A1:9E:75:61:69:A2:7F:76:0F:8B:A0:8F:C0:32:8E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 173726E523A40B1AF14E9DA8D063BBB6D41C2934
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/88b230e9-9464-4972-93e4-fa474af1c897.roa
Signing time: Fri 04 Aug 2023 00:00:00 +0000
ROA not before: Fri 04 Aug 2023 00:00:00 +0000
ROA not after: Fri 08 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:37:26:e5:23:a4:0b:1a:f1:4e:9d:a8:d0:63:bb:b6:d4:1c:29:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 4 00:00:00 2023 GMT
Not After : Sep 8 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d6:e0:d1:f6:a8:a6:38:d5:e8:80:59:98:31:
fb:6d:23:79:7c:9e:ad:62:72:86:a4:44:dc:99:c5:
62:5a:1c:ae:e6:68:5d:8c:14:f5:2b:ae:b7:87:52:
f6:9c:06:25:fc:40:57:8c:ce:3d:b3:01:a6:b8:50:
37:19:27:8e:45:9b:b7:db:21:29:46:10:d9:7b:69:
d1:8c:80:d4:30:ce:66:e0:f5:ff:d3:e2:67:38:3b:
d9:96:05:53:c4:a3:c5:29:5f:58:c3:bc:58:e3:2f:
81:34:eb:98:ef:2e:a5:db:80:5b:e1:0d:08:c3:e4:
f0:1a:fd:e8:7a:64:50:d8:98:a0:98:70:e5:e3:b6:
c6:08:12:7b:5e:91:ff:57:94:29:33:fc:77:9c:e3:
b0:16:92:9d:44:57:17:25:29:92:b6:a1:26:b7:fb:
0c:3d:51:fc:32:69:68:7b:d7:23:54:89:39:41:71:
68:71:46:47:06:81:62:18:5d:9a:9f:4a:53:06:b0:
f4:ac:32:a1:a0:9e:70:97:06:73:53:c7:15:33:4b:
c6:14:1c:1f:38:74:08:6d:4e:b0:33:b4:a6:e1:8b:
75:04:15:4d:2a:5a:ad:62:f0:16:cf:9d:0c:8b:54:
86:bb:02:37:6e:06:b1:24:12:67:89:8e:79:24:0e:
bf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:93:83:88:60:A1:9E:75:61:69:A2:7F:76:0F:8B:A0:8F:C0:32:8E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/88b230e9-9464-4972-93e4-fa474af1c897.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
67:38:fb:c1:67:b3:74:b0:09:b8:23:e1:3c:ac:e3:e6:e2:94:
a1:ff:e7:12:2a:73:04:cc:fd:3c:0d:fb:bf:f6:49:12:1c:da:
91:bd:6a:aa:d9:a8:df:73:3b:45:6c:c2:56:b7:58:88:ed:06:
31:27:58:9f:f6:6a:7d:9b:e8:67:f7:ca:22:ae:88:00:f1:29:
5c:42:09:45:90:ed:c8:6f:6a:b9:f9:d5:5d:1c:a9:77:cd:1f:
d5:0e:f9:86:cf:7d:69:71:a0:73:34:d4:8e:fc:e9:f1:d5:89:
ab:26:18:9c:7f:7a:2c:60:d6:78:01:7e:0e:d4:cf:92:99:e6:
b6:fa:09:6a:48:b1:a8:ff:bb:30:6b:b6:65:e7:ba:db:72:ad:
4a:2c:62:55:ad:b9:b4:ef:a3:42:fa:c5:9d:a4:3a:6b:4d:13:
15:0a:6d:0d:b5:2e:8f:34:4d:33:f4:5d:be:9e:b7:58:9e:5d:
ed:9c:6f:d1:21:46:9f:b5:8b:51:d2:ce:5a:3c:9c:a1:0e:26:
21:98:b0:63:43:f2:d1:01:18:62:f8:49:f9:3c:6e:05:64:37:
4e:25:f1:e3:94:73:01:8f:22:c0:62:02:ae:75:42:df:9c:80:
0a:d1:d0:cc:13:f5:37:bf:d9:f1:27:4c:85:9e:21:85:40:59:
b1:61:17:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:53:00 2025 by rpki-client