Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a4b3f8da-65bb-4466-973b-da3d38440e6a.roa
File: a4b3f8da-65bb-4466-973b-da3d38440e6a.roa (raw, json)
Hash identifier: FOywztwlc9ijIb0GeDky9FgatLwMzaOTHmvWVJXdN6A=
Subject key identifier: 9F:D4:5C:EA:D0:63:3C:28:BF:5E:01:C6:D7:12:C0:B2:40:74:18:EA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7F8ACF2A437F8F2CEB3FAA9EA4870C4E73E04A41
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a4b3f8da-65bb-4466-973b-da3d38440e6a.roa
Signing time: Thu 23 Jan 2025 00:00:00 +0000
ROA not before: Thu 23 Jan 2025 00:00:00 +0000
ROA not after: Thu 27 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:8a:cf:2a:43:7f:8f:2c:eb:3f:aa:9e:a4:87:0c:4e:73:e0:4a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 23 00:00:00 2025 GMT
Not After : Feb 27 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:46:f4:5d:37:e4:c3:ff:83:41:e2:d0:48:1a:
94:81:fe:a8:49:d4:39:6a:d9:f9:d5:14:bf:8e:c2:
b6:65:8b:90:6f:4c:bf:10:3c:be:24:9e:40:c8:74:
b5:01:61:e4:16:a4:97:65:a6:73:44:6c:d2:27:03:
43:e1:39:49:a5:f1:5e:d8:5e:0e:86:54:26:38:ea:
5c:9e:b3:38:b8:da:5e:33:76:e1:49:27:82:c8:1f:
98:6e:b7:97:7a:87:36:bc:f5:b6:e3:f7:87:c6:d2:
bb:4f:0a:dc:ce:55:68:1b:b2:bb:b2:1e:ff:98:db:
9b:41:b1:2b:e7:9d:09:f3:81:f5:2d:21:39:93:34:
a5:9d:3a:94:b4:de:5d:43:9c:5b:03:64:99:ab:f3:
92:98:d9:48:8e:6c:5b:80:d9:e1:3f:f4:7d:19:e8:
81:ec:a7:ce:3f:2a:ee:6c:69:78:fa:42:ea:d5:9c:
7d:75:6b:77:ac:c7:5f:df:53:f2:57:b9:9e:57:8e:
8c:66:d3:97:0c:62:36:9e:e8:bd:fc:eb:44:8c:23:
ea:d0:87:50:e2:71:34:8b:e2:da:32:83:90:b3:a4:
de:4b:b9:f8:a0:bb:cf:12:2a:1b:a8:1e:dd:ff:1d:
8d:9e:00:ac:2e:a4:53:fa:fe:0c:79:13:0e:68:4a:
80:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D4:5C:EA:D0:63:3C:28:BF:5E:01:C6:D7:12:C0:B2:40:74:18:EA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a4b3f8da-65bb-4466-973b-da3d38440e6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:a6:b0:a1:69:52:4a:77:70:38:e8:c9:c5:7b:07:c7:8e:d3:
86:e0:48:ad:87:f6:5b:c3:84:94:a6:52:4f:06:7d:5f:ac:a2:
90:f0:bd:ec:40:3a:70:57:31:aa:9c:ea:2b:ae:4b:fa:69:6d:
c8:be:ad:49:dc:2d:44:46:dd:ba:ad:d5:f5:69:37:d5:ac:4c:
c0:11:49:35:0b:20:7b:ad:9e:57:66:3b:1f:2a:f2:ff:e9:e4:
27:d5:63:31:b0:9e:5a:fc:1a:e2:c3:7c:2c:2f:eb:fc:be:54:
fd:a2:0a:ca:9b:ba:e0:45:9d:05:c8:bb:16:35:cc:b4:74:70:
a8:bf:c9:f5:8a:b8:f2:42:5d:37:dc:c3:42:82:fe:4d:14:36:
0f:b5:4b:fb:aa:52:84:a2:de:5c:74:08:9b:c5:9a:d0:00:61:
80:69:cf:58:29:28:f7:53:e4:ce:cb:ed:91:46:f9:79:5b:b4:
00:54:c0:9e:14:d0:a1:23:bc:f7:a4:76:87:4b:cc:bc:58:ae:
21:8e:4f:56:c0:74:79:f2:70:70:7e:99:e0:db:59:89:60:f5:
da:b6:7e:e6:d3:30:d8:6d:3a:b2:64:ac:85:af:b0:72:52:df:
e5:6b:0d:fc:7d:e0:2e:c9:b7:3a:d0:13:af:57:40:e4:f1:d5:
5e:4f:e7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:52:29 2025 by rpki-client