Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/92d086f7-ac05-4a1b-abf0-f7f1cc7916c0.roa
File: 92d086f7-ac05-4a1b-abf0-f7f1cc7916c0.roa (raw, json)
Hash identifier: DXiZIbfWNFKFpJkSjAG/g+NNrMuCbmWby7NvhIysBdQ=
Subject key identifier: 67:46:87:6D:2D:DB:93:03:3D:D8:76:EB:64:9A:80:71:50:CA:2B:1E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2E8D6F6999F93F72A186222F2D6193BF7533119C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/92d086f7-ac05-4a1b-abf0-f7f1cc7916c0.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:8d:6f:69:99:f9:3f:72:a1:86:22:2f:2d:61:93:bf:75:33:11:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3b:fe:b0:c0:40:85:83:80:e2:aa:c5:9a:52:
a3:30:3c:d7:34:c4:f0:31:1d:b7:65:cb:69:57:be:
13:19:46:26:ba:7c:a4:85:b4:54:7b:02:9d:1a:eb:
19:5d:55:1f:67:d3:b6:29:1a:4d:89:5e:8c:b8:5c:
02:e9:5a:2b:f8:f1:9d:0e:1c:65:33:1c:f8:06:3a:
80:a0:3d:5b:2c:ff:f4:1d:7b:b1:47:48:e6:b5:8b:
f4:27:a0:79:9f:01:8c:1e:ee:76:e4:b3:5f:ce:b0:
31:49:6c:ef:ec:20:c1:a7:7c:c3:18:ff:ec:57:c3:
a9:3e:3b:5b:21:b1:41:e9:8b:1c:e9:ea:29:b8:b2:
50:5c:21:2c:f2:45:2b:e6:3d:2f:03:e5:cf:1d:d1:
d1:fd:6a:0b:5d:b7:77:6c:fb:94:ea:60:84:be:e5:
58:c2:21:67:e5:36:af:03:56:07:71:50:d9:0d:89:
ea:b2:98:fe:18:a9:3f:f4:a0:4b:81:fa:50:d5:87:
55:55:83:cf:c7:1f:13:55:df:e9:2c:6e:d9:da:da:
c4:df:0b:e7:4e:5f:7d:d3:9c:b8:5d:75:5b:df:7a:
1f:1a:3f:db:27:e5:89:69:53:8d:79:60:14:d0:45:
d5:71:cc:9f:bf:fa:87:d1:d0:ea:21:5b:19:27:50:
4d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:46:87:6D:2D:DB:93:03:3D:D8:76:EB:64:9A:80:71:50:CA:2B:1E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/92d086f7-ac05-4a1b-abf0-f7f1cc7916c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:80:24:a5:c8:a4:79:ac:04:03:ed:e6:4f:d9:e7:ec:21:3d:
5f:82:c7:dd:ea:56:6a:ff:ad:f9:f9:10:99:8f:9a:4a:2e:3d:
04:73:b1:b6:0a:ba:42:4e:2d:a5:05:7c:27:df:9d:4e:1f:f6:
97:ff:30:16:03:a5:d5:60:77:d2:9c:e4:cf:9b:a7:b8:40:f5:
00:fc:a8:07:61:5a:11:40:e9:e8:2f:e7:20:db:15:c0:89:9f:
d2:93:58:37:31:7d:0e:14:cc:7b:07:b3:76:cb:83:c0:29:ba:
c5:3d:18:58:9d:bc:60:eb:10:b3:f1:23:18:24:64:79:27:b4:
49:42:2e:b1:cb:17:1f:43:c4:a7:7b:10:85:0b:e3:49:69:b4:
a3:df:a5:df:71:b9:2d:69:bb:c2:1a:71:85:be:af:41:81:9f:
94:48:d1:e2:ec:08:8a:40:89:b7:91:58:5b:96:7a:46:7f:9c:
03:ca:18:44:f7:a3:a4:94:01:fb:45:dd:bb:d4:22:2c:ad:0c:
e4:7d:cc:46:26:63:98:29:ed:38:72:19:12:62:41:9e:98:a8:
f3:81:d8:dd:53:c8:99:9e:7e:c4:9a:df:98:56:b7:95:d8:71:
a5:dd:49:41:57:a6:9b:ad:46:e8:21:84:f8:73:b9:2a:89:a1:
b2:e1:3c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:36:01 2025 by rpki-client