Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a0a54381-7285-4be5-8808-9eda3fbd73a6.roa
File: a0a54381-7285-4be5-8808-9eda3fbd73a6.roa (raw, json)
Hash identifier: QL5f0iu0VK1g4z9ZRIoqpGS07zMwD1iLJeOP7K2F87Q=
Subject key identifier: 32:17:4E:F0:8B:51:9E:B4:0F:1A:0C:FC:1A:30:63:B3:41:0E:3C:2D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7BB254A53DEFFACBFC36AC513C497867FECE55E7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a0a54381-7285-4be5-8808-9eda3fbd73a6.roa
Signing time: Sat 30 Nov 2024 00:00:00 +0000
ROA not before: Sat 30 Nov 2024 00:00:00 +0000
ROA not after: Sat 04 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:b2:54:a5:3d:ef:fa:cb:fc:36:ac:51:3c:49:78:67:fe:ce:55:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 30 00:00:00 2024 GMT
Not After : Jan 4 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:a8:f6:f6:95:21:fe:88:ca:55:84:b1:f5:
d7:e6:b5:57:01:5f:13:89:2b:b2:0e:f3:83:cf:d1:
5f:5c:9a:ea:f5:3b:95:d6:49:30:54:c3:c5:42:08:
fd:0c:b5:15:3f:af:04:bf:d9:67:fb:08:16:0a:88:
14:83:96:5f:53:e6:e6:4e:50:07:ec:e4:89:62:8a:
bf:59:a3:03:ec:a2:f0:7e:30:9b:89:92:46:b9:84:
ba:1a:13:98:81:f2:a0:88:bf:15:7d:5a:91:47:05:
5e:f6:17:07:56:16:77:ee:9f:95:59:29:10:c8:67:
5a:b0:90:f2:1a:22:47:fc:d1:1b:ae:86:cd:c8:38:
82:c4:40:c1:74:80:b6:33:9c:72:f6:e2:82:7f:fb:
b7:dd:59:e7:8a:7d:1f:11:c0:a2:be:eb:a3:0a:c6:
23:fe:53:69:41:4a:0d:b9:7e:c1:61:6e:ff:69:0f:
6b:5d:29:24:b0:85:59:bd:92:dc:be:be:ea:00:ba:
cc:34:cf:ca:c7:ca:48:88:9b:cb:1e:3c:b0:a7:38:
33:33:e0:02:38:16:e0:f7:62:37:42:87:98:59:cf:
87:7c:b9:05:ec:ef:c0:94:51:00:ec:8e:d1:77:de:
97:ae:06:a4:ac:4f:e0:7a:2d:8a:a9:00:b0:d8:24:
26:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:17:4E:F0:8B:51:9E:B4:0F:1A:0C:FC:1A:30:63:B3:41:0E:3C:2D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a0a54381-7285-4be5-8808-9eda3fbd73a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e7:92:0d:5c:70:d0:5d:93:48:d2:62:05:a5:40:85:49:76:
43:93:ac:57:69:3c:b9:73:02:c0:87:1b:04:08:03:97:29:6d:
c9:16:1c:1a:88:f9:dc:d4:27:d4:49:ad:35:d3:76:48:34:f3:
ba:d2:e0:f5:9b:77:cf:8a:87:3d:bc:dc:69:e4:1d:2b:d8:d7:
98:ff:58:ad:2b:c4:d9:d9:47:86:94:47:7f:30:60:59:c2:4e:
ed:c0:8a:b2:a6:1b:82:d9:18:7c:ca:e9:f2:b2:da:c8:c6:e0:
54:ef:cf:f8:61:1a:bf:b0:fc:81:14:9b:a1:54:bc:3e:1b:d5:
ac:f2:ec:d5:12:9a:a6:77:c7:34:9d:8c:1b:5c:ac:44:ba:52:
01:61:f3:d6:19:43:4c:80:b0:45:80:b9:46:9d:81:a8:bd:57:
55:59:04:9d:92:f4:71:46:5a:f5:35:6c:da:f4:e8:4e:56:bd:
9f:b2:97:be:48:8c:ea:7e:a9:9c:05:f7:c2:ed:f7:7c:90:be:
1e:03:c4:50:9f:e0:6a:60:bd:4e:dc:ea:29:ff:fc:73:ca:94:
63:9b:82:b9:3b:da:4f:ef:8e:1d:9a:ef:f4:16:d2:c7:bc:97:
26:bc:c3:f6:b7:39:45:3c:78:73:7f:ea:2b:68:a7:ad:4a:d2:
7a:bf:6f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:23:03 2025 by rpki-client