Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/99481bcf-cbfa-4453-8469-beac101ccc1d.roa
File: 99481bcf-cbfa-4453-8469-beac101ccc1d.roa (raw, json)
Hash identifier: 89KgHAMODP2WRPFisNXzpeNe0FHPOj+heVTxJcE8qQs=
Subject key identifier: C1:2E:94:9C:71:D7:A4:45:6B:65:96:5B:47:6C:90:BC:5D:2E:99:70
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2DB1D889D0A6509BC073A8D28C0DC9259F617ECB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/99481bcf-cbfa-4453-8469-beac101ccc1d.roa
Signing time: Sat 01 Jul 2023 00:00:00 +0000
ROA not before: Sat 01 Jul 2023 00:00:00 +0000
ROA not after: Sat 05 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:b1:d8:89:d0:a6:50:9b:c0:73:a8:d2:8c:0d:c9:25:9f:61:7e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 1 00:00:00 2023 GMT
Not After : Aug 5 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:06:da:5a:55:eb:02:94:e9:e5:2b:4b:4d:c9:
fd:39:da:b0:b2:48:6d:d6:c5:98:06:00:4f:21:46:
e7:78:49:60:ff:21:f4:ca:11:81:dd:ba:d3:0d:9a:
d9:0c:20:00:2b:c3:8a:be:7f:2b:ec:9f:91:7d:8e:
fc:07:97:14:ac:a4:fe:d3:5e:03:cc:a7:6e:f1:0d:
94:67:f9:ed:b3:43:b5:da:35:03:8e:dd:41:18:54:
9a:b9:fa:e5:7f:9e:cc:d9:f6:48:f3:57:01:cf:11:
c5:37:2f:6e:ef:12:83:3e:da:2e:e5:18:72:f9:dc:
26:ef:b4:54:ff:9a:e5:b3:89:88:1f:e7:15:15:cf:
e3:1a:80:8b:c2:76:ad:ea:5a:c5:dd:fe:65:de:d7:
df:ee:67:9d:a6:b9:6f:89:5c:ba:8c:b0:94:3c:64:
45:9a:c3:a5:e8:cc:45:38:de:4b:e2:58:ba:08:ab:
c5:0e:17:fe:d2:ef:43:e4:7d:a6:1c:5b:c9:39:59:
1a:fe:3a:9c:f5:bd:ad:c4:7b:a2:80:97:6d:04:10:
0d:e3:5a:42:17:80:23:61:79:53:5c:8c:d3:f0:e4:
e0:58:06:21:bf:34:53:97:88:c9:b1:de:d3:a5:24:
28:a8:85:f8:33:89:4c:f7:61:31:a0:47:0a:1d:72:
13:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2E:94:9C:71:D7:A4:45:6B:65:96:5B:47:6C:90:BC:5D:2E:99:70
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/99481bcf-cbfa-4453-8469-beac101ccc1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
87:74:d0:2d:50:20:8f:ff:2e:cf:25:8b:8f:f8:ee:a0:af:ea:
bb:5f:72:78:6f:c0:b9:7a:b1:12:fd:66:27:17:e7:da:5e:7a:
96:10:33:5f:5e:41:fe:c5:6d:51:3e:7b:67:7a:5f:7c:a9:ba:
32:6d:c1:f1:67:94:32:e1:cc:e0:6b:1f:23:5a:3d:12:63:96:
15:11:18:39:27:a3:ca:9e:1e:ea:9b:38:3a:9d:e1:48:96:84:
6d:a3:d2:4d:dd:26:f6:e8:3d:40:9c:3d:28:82:b8:15:63:d8:
43:bd:74:41:c1:db:10:50:74:4c:46:f8:84:e9:f4:a0:7a:cb:
4b:bb:72:a1:e6:af:87:9c:69:8d:10:19:8f:b5:73:1a:72:ea:
ad:fd:a7:e8:b9:a1:6e:20:26:81:f4:1e:2f:16:3e:8f:a4:19:
88:52:a0:1f:b0:4d:07:5e:15:67:b5:a8:43:a8:0d:49:9f:a7:
bc:36:b7:c4:67:d3:a2:a2:30:27:c8:d1:41:74:e3:dd:61:96:
d8:82:40:19:93:4b:00:32:80:83:aa:ee:83:1d:f9:9f:a9:be:
fd:20:23:f7:c6:12:f9:4e:e0:8d:97:45:fe:e0:5c:95:df:7d:
93:96:93:55:ca:25:a3:29:66:be:78:b7:98:eb:99:3c:65:72:
f4:c2:29:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:15:07 2025 by rpki-client