Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/89113742-9311-41e0-8f27-f126e7b86ed1.roa
File: 89113742-9311-41e0-8f27-f126e7b86ed1.roa (raw, json)
Hash identifier: NLPL7JTyCx+Oue7m9oJWnPcog483yyoRXYC10vzgUHA=
Subject key identifier: 9A:3B:D3:2C:87:28:5C:4F:AD:A1:E2:89:D1:76:5A:49:1B:D8:85:07
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 49E3635C0DFDC4CA93FB8BA2B5F365740A593E08
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/89113742-9311-41e0-8f27-f126e7b86ed1.roa
Signing time: Sun 16 Feb 2025 08:38:21 +0000
ROA not before: Sun 16 Feb 2025 08:38:21 +0000
ROA not after: Sun 23 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:e3:63:5c:0d:fd:c4:ca:93:fb:8b:a2:b5:f3:65:74:0a:59:3e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 16 08:38:21 2025 GMT
Not After : Mar 23 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:49:4d:28:87:9d:67:46:fa:cc:7b:d9:ed:
10:d8:ca:8b:55:c2:be:a4:3e:fe:2a:ec:ee:4d:93:
a5:ed:b1:58:fc:59:00:00:b9:2e:0a:c5:6a:72:62:
13:9d:bb:84:f7:9d:cf:0a:8e:a0:3d:a1:a8:07:88:
7e:af:e9:ee:d3:51:3c:3c:0b:ac:93:53:2d:8f:5c:
a2:d3:cf:e2:33:17:6c:60:f5:95:0f:7e:55:ea:e2:
24:54:5a:8d:50:4a:3a:56:44:4d:ec:dc:db:d7:18:
a0:76:5b:40:1a:81:09:f6:e6:ed:03:cb:20:52:8c:
1c:d2:10:b6:d1:2a:4c:2a:23:66:a8:7b:b1:fb:b4:
49:b0:9a:b9:2b:f2:5a:04:00:aa:7b:53:77:6f:87:
9d:07:be:29:14:5d:77:ac:cb:e4:25:f2:ea:b6:64:
e7:1b:0a:80:ed:7f:c5:1b:fc:30:95:5b:4e:db:40:
9a:8a:c2:fd:e2:cb:32:b8:89:93:e3:8b:6c:b8:57:
82:60:f6:c2:93:fc:c1:fa:3e:72:4c:cb:ee:cc:f9:
bd:58:ca:92:61:9d:cb:d3:b7:4d:33:c7:91:5a:6d:
56:99:31:6e:74:aa:94:76:82:b3:b4:ab:9b:5c:b8:
b1:6f:47:e4:32:66:88:22:35:3d:95:2d:74:63:45:
cf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3B:D3:2C:87:28:5C:4F:AD:A1:E2:89:D1:76:5A:49:1B:D8:85:07
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/89113742-9311-41e0-8f27-f126e7b86ed1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:39:bc:5e:2f:b5:48:a4:ad:64:45:1b:40:fe:64:72:1a:0a:
45:cd:84:ea:76:8c:38:01:fb:f5:bc:5d:ec:7c:3f:33:94:c4:
ba:56:27:69:a8:78:53:01:f6:ff:18:52:0f:89:4b:58:e8:4e:
1e:64:b7:d8:e8:91:35:7c:10:9b:7c:53:12:11:57:d7:03:9e:
2a:6b:a4:9e:98:10:b7:9d:f5:af:11:8a:73:fb:14:b0:83:08:
86:49:9e:75:47:6d:aa:45:18:f2:32:86:ec:86:40:48:ee:1b:
b2:70:be:2f:81:44:20:6f:1d:cd:87:2b:65:3b:6d:98:b9:e5:
5d:81:f6:4f:d2:bc:2f:a2:a6:fa:b8:69:16:20:ab:0b:24:c6:
1d:c3:ed:de:9e:6e:38:0b:3b:98:53:81:b9:ba:10:bc:24:a9:
7f:5a:5c:43:27:e2:66:10:c5:20:d4:4a:9e:ba:ed:6b:84:2f:
ed:b9:81:8d:3c:b6:54:d0:4f:2f:01:cc:d7:17:38:1c:47:3f:
cf:29:4d:51:14:55:a0:81:0b:01:05:10:21:2b:dc:9e:f9:ca:
ad:93:3c:5a:fb:ff:55:82:e4:f8:a3:a3:f4:38:c2:54:fe:0f:
30:7b:35:64:cf:0d:be:56:2c:74:86:e6:f6:6d:53:9c:93:57:
8f:d3:e1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:13:26 2025 by rpki-client