Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a8ae0e95-f3cb-4d9d-bf83-c78d112d3a74.roa
File: a8ae0e95-f3cb-4d9d-bf83-c78d112d3a74.roa (raw, json)
Hash identifier: ki2PK6Z0DetNZe6D+DM70m9PpEYgcLgrmrusaaAejEI=
Subject key identifier: 22:BA:E5:E1:98:C3:F7:49:BD:70:04:44:F0:94:C6:BC:1A:3D:5F:8E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5CE4B6D377A785872CBF63E0A7665EF626AC9950
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a8ae0e95-f3cb-4d9d-bf83-c78d112d3a74.roa
Signing time: Wed 26 Jul 2023 00:00:00 +0000
ROA not before: Wed 26 Jul 2023 00:00:00 +0000
ROA not after: Wed 30 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:e4:b6:d3:77:a7:85:87:2c:bf:63:e0:a7:66:5e:f6:26:ac:99:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 26 00:00:00 2023 GMT
Not After : Aug 30 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:33:77:86:77:95:c0:26:45:c1:18:a9:77:2e:
6e:93:f7:98:65:a3:e6:e3:6a:37:c8:a4:b3:ec:47:
ab:59:9b:be:87:20:dd:0b:13:2c:e7:f0:4f:61:a9:
86:7a:d9:e2:6e:70:39:a7:6a:58:14:6f:f8:aa:4a:
3e:19:92:9d:6d:bf:6a:3a:1a:f7:44:cc:ee:2f:91:
20:83:d8:6c:fc:eb:33:38:2d:5a:e1:6c:3d:ab:4b:
d4:2a:77:f0:f2:8f:51:a4:50:dd:2c:29:d4:e1:62:
2f:65:e4:37:50:06:34:43:3d:5d:9e:66:7c:26:d2:
e7:1f:d6:f0:fc:f7:90:b7:0d:95:11:b9:1c:29:35:
78:48:3f:b5:95:f1:98:6e:93:80:69:09:dd:bb:48:
9a:85:fc:85:3d:34:a2:81:42:b9:4a:2f:9a:a1:88:
cc:70:ad:eb:3c:e1:5a:2b:6d:85:fc:bd:69:63:ee:
24:2f:86:a7:58:1f:1c:32:1d:6e:d2:36:52:6a:a7:
10:24:ac:ff:8f:4f:3c:5d:80:d8:92:1c:05:c0:2a:
ad:64:49:9b:5d:db:43:d0:b5:dd:3f:45:43:8d:c6:
a5:a6:26:93:be:fe:9c:8a:76:d4:9e:c8:4e:38:2a:
35:32:77:f4:3c:81:7a:7d:e5:af:37:f6:12:2b:48:
12:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BA:E5:E1:98:C3:F7:49:BD:70:04:44:F0:94:C6:BC:1A:3D:5F:8E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a8ae0e95-f3cb-4d9d-bf83-c78d112d3a74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:81:61:d2:a6:e7:ab:ac:f5:7b:53:ce:68:09:47:d4:eb:e7:
9b:ef:fc:bd:f6:1f:31:dd:7d:59:b6:f4:bf:3a:8d:63:0c:68:
d9:55:fe:5a:8f:05:b4:c3:56:ee:4e:2e:ce:04:5c:49:34:8f:
cc:b0:ed:73:f3:a6:e8:f2:fa:9a:34:41:a9:49:dd:92:e0:dd:
4d:70:b9:60:16:e1:ad:7b:25:a1:b1:87:16:d1:ff:41:f2:0a:
53:e3:8e:86:f4:af:3e:cd:45:d2:6e:92:9c:8b:13:6d:eb:0b:
59:3e:36:7a:53:cc:60:11:0e:e2:c0:2e:dd:54:2c:8d:2d:94:
b9:21:4f:38:2d:58:cf:06:fb:37:4a:47:c7:db:28:b5:58:7d:
8d:0b:ee:18:a0:e7:dd:04:99:39:55:e7:af:4e:5a:ab:86:6d:
a4:74:d1:04:39:82:b0:fd:5b:c5:9f:ce:2c:a4:12:6b:9a:05:
90:43:39:6e:1a:c1:5d:71:15:e6:d0:12:18:c0:e0:df:18:58:
3e:f0:66:07:af:08:e5:5a:6c:cb:59:ec:86:35:9b:15:67:bc:
1d:de:fa:65:d4:a4:86:cd:32:f4:6a:6c:30:a8:c7:1d:f3:95:
e0:be:37:d6:6f:72:69:d5:fb:b0:81:45:3c:b6:93:ea:0d:1d:
92:bc:48:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:19:29 2025 by rpki-client