Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/96ff1c5a-df5c-46b1-b75f-78af844d2112.roa
File: 96ff1c5a-df5c-46b1-b75f-78af844d2112.roa (raw, json)
Hash identifier: s38PS/SDb4YzMAKhBUM/Hig8ucUErrWH9J54ZqWEB5k=
Subject key identifier: 1B:47:58:39:F4:D5:65:53:6A:3F:C6:0B:3E:D0:83:04:FD:78:C7:8B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1517F1E3C41741669A98C68248501925E554B0EF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/96ff1c5a-df5c-46b1-b75f-78af844d2112.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:17:f1:e3:c4:17:41:66:9a:98:c6:82:48:50:19:25:e5:54:b0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0e:71:a5:2e:34:7e:00:a7:e4:65:b9:87:f5:
f5:2b:a8:b3:09:74:f8:80:4d:d9:46:77:ad:25:95:
44:ca:66:79:f8:f1:8e:84:18:2b:e3:1b:d5:a9:e6:
e6:bb:ed:71:39:80:d8:9a:04:ec:ac:9a:c6:56:14:
ba:48:0f:aa:9f:52:44:5d:3c:27:80:2e:fc:66:b7:
0c:c6:60:eb:02:30:6e:0b:91:37:1f:1a:72:ff:d1:
e7:0e:a5:89:a9:3b:2f:7c:04:0e:1a:93:34:e0:db:
44:69:f7:7d:f9:24:76:dd:58:9d:dc:1e:81:53:d4:
38:78:30:25:64:36:43:30:58:39:d5:5c:0f:53:fd:
63:da:91:64:77:8c:1d:9e:a0:1b:0b:46:0a:91:8d:
fa:f2:a5:90:82:ec:4d:71:9f:ec:ed:f7:a1:7c:00:
fb:29:46:42:9a:5b:9e:44:f2:21:6d:b7:39:66:cd:
c4:15:f8:e2:00:8c:37:90:ba:a8:fa:e4:23:e6:83:
9b:6a:75:96:dd:95:80:7a:3c:87:75:65:59:2f:5c:
2f:f1:d3:72:f5:00:52:27:13:b2:79:b7:da:47:22:
0a:2d:d6:66:ca:51:0d:77:0b:05:d0:f2:47:54:55:
3b:05:f9:89:9a:ed:a5:ba:e3:52:1f:ce:22:ef:ea:
30:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:47:58:39:F4:D5:65:53:6A:3F:C6:0B:3E:D0:83:04:FD:78:C7:8B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/96ff1c5a-df5c-46b1-b75f-78af844d2112.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
02:e9:f0:c1:2c:29:40:b5:b0:58:73:8f:21:ce:6f:22:42:a7:
af:8a:94:4c:31:2a:a7:33:e1:53:ed:a3:fd:61:e7:c4:26:95:
f1:58:e4:f5:7c:91:0b:ad:41:90:de:17:23:fa:d6:c4:4b:6d:
8d:58:a7:cd:0c:84:4b:ef:08:1f:1c:94:31:40:29:e5:fa:09:
59:40:97:40:02:f6:89:62:54:5d:0c:fe:af:3d:7b:b0:4a:68:
4d:10:ce:0c:fc:aa:de:b3:25:e9:4a:ca:0c:e5:04:b7:80:47:
7c:03:a7:e1:b1:e1:8e:6b:1d:a9:cb:d2:a8:05:b4:1a:fc:3f:
a1:17:a7:22:2e:7a:a0:ae:73:79:a0:f4:b7:cb:52:15:dc:ec:
7b:36:bd:ab:19:a0:31:ae:2d:23:46:88:34:dc:8b:0c:e3:e2:
6a:11:11:46:89:a5:b0:91:f8:43:59:25:2a:92:be:78:3e:a3:
ec:00:09:39:a5:6d:5d:50:b7:57:a6:d5:b7:62:47:20:ca:43:
df:ce:e4:8b:92:db:a5:b1:cb:24:7f:fb:f6:c4:93:1a:91:6d:
97:e7:60:6e:86:9a:50:53:1e:2b:17:28:0c:b0:24:9a:bd:8d:
64:f6:23:d7:ed:23:83:ba:ce:33:1a:76:41:9c:37:d6:6b:6b:
7f:5e:a3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:16:06 2025 by rpki-client