Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a12b4186-c955-4b4f-8e97-a78834ec5cd7.roa
File: a12b4186-c955-4b4f-8e97-a78834ec5cd7.roa (raw, json)
Hash identifier: gpKJf8U9P6c8mPhFJ8mLIQGdTCjsAyJe9uJeby9qNe0=
Subject key identifier: 16:8C:F8:AD:E8:5C:C1:9F:98:59:1C:38:3F:07:FE:47:91:35:72:C8
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 52C99D52F846619700BE55ED56A696BE51CEFFE6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a12b4186-c955-4b4f-8e97-a78834ec5cd7.roa
Signing time: Fri 07 Feb 2025 00:00:00 +0000
ROA not before: Fri 07 Feb 2025 00:00:00 +0000
ROA not after: Fri 14 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c9:9d:52:f8:46:61:97:00:be:55:ed:56:a6:96:be:51:ce:ff:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 7 00:00:00 2025 GMT
Not After : Mar 14 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0a:59:1a:6a:d7:97:cd:2e:1d:44:28:fa:f9:
64:7e:78:41:ad:af:14:ad:73:b3:38:21:70:2e:61:
35:56:83:80:02:09:78:12:b8:92:f4:7a:87:7d:7f:
40:9d:fa:7a:e2:0b:22:b2:63:0a:62:f1:25:ef:79:
fd:79:ee:a6:0e:5a:e2:b3:3e:4f:1c:78:66:d5:62:
7d:5a:87:a4:78:a6:6d:58:e9:87:f9:af:1a:04:3b:
25:fc:24:41:59:9a:dc:68:27:70:4e:fa:28:25:0d:
b7:47:ac:51:f2:3c:b9:9d:2e:14:a3:1a:c9:c0:30:
91:0e:96:2d:be:23:c1:0f:ed:d7:8c:95:ae:43:ee:
06:a8:35:c0:e5:db:fe:27:3e:e4:52:2f:0b:ae:a1:
09:57:9e:15:45:9e:10:8f:0d:1b:40:06:e6:9d:64:
14:cf:8a:f3:e9:3c:b5:33:91:25:25:79:15:35:a6:
91:61:0e:d7:7d:73:af:84:75:56:7f:c6:67:6c:be:
af:4c:38:d7:84:06:ef:91:6f:52:4b:72:a4:d4:04:
f1:26:3c:b5:a5:bc:8c:76:bd:f7:d7:d3:14:71:0a:
83:5e:f1:bb:04:ca:50:02:0e:51:57:ce:61:42:a8:
3f:8c:20:c7:1e:f2:f2:fd:02:dd:1a:eb:4a:f7:59:
34:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8C:F8:AD:E8:5C:C1:9F:98:59:1C:38:3F:07:FE:47:91:35:72:C8
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a12b4186-c955-4b4f-8e97-a78834ec5cd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:c4:2c:f5:c1:d0:6e:02:23:38:48:10:81:60:5c:56:01:ac:
eb:48:a3:13:2f:3e:d7:03:6f:8e:be:63:4c:39:eb:37:97:62:
ec:ca:1b:26:dd:e7:86:cc:6d:79:41:1c:93:33:7d:d6:ec:04:
0f:37:f9:50:3f:43:d5:f2:da:f3:35:13:9e:39:bb:bb:5d:10:
6f:71:9f:21:70:ec:4d:55:bd:7f:8e:c7:14:b3:88:76:31:f4:
cf:98:83:a9:0f:5d:da:43:42:7c:2a:0b:bb:15:62:2a:01:ce:
2d:bb:79:ab:de:29:a2:7c:1f:b2:7c:ef:7c:b0:88:59:05:01:
d6:e1:e8:cc:49:41:71:35:b0:56:e5:5d:49:28:f0:64:89:ce:
ae:72:4c:2f:a7:98:be:d9:c6:d3:84:27:f6:a4:80:8c:4f:41:
ad:52:18:dd:93:d4:c0:94:7c:9a:ab:87:83:d6:35:d2:0d:f4:
aa:87:c3:6e:16:0c:ed:20:f7:10:03:fa:90:2a:0e:3f:7c:bb:
8a:cd:76:44:52:9f:a8:5f:fb:01:af:ba:00:df:72:c6:e6:79:
5c:b6:00:4f:0e:18:52:aa:19:3d:55:4d:1a:14:ca:a1:26:2d:
ef:fc:7c:a8:7b:8c:8f:ce:ce:57:1b:c5:90:af:d8:bc:b6:56:
40:02:20:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:34:57 2025 by rpki-client