Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8ff13c6a-aca0-4ca5-9059-e8335415f42a.roa
File: 8ff13c6a-aca0-4ca5-9059-e8335415f42a.roa (raw, json)
Hash identifier: LpuAFWUz0gVgNpHGkxLutedstzT/rk71ceB01dknegM=
Subject key identifier: ED:32:D8:B3:04:93:F5:DD:43:DE:3E:A8:14:F6:FF:1C:45:8D:57:33
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 34B0C67C22DF38F5FAEBD6BFF74E118E527F9D22
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8ff13c6a-aca0-4ca5-9059-e8335415f42a.roa
Signing time: Wed 17 Apr 2024 00:00:00 +0000
ROA not before: Wed 17 Apr 2024 00:00:00 +0000
ROA not after: Wed 22 May 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:b0:c6:7c:22:df:38:f5:fa:eb:d6:bf:f7:4e:11:8e:52:7f:9d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 17 00:00:00 2024 GMT
Not After : May 22 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:e4:7b:a0:71:29:10:5f:5f:93:38:17:4e:
27:c6:c5:c7:86:17:f7:39:d4:ed:b1:90:2b:18:8d:
21:53:99:97:4a:f8:0b:97:dc:56:44:05:59:f7:a7:
25:c9:a5:f0:3b:0f:86:93:13:40:1b:d9:cc:8b:5f:
8b:d0:ec:b1:10:e8:54:ce:42:ca:ca:26:14:d5:a6:
0e:a8:08:e9:f5:a7:34:0b:0b:c4:07:a7:2a:27:70:
43:20:11:ec:40:c8:77:13:29:40:5a:75:bb:b4:60:
96:b8:36:f3:81:bd:6e:2b:de:99:5c:7f:85:5b:62:
59:87:e1:fd:6b:e9:52:20:e0:11:e0:a7:4d:6f:0b:
29:fd:6b:63:83:01:29:a0:c7:9f:bb:c2:b6:05:6d:
3a:65:d4:35:4b:75:7a:4e:36:5d:7d:52:df:f9:60:
ad:51:3c:33:5b:3a:84:0e:9a:68:4d:25:3a:54:89:
4c:a5:a8:bb:68:2b:31:8f:61:42:33:60:92:13:29:
0a:1e:61:f0:1a:88:69:03:f6:7a:77:05:cf:8e:c1:
e8:71:79:a0:69:ac:d1:e6:e1:96:93:f0:55:8e:35:
75:c1:27:f1:d2:87:c5:2c:c0:94:24:72:65:24:50:
d5:6c:fe:63:cf:e3:7f:ca:f8:c1:5c:e8:1f:4f:eb:
07:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:32:D8:B3:04:93:F5:DD:43:DE:3E:A8:14:F6:FF:1C:45:8D:57:33
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8ff13c6a-aca0-4ca5-9059-e8335415f42a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
98:9f:ef:09:c0:73:66:85:c9:a1:a8:74:c4:90:2f:c5:be:7e:
50:58:51:a8:9c:be:6f:af:02:e7:af:44:59:5d:d4:30:33:1b:
0c:9e:1f:51:cc:ad:b1:ef:3f:54:2e:fb:69:07:49:bf:33:ed:
3c:fc:09:ef:6a:61:cc:90:24:b2:6c:a9:dc:f9:fa:80:65:34:
47:a8:49:52:6c:03:0d:8e:7d:d5:d6:e8:1e:0e:80:7a:11:e8:
a5:26:50:e9:45:a0:50:31:60:bb:91:f5:5e:50:f6:9f:de:df:
d0:a4:46:03:03:7a:a3:55:bf:3f:2f:06:45:99:f9:54:cb:47:
86:76:a1:02:01:8c:8d:77:e6:a9:f1:d2:3c:13:13:24:e1:67:
96:6b:cf:f4:20:3d:6a:33:c0:c8:76:0c:9a:fd:8b:ff:96:05:
7e:5f:4f:7c:2a:11:85:03:bd:d6:bd:a8:76:99:bf:bf:f5:4e:
72:0c:f5:6e:60:4e:18:61:9f:f9:c4:fe:7b:50:5e:2e:42:25:
15:19:d9:60:41:e9:c0:3e:3d:d1:e8:0d:0b:de:44:70:6f:29:
4b:ce:56:e0:7d:ba:e6:30:5f:2b:dc:e9:73:3e:76:da:d4:f7:
e4:86:ed:b2:d9:2f:4a:5f:8d:5d:b3:13:7f:a7:99:61:a9:a1:
34:b7:a4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:09 2025 by rpki-client