Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a57d5726-1a1b-4488-847b-7653ba7adbda.roa
File: a57d5726-1a1b-4488-847b-7653ba7adbda.roa (raw, json)
Hash identifier: Fa9deeRk2dxVG3wHO6kd5Ce2TF/4Dh4VSJJdbTjDR6Y=
Subject key identifier: 33:BA:E5:3B:35:9C:A5:1B:D8:64:24:4B:B9:27:3E:73:6C:88:68:7F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 28FAE274594C0BCF9FB592A5C7B3E9BCB771141E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a57d5726-1a1b-4488-847b-7653ba7adbda.roa
Signing time: Fri 21 Mar 2025 11:18:21 +0000
ROA not before: Fri 21 Mar 2025 11:18:21 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:fa:e2:74:59:4c:0b:cf:9f:b5:92:a5:c7:b3:e9:bc:b7:71:14:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 21 11:18:21 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bc:03:21:d0:2c:c8:f5:b7:2e:76:f0:d5:2c:
8e:1b:20:93:5c:58:72:95:d9:2a:f9:c5:09:ac:c9:
9e:fd:73:2e:25:2b:0a:c2:8e:53:83:6d:36:86:b8:
8c:58:1c:81:b0:fd:00:1c:af:85:e8:15:05:13:7e:
02:ae:3c:a6:fa:9a:c8:9a:17:63:7f:ee:cd:6f:0b:
26:b6:53:37:d2:3e:7d:7b:48:c7:e5:22:bb:9f:7b:
60:04:7c:1e:a5:23:9b:9a:06:92:6a:31:b2:4f:bf:
fb:a1:ca:e8:67:5e:fe:d0:ec:cb:5d:92:0a:45:1a:
67:48:2c:ed:9f:b0:9a:a1:df:4b:26:00:b2:92:4a:
1a:be:48:a8:93:88:ee:a4:65:c3:6e:05:a7:19:31:
a4:c2:93:be:78:0c:61:aa:55:16:f8:e3:96:62:11:
fb:1e:83:1c:d0:a7:86:76:83:1c:91:53:1a:ae:6d:
d9:77:e4:65:a6:64:62:76:e8:31:72:1c:f8:19:4c:
1a:79:55:35:b0:e8:08:d0:03:04:ca:5c:4f:7c:a3:
25:63:7c:ff:46:7e:08:32:ca:cc:3e:8d:49:4a:13:
91:ce:95:ae:cb:45:ac:a2:6a:82:ce:f4:83:01:44:
bd:ca:5e:3d:44:37:35:98:85:fe:58:44:3f:b1:c7:
80:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BA:E5:3B:35:9C:A5:1B:D8:64:24:4B:B9:27:3E:73:6C:88:68:7F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a57d5726-1a1b-4488-847b-7653ba7adbda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:64:0f:e8:0a:a9:39:ba:68:89:fc:40:f5:f7:40:bf:de:bf:
df:d6:ee:2f:5e:93:39:80:2f:11:94:7d:39:9d:96:49:9d:06:
3f:5e:b4:b2:d3:d9:2b:fc:75:56:65:34:2a:b4:50:7a:24:87:
c5:43:77:eb:73:86:8f:03:8c:60:e2:65:be:e5:02:98:e7:98:
63:b8:3c:c1:f0:5b:5e:00:0e:31:98:4b:8d:00:d3:9e:a6:5f:
18:d3:17:be:2b:08:8e:6f:d7:f9:c8:1b:3e:d4:5b:24:ba:f7:
b6:47:8f:dd:94:85:ef:6a:7b:7f:c6:2d:ce:78:3d:14:5d:be:
1c:e0:42:4b:3d:84:45:77:c4:3b:02:fd:df:93:53:2c:8f:50:
f4:48:13:1a:08:b7:59:cd:db:53:c2:94:de:41:1f:68:96:88:
dc:a0:30:dd:0b:6b:81:ff:ac:59:46:1d:ed:59:38:9f:30:6c:
59:76:0d:e3:75:df:fd:06:7d:8d:4c:6c:bb:43:39:0f:83:97:
70:8b:02:67:65:af:c3:08:32:6a:16:af:4e:88:2d:e6:46:60:
e4:65:36:1d:46:47:e4:04:c5:82:b3:2a:a2:6f:f8:19:cc:24:
5d:25:5f:7e:7f:2b:1f:56:a7:6d:23:f9:c5:d4:79:d2:57:24:
24:c6:af:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:25:05 2025 by rpki-client