Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a138ef02-aaf3-442f-a31d-5e1289a96ba0.roa
File: a138ef02-aaf3-442f-a31d-5e1289a96ba0.roa (raw, json)
Hash identifier: CJWNnT6ZmFsV7c5aLr3/JgIyULv8uBMOQxOcj6J3UpY=
Subject key identifier: 5F:68:D4:AC:F9:49:C6:2A:09:3D:94:5D:E0:0D:56:DA:E2:8F:89:C9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 727482FC94DFC880556CE3CD815CA67C572FAEEB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a138ef02-aaf3-442f-a31d-5e1289a96ba0.roa
Signing time: Thu 28 Nov 2024 00:00:00 +0000
ROA not before: Thu 28 Nov 2024 00:00:00 +0000
ROA not after: Thu 02 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:74:82:fc:94:df:c8:80:55:6c:e3:cd:81:5c:a6:7c:57:2f:ae:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 28 00:00:00 2024 GMT
Not After : Jan 2 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:c6:3e:05:b9:1b:b3:af:42:9e:03:69:3c:
63:5b:90:d7:76:a9:70:a5:86:7f:c9:f5:49:c9:ba:
ed:11:22:2d:e7:2d:11:5c:17:82:75:46:c1:b5:23:
71:52:98:ad:08:91:48:3c:f5:9d:a7:3b:99:5b:af:
11:07:44:9a:c2:57:ac:00:d9:b5:af:5c:9b:81:c3:
0d:e9:ec:b7:74:8f:be:c3:1e:e9:37:d2:3f:04:e6:
2a:af:04:ad:04:be:eb:09:d0:2f:6a:a0:1e:84:8c:
69:c6:14:f8:3b:5c:83:44:f0:0a:64:23:c2:dc:0e:
76:33:8c:f3:63:0a:75:ad:6a:12:e4:c9:2a:a7:e4:
97:cb:97:38:e6:52:77:42:09:e0:2d:77:40:8d:9d:
90:df:74:ff:e0:1e:47:1e:4e:50:f5:5b:8f:f8:7c:
f3:1e:d7:26:1c:29:6c:5b:ec:0f:d7:ff:7a:ca:f2:
e2:4b:3c:6d:9c:f6:1d:25:5b:4c:0a:75:91:02:8a:
64:e2:e0:c4:be:7e:f7:37:92:96:ae:2e:ac:4c:df:
b3:f0:52:6c:ab:03:6d:6e:a0:b7:81:7d:ff:e5:7a:
dd:8d:0b:46:6a:cc:a9:8b:c4:4c:3f:cd:29:c7:b3:
e5:68:41:02:c8:c6:ea:87:75:9e:aa:ea:af:06:0b:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:68:D4:AC:F9:49:C6:2A:09:3D:94:5D:E0:0D:56:DA:E2:8F:89:C9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a138ef02-aaf3-442f-a31d-5e1289a96ba0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
10:43:23:a3:54:4b:d2:ea:3c:8f:76:7b:c4:88:c5:ce:1a:44:
cb:52:cd:db:a8:60:9a:8f:76:1f:25:19:4b:ec:52:27:eb:50:
f3:2f:79:17:a9:4a:3d:33:c3:6b:77:01:9a:18:1b:8c:7a:e1:
cd:89:06:d7:5f:38:65:eb:66:3b:71:ed:28:4b:e5:78:7e:c0:
eb:b1:1e:0f:11:b9:58:2f:4d:bf:4b:98:1c:e2:40:03:2c:0f:
a9:f3:c9:7e:be:9e:0c:04:45:09:a6:fa:47:33:fb:6a:34:90:
24:5f:a8:89:18:11:04:71:0c:b5:50:23:bb:9f:0c:d4:0b:c8:
fc:ce:01:42:cc:22:ef:c8:97:ea:51:a2:9d:ce:38:46:ad:56:
a3:ce:26:2a:f7:a4:d7:fa:34:0e:84:7b:b5:c8:22:13:0f:2d:
2e:9f:9e:7d:6d:54:d8:c8:ba:39:72:3e:6d:bc:d1:37:b7:2b:
11:5a:ca:35:01:7a:54:f0:06:d4:64:55:9a:6c:bd:6f:11:7e:
93:d4:31:5c:c3:df:01:9d:10:38:6c:c2:f0:39:18:9c:69:8d:
d5:c3:65:e4:90:98:09:b2:07:22:00:60:7f:92:95:a9:2d:d1:
79:9a:d1:c7:42:ec:7e:c4:ad:7e:58:78:e4:34:5a:ff:06:5f:
44:8e:9f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:34:20 2025 by rpki-client