Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9a001207-57f6-4489-bcde-44307cc3a29d.roa
File: 9a001207-57f6-4489-bcde-44307cc3a29d.roa (raw, json)
Hash identifier: 5FqoosVsdHGzElciLIrhIn4GcOOaUhvcob9Js0Cf9k4=
Subject key identifier: 03:63:FD:76:41:77:CF:5B:CC:8E:89:1A:7A:37:64:1D:62:22:10:31
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 122010E620F218E6758E16DC56DD34F4A7E1A4AB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9a001207-57f6-4489-bcde-44307cc3a29d.roa
Signing time: Mon 27 Nov 2023 00:00:00 +0000
ROA not before: Mon 27 Nov 2023 00:00:00 +0000
ROA not after: Mon 01 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:20:10:e6:20:f2:18:e6:75:8e:16:dc:56:dd:34:f4:a7:e1:a4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 27 00:00:00 2023 GMT
Not After : Jan 1 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:70:fd:a3:10:48:53:da:ca:c6:ee:e1:97:b9:
d1:32:89:71:5e:27:47:55:ad:7f:0a:03:20:9a:dd:
1a:47:7b:32:e5:a9:66:25:2a:27:4c:91:6e:9b:19:
34:35:7d:6f:3a:00:7f:cf:3f:3f:f4:14:8d:22:eb:
22:d7:25:4c:20:22:52:25:7f:2a:ba:9f:bb:a2:b9:
18:d9:0c:7c:af:1c:32:76:46:1a:33:43:c1:63:36:
23:87:e6:86:c4:10:ac:a4:a3:7c:61:09:c4:9d:63:
32:6a:07:fa:68:20:de:c5:93:10:48:3f:73:04:11:
83:9f:f7:9a:e6:34:64:00:9b:f1:bc:c1:46:06:ba:
cc:6a:9e:75:ae:fb:38:df:4e:ad:99:e7:41:e2:77:
3b:c8:34:46:29:81:20:93:1d:4d:b6:11:bc:1a:10:
97:e0:cd:db:93:63:c4:68:ed:e0:96:35:c0:ba:38:
04:51:03:05:69:f8:ea:57:30:0b:52:de:e2:d8:1c:
55:b9:30:5e:ba:6a:27:1a:12:9f:f4:84:6b:1b:20:
2f:69:69:52:ee:ef:f8:53:b0:d6:b6:89:51:35:21:
7e:9f:04:92:b0:9d:91:17:48:86:e8:a4:e2:66:6b:
9c:9c:ed:5d:0e:e1:33:f2:d8:04:a7:78:5d:27:aa:
d6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:63:FD:76:41:77:CF:5B:CC:8E:89:1A:7A:37:64:1D:62:22:10:31
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9a001207-57f6-4489-bcde-44307cc3a29d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
09:dd:9e:dc:0f:53:b4:56:e3:8a:53:2f:2a:9b:76:01:54:74:
2b:ed:17:f8:3e:ba:46:27:5f:3d:ac:b8:22:8f:2b:b0:31:52:
0f:f8:69:ad:08:3a:8a:10:18:1f:f5:3d:f1:2f:5e:ae:e9:d2:
29:e1:64:a2:54:49:24:11:eb:5d:87:86:7a:da:05:9a:c4:33:
be:93:9f:d5:5b:1a:b5:62:70:59:80:ba:21:13:04:8c:10:65:
bc:9a:9e:c3:8a:7a:6c:84:5e:fd:b7:73:5b:84:2b:c0:82:70:
cf:4a:db:54:e4:aa:22:1a:86:66:03:43:a4:4c:ba:8c:57:3d:
91:3f:b4:8c:bc:e5:87:a2:e9:43:0f:0d:eb:8b:5a:15:78:25:
e2:d7:a5:41:f7:11:d5:1c:b5:a6:10:b2:4d:9e:30:8a:9f:6b:
dd:9d:58:b3:08:ba:6e:ae:f9:69:16:d9:43:71:3d:b4:c3:e1:
6d:14:14:b4:d8:7c:d3:f9:c6:0b:64:17:2b:ef:72:6c:d7:38:
24:d1:a7:01:63:9f:50:23:b1:1c:20:07:e9:cd:c0:ab:c5:89:
59:a8:79:b0:45:36:7b:60:f2:45:86:72:62:96:8a:c1:8c:33:
4f:98:df:f8:80:b1:87:32:fe:79:ba:65:e6:9b:27:2a:89:56:
87:29:80:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:47:52 2025 by rpki-client