Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9ca710a3-34d4-47a5-b8e5-1179d118f57f.roa
File: 9ca710a3-34d4-47a5-b8e5-1179d118f57f.roa (raw, json)
Hash identifier: znxlDltXXe6j41Cr5AeySIvPbLQClCCKP7qkLmfYwS8=
Subject key identifier: 27:FF:D0:70:83:BE:F3:90:61:49:0C:91:8B:54:C8:47:53:17:27:2E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3D0F5D57DD64DE0A94816E1B91725A13BCE57D0B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9ca710a3-34d4-47a5-b8e5-1179d118f57f.roa
Signing time: Mon 11 Sep 2023 00:00:00 +0000
ROA not before: Mon 11 Sep 2023 00:00:00 +0000
ROA not after: Mon 16 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:0f:5d:57:dd:64:de:0a:94:81:6e:1b:91:72:5a:13:bc:e5:7d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 11 00:00:00 2023 GMT
Not After : Oct 16 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:72:88:74:2c:48:81:49:d8:6e:68:d2:30:cb:
61:d6:67:af:ba:3c:71:f3:9e:29:93:d5:f1:c7:3e:
63:e3:d4:f3:af:98:4c:be:ac:c1:e2:59:fb:30:48:
6c:c1:7c:e8:89:e0:db:1e:52:cc:16:c0:f2:64:9e:
03:61:80:fb:28:94:3e:af:d6:0c:91:6d:3e:ca:47:
19:77:7f:22:f9:99:5f:91:ec:2f:66:44:ac:22:15:
74:9d:3b:f5:11:45:bd:83:19:46:ba:23:39:19:22:
1f:4e:1a:a5:d8:15:b1:d0:89:2b:b3:02:13:97:9e:
86:8e:12:2b:3d:5b:3f:56:10:c8:ba:b3:1b:ad:4e:
aa:0f:5a:ba:2b:28:cd:a0:b1:cd:75:b1:70:ee:6d:
32:85:99:06:2d:89:fb:28:87:f6:66:0f:31:ad:cc:
b4:19:8e:d3:b0:26:ed:6c:6c:d6:ba:f9:62:e4:30:
d5:02:a5:bf:23:86:3e:99:3c:92:c2:58:54:8e:69:
f6:9e:0a:a7:02:e6:14:48:00:ea:2f:e5:26:7e:09:
d9:82:32:7f:7d:51:59:fb:9c:d1:ef:49:00:18:3e:
01:1b:eb:1a:3a:c6:91:5c:ec:d5:8e:9d:5a:28:8a:
69:46:8f:17:e7:48:4a:58:28:49:98:3b:21:c2:8b:
c1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FF:D0:70:83:BE:F3:90:61:49:0C:91:8B:54:C8:47:53:17:27:2E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9ca710a3-34d4-47a5-b8e5-1179d118f57f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:57:e3:19:6f:b0:24:bf:99:dd:37:16:19:5a:b9:bd:6f:20:
6e:0f:14:e9:00:ba:dd:4d:38:d8:05:3b:84:b0:62:8a:0a:cb:
5b:a7:be:6e:60:7b:37:a6:4d:ed:62:da:17:af:4c:d4:60:25:
4e:79:fe:c4:8d:90:66:72:62:1c:a1:c2:7b:f5:8d:18:82:28:
5b:1f:1a:bb:eb:1a:dd:f1:b0:bb:a5:dc:9b:fa:ca:ae:d2:a8:
6c:5a:ac:39:b3:fc:10:c1:38:dd:28:4a:82:f9:84:6a:44:75:
b7:33:45:1c:7d:24:3b:a8:fc:5c:84:54:c2:2a:45:5e:6e:0f:
9e:5f:7d:fc:4b:08:16:cd:f8:af:4a:7f:45:a2:f5:33:95:15:
4d:a8:e1:c9:54:02:d4:1b:38:4a:49:58:99:89:43:17:22:de:
37:ad:c7:c6:82:d7:0c:cd:e4:04:cd:1f:1e:67:12:22:bb:37:
01:39:61:04:8b:b0:19:62:35:de:99:8e:9b:da:09:0d:af:26:
e1:7e:c3:ec:19:a7:e2:42:74:05:2b:eb:4a:38:a2:2e:ce:52:
1a:4b:c0:ac:64:ca:97:9b:ae:11:1d:4d:f9:5d:eb:94:92:ae:
65:e3:f0:71:73:9e:3d:f3:23:7b:e4:f4:65:28:98:8b:65:18:
ea:68:18:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:34:53 2025 by rpki-client