Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9440f62b-f078-449b-ab9d-8a2552c7c11b.roa
File: 9440f62b-f078-449b-ab9d-8a2552c7c11b.roa (raw, json)
Hash identifier: Lo2a9RmfzWbW8a/K/tUWlZEJ02Xb83Xy8D32b2evEN8=
Subject key identifier: 18:D8:95:67:47:FE:95:4F:07:5F:D3:A5:5E:25:BB:64:8A:E6:8F:D7
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2DDEBAA0BACC73BDEDE34AE6EFECEDC60C50F4DF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9440f62b-f078-449b-ab9d-8a2552c7c11b.roa
Signing time: Mon 27 Nov 2023 00:00:00 +0000
ROA not before: Mon 27 Nov 2023 00:00:00 +0000
ROA not after: Mon 01 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:de:ba:a0:ba:cc:73:bd:ed:e3:4a:e6:ef:ec:ed:c6:0c:50:f4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 27 00:00:00 2023 GMT
Not After : Jan 1 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:21:4b:94:9f:67:74:84:67:9a:78:92:21:
eb:4f:05:00:35:f8:77:a3:7d:c0:1b:e3:33:3b:22:
aa:3a:8a:df:44:87:0d:e3:1c:fb:17:e6:d1:db:5a:
b6:7e:43:a1:b6:08:c8:93:ed:42:e1:8c:8a:b9:47:
9c:a0:bf:0f:74:6b:4c:96:43:0b:3d:ec:34:92:47:
a3:d3:e8:25:6a:52:c9:78:79:4a:58:d2:fb:bf:c1:
03:93:07:85:24:e8:35:01:35:46:cc:ed:c0:54:8a:
4f:2e:96:9c:9d:e9:05:8d:68:7c:37:ca:26:6f:32:
c7:01:42:d6:b9:f5:d2:fd:6e:5c:8b:56:08:96:cc:
d8:5f:f6:75:1a:06:76:b2:13:f1:2f:b7:1b:8b:eb:
1e:ec:c9:4c:3f:5b:3f:0e:20:0a:b3:be:28:fc:a9:
bf:a1:c3:37:7f:a0:aa:71:b8:8c:32:a5:83:5f:4d:
72:1a:70:cb:b5:85:b9:b4:72:a8:33:56:d2:7c:d8:
7d:e8:aa:0e:ed:5b:f7:31:ae:51:fb:39:1c:4e:77:
66:9d:e1:02:20:71:3a:cb:63:ea:82:df:b9:ea:fe:
09:16:93:8b:9c:90:d5:98:20:bb:6a:7d:ec:99:b7:
fc:f3:61:89:3e:51:05:6b:54:c6:d4:55:55:e4:35:
36:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D8:95:67:47:FE:95:4F:07:5F:D3:A5:5E:25:BB:64:8A:E6:8F:D7
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9440f62b-f078-449b-ab9d-8a2552c7c11b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d7:2b:c1:12:ac:e9:b3:8b:8d:fd:4a:62:b7:d2:42:20:6a:
1a:6a:2e:e1:e8:6f:20:eb:c1:dd:d0:40:03:47:22:00:83:57:
58:62:d8:00:9a:f6:ee:fc:76:5c:17:10:3b:9c:59:75:8c:6c:
a2:cf:f1:56:c0:7a:08:29:60:fe:8e:e8:58:38:a2:de:1e:21:
cc:69:ab:26:52:e2:fe:48:f8:b9:47:8d:08:20:39:3f:8a:a6:
3a:b3:fa:79:d2:54:d0:aa:8a:8e:b0:d9:a4:5b:89:65:18:63:
e6:83:d1:01:95:7a:d2:c1:24:6a:0f:0b:69:ab:9b:25:81:a5:
ae:4e:a6:7b:36:d5:70:e3:be:61:7f:62:a4:37:84:fd:81:92:
50:80:2f:0e:1f:16:cf:d2:7a:3e:e6:61:d1:e7:83:fd:01:c3:
10:47:e7:6c:71:f0:fb:49:18:f2:d6:31:6a:34:b7:ad:33:7b:
a8:08:dd:fb:a3:3f:73:59:de:4b:88:37:1f:5c:2c:e5:3a:ad:
4d:a2:9f:32:1a:e1:ce:07:ca:f6:a2:3b:6f:ba:f1:75:d7:a5:
b7:58:ea:e9:99:84:79:8d:59:e5:f4:23:a5:05:06:63:c0:82:
79:ad:fd:64:6c:22:21:d9:3d:f1:a5:4f:66:77:e7:82:4d:51:
a5:b3:45:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:48:53 2025 by rpki-client