Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8aa9e5e2-a933-4503-918b-7abbe1dd7e42.roa
File: 8aa9e5e2-a933-4503-918b-7abbe1dd7e42.roa (raw, json)
Hash identifier: HJMwYJ1MxKe9GekFgP3r03dv/yOMClTgQfl36mjk0ec=
Subject key identifier: 08:79:C5:14:9E:AE:ED:50:94:4D:BE:5D:EF:A6:1A:37:E5:B4:6E:7C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3CD703CFB75719FAF165E4CBB223AAC16B037C3C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8aa9e5e2-a933-4503-918b-7abbe1dd7e42.roa
Signing time: Wed 19 Mar 2025 07:53:16 +0000
ROA not before: Wed 19 Mar 2025 07:53:16 +0000
ROA not after: Wed 23 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:d7:03:cf:b7:57:19:fa:f1:65:e4:cb:b2:23:aa:c1:6b:03:7c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 19 07:53:16 2025 GMT
Not After : Apr 23 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:46:59:34:e3:f1:07:a1:08:98:24:d4:6f:32:
83:18:2c:10:09:04:6c:52:4d:98:e0:0a:19:2f:93:
bf:ef:7c:93:24:6f:be:a9:4d:ae:9c:18:28:41:94:
74:fb:f6:e1:75:1c:68:8d:ce:85:73:04:23:b5:94:
75:df:94:06:88:d5:f5:0b:fd:6b:d9:ed:e0:f2:ac:
61:3c:4a:5f:44:f0:67:da:d9:0a:eb:4d:e2:8e:5e:
1a:1e:06:d9:be:1b:42:17:2f:08:79:e5:86:dd:ee:
4e:b6:07:93:0c:6a:da:57:4d:b8:41:d3:24:52:95:
68:8b:0b:f1:b9:ea:a5:af:f1:f9:21:a7:65:fc:8e:
8b:c0:8a:09:43:b1:35:60:19:1f:7b:63:de:4e:3c:
19:10:ec:1a:bf:b0:c0:55:c0:42:98:56:fe:a0:a7:
99:56:2e:d0:94:ac:45:31:e9:f1:77:4c:1a:28:27:
3c:22:de:b8:59:fd:f1:6d:dd:4c:da:d5:31:44:e7:
b4:d6:9f:84:88:1d:7b:8b:6e:11:5e:89:94:c0:b7:
4b:31:69:47:97:5e:0c:7e:c1:77:a0:25:05:4f:8f:
90:53:4b:64:a8:af:4a:b9:87:d4:d3:52:69:31:71:
95:24:04:b1:5d:d5:95:ef:77:fc:a2:32:6f:13:6c:
58:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:79:C5:14:9E:AE:ED:50:94:4D:BE:5D:EF:A6:1A:37:E5:B4:6E:7C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8aa9e5e2-a933-4503-918b-7abbe1dd7e42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:f1:93:43:84:20:20:2f:c3:7e:33:e5:65:8a:65:40:ff:97:
97:dc:81:ea:56:45:13:01:47:e6:a9:5c:93:22:fb:cc:e4:ee:
72:74:72:d9:4a:54:5c:b9:5f:6e:8a:71:33:1d:a2:4a:e1:ca:
70:b1:bf:2d:82:c2:20:65:7e:3b:a3:2d:d1:88:31:e5:d6:1e:
04:fe:e8:56:37:9e:ca:eb:5f:5a:3b:b5:17:4b:12:f5:c2:23:
88:5d:29:7b:1d:2a:43:5d:72:8c:33:70:61:87:20:aa:73:49:
0d:bf:d8:1f:96:5b:cd:3d:d0:95:87:cc:71:cf:2a:cc:32:ea:
ba:b6:58:6b:89:7d:1d:68:26:01:0f:9d:70:af:84:e7:86:2d:
2b:72:9b:f2:8f:a6:4e:aa:61:dd:af:a6:71:86:ed:83:a9:e0:
e2:1d:32:ae:1d:a9:ea:49:de:81:f4:67:5e:0d:e9:ae:bb:e7:
29:e9:98:c6:12:a3:f3:0e:42:ee:73:4c:57:96:73:44:72:60:
76:37:9d:fa:44:dd:69:07:1a:d8:ea:04:25:ef:9f:00:e5:58:
4d:6c:84:81:2a:fc:e8:d2:4c:fd:e2:87:8d:ad:8e:e5:b3:19:
b4:a7:9d:d7:d2:80:dc:34:f4:e0:e6:3b:e2:e7:a6:c3:46:ba:
de:f9:1f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:49:30 2025 by rpki-client