Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a1c83bd2-4e60-45dc-b713-567518394e88.roa
File: a1c83bd2-4e60-45dc-b713-567518394e88.roa (raw, json)
Hash identifier: nHpZOY4bj/KaTgyfbkrhry4YAhoNh77ILaQhA+f5xfY=
Subject key identifier: CA:2E:E1:23:A4:27:22:46:AA:33:F0:1D:48:3D:BB:20:32:03:CF:2C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 598CC1CE6930C345ED60C568A9A388FC609D516C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a1c83bd2-4e60-45dc-b713-567518394e88.roa
Signing time: Thu 20 Jul 2023 00:00:00 +0000
ROA not before: Thu 20 Jul 2023 00:00:00 +0000
ROA not after: Thu 24 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:8c:c1:ce:69:30:c3:45:ed:60:c5:68:a9:a3:88:fc:60:9d:51:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 20 00:00:00 2023 GMT
Not After : Aug 24 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1a:55:1f:c5:a3:5b:85:ac:55:56:22:b3:e8:
28:1e:fd:22:87:85:9a:fb:35:b8:15:10:77:64:15:
18:96:c3:7a:41:32:fc:dc:8a:68:8b:70:ae:e7:ac:
4d:c9:84:c0:f5:f4:fb:fe:7d:9a:29:d9:97:70:b7:
23:ff:c6:14:fb:22:1e:5b:6b:c1:0c:2c:29:00:80:
fa:04:8d:d4:04:89:a7:a9:43:50:ed:78:03:c8:46:
28:74:bb:c0:b2:4e:46:93:50:f1:4e:06:77:f5:c8:
9c:35:88:3e:a1:a1:34:1e:d9:b7:0e:fe:87:47:49:
ba:82:a3:0a:46:70:09:5e:08:72:66:31:b7:39:6c:
89:20:4f:c8:ba:ec:ad:13:be:1f:cc:78:b0:bf:db:
e9:8d:9a:49:9c:b8:36:5b:3a:4a:32:72:55:99:71:
43:c1:53:6b:1b:a0:ba:24:39:06:a0:f7:43:c6:51:
55:a1:45:10:40:ec:cf:df:8f:58:33:21:31:e1:41:
7e:8f:aa:89:77:01:e0:28:57:44:78:15:98:11:77:
f8:89:73:00:e1:77:49:3f:87:90:46:eb:df:f6:2a:
89:e9:fe:3e:82:12:51:60:c6:73:15:c7:37:d8:36:
9a:21:6a:45:df:a8:1d:66:d2:31:9e:48:13:17:c5:
41:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2E:E1:23:A4:27:22:46:AA:33:F0:1D:48:3D:BB:20:32:03:CF:2C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a1c83bd2-4e60-45dc-b713-567518394e88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:c2:16:9f:b3:6c:a1:fc:97:7d:8f:81:6a:07:21:2d:bc:8b:
83:25:14:be:e7:5d:55:88:62:bf:01:75:f7:f4:12:d2:d2:59:
ad:57:25:55:30:44:b2:8d:7f:90:3f:1e:1d:31:5a:ae:08:82:
32:67:9b:c4:ad:17:0b:9a:28:f7:74:a1:16:71:31:2a:59:de:
a0:45:11:ce:ae:da:8f:b2:93:11:e7:70:46:32:49:01:7c:cb:
9c:ee:81:57:a9:3d:9f:1b:41:4f:ce:da:6c:4e:03:f4:cc:5f:
8f:82:00:a3:4c:b2:e6:65:2d:f9:2c:50:16:e3:73:49:e0:fb:
93:c2:88:f3:cf:90:9e:94:06:cf:b4:d0:bc:2a:96:a3:47:4c:
a9:3b:b4:83:c4:c1:4f:a8:c3:d8:a5:e2:00:b1:d1:75:37:d5:
82:95:5c:55:22:ae:c1:84:c8:65:f0:c3:97:32:69:03:f5:7f:
59:d5:1d:13:28:f6:7f:05:02:91:8d:c3:bc:02:cd:fe:d6:0f:
99:69:fe:3a:9e:1b:f4:73:7c:85:b8:d8:c5:47:05:a5:c3:db:
18:ad:81:46:00:92:ed:33:53:69:3a:87:56:ab:69:ca:38:3d:
10:7c:60:54:af:18:4f:03:89:86:34:a2:3e:0d:c4:1a:ae:11:
a6:d2:5c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:44:58 2025 by rpki-client