Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/98f015dd-f80f-403c-9799-f13baaf03de9.roa
File: 98f015dd-f80f-403c-9799-f13baaf03de9.roa (raw, json)
Hash identifier: JhvGsK1Kb++pvwWJHXo2LEfbfl4WamunYIL9ZW5QII8=
Subject key identifier: B3:E4:96:E9:BE:4B:B0:1A:B1:08:D5:37:8D:0F:9E:0F:E7:C6:C6:CD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 486C801C937C129CB09C48AD2B694418B8F5F5FC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/98f015dd-f80f-403c-9799-f13baaf03de9.roa
Signing time: Sat 05 Oct 2024 00:00:00 +0000
ROA not before: Sat 05 Oct 2024 00:00:00 +0000
ROA not after: Sat 09 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:6c:80:1c:93:7c:12:9c:b0:9c:48:ad:2b:69:44:18:b8:f5:f5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 5 00:00:00 2024 GMT
Not After : Nov 9 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:58:2b:50:c1:e3:83:f6:e4:23:de:97:76:
7d:4b:2f:53:43:eb:ac:a4:82:aa:dd:d7:e4:77:68:
bf:49:57:e9:a3:e3:e3:04:1d:e0:a2:3f:a6:25:fa:
8c:42:6f:1c:d0:66:68:16:84:21:d6:0a:77:e1:9b:
b7:f7:9d:6a:50:68:b0:43:ec:da:be:5b:fc:be:f7:
c7:9b:38:17:5e:56:00:fd:09:e6:83:69:86:ca:fc:
cd:d5:b3:27:45:16:e7:7e:83:24:73:d0:b0:2d:85:
ce:25:2c:59:68:f2:d1:81:e1:f7:f2:e0:57:c8:08:
fd:33:85:78:da:e2:93:ac:30:e4:71:ac:2b:db:01:
ef:a2:e0:7d:be:9a:2a:ee:69:75:c3:9a:c7:3b:fe:
76:db:b6:50:1e:c8:5b:3d:a7:c7:11:78:da:7a:99:
b4:d8:86:4c:df:df:e1:63:22:ad:af:92:dd:a6:42:
fc:b7:f8:fe:47:9c:23:15:82:f9:71:16:65:f4:d7:
a2:13:39:fc:33:2a:9e:cd:ca:a2:dd:36:dd:34:4d:
bb:d7:3a:c2:6a:76:83:ae:a2:f2:07:50:e2:25:22:
ec:6f:a8:ed:5c:60:6f:bd:b8:b3:d7:3c:4d:a5:f3:
fd:fe:ad:06:b1:69:91:f7:c0:35:23:d7:6d:90:83:
bf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E4:96:E9:BE:4B:B0:1A:B1:08:D5:37:8D:0F:9E:0F:E7:C6:C6:CD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/98f015dd-f80f-403c-9799-f13baaf03de9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:db:85:42:4d:b2:8b:32:af:7d:39:06:94:f2:f1:2a:fe:fd:
35:f8:11:03:4c:dd:83:46:c8:ea:63:53:be:12:b2:b9:3a:99:
9a:ba:bd:97:ad:1b:e3:eb:62:d3:d5:3c:44:7c:15:99:63:ef:
9c:51:c8:23:c8:26:d4:69:38:6c:cf:5d:41:d5:5f:d7:1d:1a:
58:ab:64:69:48:c1:5c:e2:a6:c4:3a:a6:76:47:67:67:14:03:
59:d3:1d:6c:db:7c:f2:a7:86:8b:ec:92:43:11:4d:bf:f0:ca:
87:a0:eb:69:ed:04:e3:cd:16:56:19:01:e4:af:d2:8e:9c:af:
1a:8c:18:08:59:1a:2b:7c:2a:5a:2c:ee:9f:1f:23:c6:80:80:
ab:1b:24:c2:2e:dc:2b:4d:33:c5:ba:c5:7c:e2:49:52:74:62:
b3:2f:bc:42:40:8c:d6:da:71:c0:af:df:c7:07:91:40:c3:de:
f4:f3:4d:85:fd:88:8f:64:d8:17:80:75:64:1c:ca:3b:c4:65:
19:c8:5a:62:f6:fe:db:93:45:19:48:50:b9:9a:65:2f:88:ea:
b7:05:96:38:d2:f0:f7:69:e6:f8:68:d0:b9:30:4e:7d:5a:11:
39:70:94:81:a3:41:f6:12:c3:85:86:80:58:24:7b:24:a3:d8:
81:58:cd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:39 2025 by rpki-client