Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/99d10743-1495-4599-91fd-84e8cc765112.roa
File: 99d10743-1495-4599-91fd-84e8cc765112.roa (raw, json)
Hash identifier: 9ILj3UXDbX1rLOcNLKZadGfWq/MkgRWc0XTqfYtd0aw=
Subject key identifier: 8C:2A:AE:DC:29:00:4B:DF:67:E0:93:17:1C:C2:52:5B:70:62:74:15
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 08E640BD1564AA535EC8C4A421800D6E0C434C79
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/99d10743-1495-4599-91fd-84e8cc765112.roa
Signing time: Fri 07 Jun 2024 00:00:00 +0000
ROA not before: Fri 07 Jun 2024 00:00:00 +0000
ROA not after: Fri 12 Jul 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:e6:40:bd:15:64:aa:53:5e:c8:c4:a4:21:80:0d:6e:0c:43:4c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 7 00:00:00 2024 GMT
Not After : Jul 12 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8d:0a:c6:a4:50:fa:d6:3a:b7:3b:ec:cd:ee:
99:4c:4b:7f:f5:02:09:0d:20:3b:00:70:fa:c1:e8:
8f:6f:47:69:91:83:d4:84:0f:e4:92:d0:7b:77:fb:
73:58:ad:9b:70:38:6f:ad:0a:6a:91:92:64:5d:91:
38:93:9c:20:2c:fd:51:ca:7f:65:33:0d:38:da:fa:
52:35:12:1b:12:ff:c7:fb:fd:8b:73:d2:ac:ec:99:
56:07:85:f5:bc:68:a4:21:57:97:1b:0a:83:db:32:
73:63:1e:38:70:77:9f:ab:c9:7b:7e:6e:d3:5d:ea:
35:74:b6:92:78:1f:e3:74:b2:f5:45:66:af:fc:7c:
53:2d:fe:0f:c2:a2:fc:bd:c2:5d:06:20:b2:7a:53:
fc:fb:8d:87:44:0f:7e:12:98:93:62:76:77:c6:fa:
d0:14:b8:fa:96:12:16:5a:4d:df:77:f6:3b:32:f0:
56:42:59:f8:c3:4c:0e:3d:9e:a3:4f:66:4d:4a:a3:
ae:8f:8b:fb:6c:36:0d:15:50:80:4a:02:b4:d3:e5:
3e:d4:27:0d:39:cd:30:35:5a:59:89:df:04:0f:fc:
d1:3c:8c:5d:85:99:b3:bc:02:86:50:b6:da:ef:98:
fa:20:82:c1:f4:e9:e2:da:30:21:6c:b1:3f:87:72:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2A:AE:DC:29:00:4B:DF:67:E0:93:17:1C:C2:52:5B:70:62:74:15
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/99d10743-1495-4599-91fd-84e8cc765112.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:04:72:a6:ac:be:e9:2c:2c:95:a0:de:ff:ee:bc:a2:64:4e:
fb:81:e0:21:88:2d:ad:3c:26:8b:38:a6:6c:78:e5:fd:5e:d8:
69:06:ee:e4:ab:21:d8:8f:b4:0e:91:22:47:e0:1e:aa:db:a0:
7e:8e:39:91:ea:45:f5:4b:9f:1f:21:67:bb:62:51:a7:ba:4b:
a2:16:91:c3:d9:58:e1:1b:e1:1c:76:3f:94:fc:50:b3:0b:f5:
81:c3:ac:51:28:f1:e6:a7:95:59:2b:20:e6:de:79:f7:55:58:
c0:cb:3d:76:32:53:e8:87:33:0b:47:cc:40:40:b8:11:a1:a4:
8d:f4:78:08:48:ea:b6:c8:a9:09:2a:f5:cb:85:fa:c4:1d:16:
94:6d:f7:55:2b:02:df:98:03:cf:1a:a1:64:61:91:93:4c:e9:
f1:0d:dc:37:ec:80:8b:26:3b:f7:0f:f4:0f:42:b6:c1:df:b6:
30:38:63:10:cd:76:ab:f7:46:51:74:d3:e4:64:a1:0a:f3:ff:
ff:02:a8:8b:5d:5d:e6:dd:30:07:c5:63:08:0e:3b:b6:5e:5f:
b2:d2:e3:8d:34:47:6f:e8:a6:86:97:d0:1b:25:b1:d6:c6:a4:
3c:65:c3:fa:74:14:55:1b:8d:b4:96:55:59:38:2d:d3:86:01:
63:9f:7b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:36:33 2025 by rpki-client