Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a201c8a3-2c6c-421a-ae0c-538d054b2789.roa
File: a201c8a3-2c6c-421a-ae0c-538d054b2789.roa (raw, json)
Hash identifier: /epbNzRnj8g4le50sb1FQ5d1kbpI0cR4Z/Hke0l6XKo=
Subject key identifier: 27:17:18:27:FC:60:86:6D:BF:5A:42:41:71:C9:24:ED:B9:DE:24:F0
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 124C354B6B10B907855CF36A5AFC920EBC4E113E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a201c8a3-2c6c-421a-ae0c-538d054b2789.roa
Signing time: Sun 07 Jan 2024 00:00:00 +0000
ROA not before: Sun 07 Jan 2024 00:00:00 +0000
ROA not after: Sun 11 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:4c:35:4b:6b:10:b9:07:85:5c:f3:6a:5a:fc:92:0e:bc:4e:11:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 7 00:00:00 2024 GMT
Not After : Feb 11 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:06:ca:1d:47:4b:a5:81:d2:43:0f:0a:cd:
f1:3c:dc:ae:92:af:be:47:fb:39:81:81:44:ae:5e:
1f:52:5e:ac:f9:b6:56:ab:e6:3a:14:38:70:92:63:
1e:ea:c3:1c:f1:e5:63:18:f7:e5:b6:8e:ce:e4:37:
11:09:47:f0:df:f7:26:4e:99:33:37:49:9f:d1:36:
cd:73:bb:83:5e:77:0e:73:b7:fb:fa:18:6b:50:52:
09:91:09:3a:ed:1a:62:e7:bd:34:58:2a:ab:7b:1f:
03:6b:24:40:f0:e0:ff:94:d3:39:15:79:f9:bc:94:
95:38:3c:0a:01:53:29:c4:da:59:ca:87:b0:fa:26:
8d:fa:57:e7:15:48:e6:9b:68:4d:32:22:4a:a7:3a:
4e:2a:79:91:a0:4c:1d:d5:ce:99:08:72:b9:20:10:
3c:44:ce:c1:fc:45:b9:bd:9a:46:84:5a:ba:81:a6:
3a:63:56:7b:d0:01:6b:39:a8:72:c5:9b:b2:bc:bf:
d8:e9:64:bc:ec:e4:8f:a7:61:8d:71:8c:ef:38:41:
32:92:a5:02:74:8c:bc:f4:c4:24:cf:3a:31:7e:74:
68:8d:3c:32:c7:75:3d:9d:2d:72:d5:48:cb:d8:1a:
33:5f:c4:df:69:be:ec:35:ed:90:f8:4f:11:90:57:
b7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:17:18:27:FC:60:86:6D:BF:5A:42:41:71:C9:24:ED:B9:DE:24:F0
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a201c8a3-2c6c-421a-ae0c-538d054b2789.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:7f:8c:2a:55:b9:6f:e7:10:94:b9:66:27:96:8c:ca:85:c2:
ca:75:2e:7c:e6:ae:ab:7f:ca:7a:90:58:92:6e:2d:c4:43:3f:
29:eb:4e:13:4e:b2:44:11:ef:a3:27:3b:8d:86:f9:e9:9c:b0:
b7:81:4e:8f:e1:d2:3e:66:5b:30:58:65:a7:20:c9:23:6d:5c:
45:46:5a:b5:53:25:50:8e:47:0e:30:6e:0d:45:f1:cb:ed:3a:
7f:b1:0c:13:54:2b:06:ac:f7:ee:74:d6:51:13:8a:cc:60:f1:
71:72:72:7e:05:6b:d3:1f:1e:3b:09:e2:57:aa:11:8f:b8:fd:
83:52:f6:41:11:45:ca:81:7f:34:9c:ca:ca:3d:0e:10:ce:12:
0e:cb:48:7a:93:b5:8c:b5:9e:31:c2:2f:4a:92:fc:a7:6b:84:
a5:14:10:ec:37:93:8a:73:e0:4a:68:b7:34:6f:6c:66:79:0d:
89:a9:57:ce:ec:d9:ff:60:70:57:da:1e:52:45:a8:68:54:ae:
4b:aa:1d:2c:2b:ae:48:5b:3a:61:59:1b:c6:71:9e:1a:da:86:
ff:a0:65:33:66:6f:c4:37:78:7d:cf:1a:10:80:94:33:82:ac:
eb:ea:84:d9:1b:5a:2c:32:87:59:a5:c1:87:67:0b:58:72:9a:
92:7a:fd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:00:28 2025 by rpki-client