Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/89352c68-20bb-4a15-9426-61abefdc0e08.roa
File: 89352c68-20bb-4a15-9426-61abefdc0e08.roa (raw, json)
Hash identifier: aTGrL2lgwOBm+Gv8+R0lBTYxxe27+6B2UpnfLsODVmM=
Subject key identifier: 10:6C:99:43:D0:32:4B:A3:09:E7:86:0D:45:0D:77:A7:2B:81:C8:46
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 04631A014385BA6EAC130EB319076C7A82044FBE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/89352c68-20bb-4a15-9426-61abefdc0e08.roa
Signing time: Thu 16 Nov 2023 00:00:00 +0000
ROA not before: Thu 16 Nov 2023 00:00:00 +0000
ROA not after: Thu 21 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:63:1a:01:43:85:ba:6e:ac:13:0e:b3:19:07:6c:7a:82:04:4f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 16 00:00:00 2023 GMT
Not After : Dec 21 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ca:60:69:1f:7f:4a:47:ff:b1:c7:ea:07:94:
b8:ac:a3:db:93:18:b5:6b:e4:34:24:66:3c:0e:c7:
6b:6c:20:ea:05:d1:b3:fa:56:71:11:9e:e4:a1:aa:
0e:d5:4c:85:9e:f2:d2:c1:0c:d9:cf:48:1f:76:87:
52:52:a5:2f:6c:f3:6d:db:39:f0:33:f5:1f:7d:d7:
b9:01:19:1f:77:1d:6f:cd:46:19:7f:c3:9b:c7:7c:
bc:f8:75:e6:74:9a:07:cc:7e:5c:84:51:e6:fa:8e:
f3:e5:d9:cb:87:ec:b2:0e:6b:9f:64:f5:c2:32:06:
69:bf:0b:6f:a2:a3:88:36:30:66:f3:0b:2e:ec:75:
e3:8b:cf:c7:99:53:ff:de:f8:3a:46:5c:af:00:04:
f9:32:6a:52:30:5f:12:e0:7b:55:e1:70:6e:8d:16:
b5:79:55:f1:f9:cc:ad:e9:3a:23:62:72:dd:98:92:
07:39:98:61:10:27:8d:4f:05:3c:f2:d5:83:ac:fd:
09:e6:23:03:86:1e:44:21:50:44:4f:06:c1:a6:38:
04:e6:7d:ad:ce:2a:02:8d:d6:f8:d4:49:31:b2:60:
df:d5:b7:2f:d1:83:35:25:63:82:09:8c:4b:35:97:
be:58:8b:67:84:12:fa:d1:3e:1a:1d:21:62:cb:30:
63:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6C:99:43:D0:32:4B:A3:09:E7:86:0D:45:0D:77:A7:2B:81:C8:46
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/89352c68-20bb-4a15-9426-61abefdc0e08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
62:70:d9:54:93:df:7f:58:03:b9:ae:b7:cc:9f:0a:59:fb:c5:
d7:36:71:2a:fd:f0:45:72:d8:c5:10:6f:05:ad:8f:dd:1e:be:
86:8d:1b:94:34:d1:54:c1:28:96:46:d7:ba:1a:e5:d9:57:76:
55:9a:03:71:29:d4:25:c5:6a:82:bb:13:85:93:31:8f:0e:7f:
3b:f4:c1:db:0d:55:bf:0f:f4:13:d0:3b:89:2b:48:6e:81:cb:
c2:ae:d3:55:19:a3:b1:a7:5a:06:92:74:51:56:6d:a6:f2:ca:
54:aa:e1:c9:e7:9a:23:41:f8:7e:96:ac:e6:2a:ef:c3:e5:88:
d2:49:66:d3:65:c5:e8:c0:8a:d1:8f:8d:f4:69:1d:b5:7b:f2:
c9:2b:7d:04:b0:0c:11:26:db:7b:fb:5d:87:c9:3a:5c:b2:69:
ee:31:dd:0b:9f:2a:a9:47:f9:b5:13:25:98:1f:38:84:f5:aa:
a8:38:80:77:e6:a3:c3:d6:22:3a:29:77:4d:e3:24:21:b4:9f:
f2:c5:7e:8f:e8:7f:86:20:6b:15:72:42:6a:8a:52:7d:2f:89:
d8:b6:83:40:2f:1e:4f:fd:2d:28:97:b6:fd:06:13:20:1b:30:
12:c0:86:4d:2e:81:0b:69:da:fe:4d:3c:d3:59:af:7f:e8:ce:
c5:41:62:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:09:54 2025 by rpki-client