Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a944ba14-0d8a-4258-b871-49581c623d82.roa
File: a944ba14-0d8a-4258-b871-49581c623d82.roa (raw, json)
Hash identifier: M91imcieJdg4ngHbvkJUieRiNOt7y3MWdmu3DEyQF8I=
Subject key identifier: 07:88:20:12:BC:2A:EC:10:24:7F:80:B6:2D:8D:79:1C:A8:D4:AD:E1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7FA28E210A4AB0FEC6EF83ABEE29D86476972973
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a944ba14-0d8a-4258-b871-49581c623d82.roa
Signing time: Sun 09 Mar 2025 07:18:20 +0000
ROA not before: Sun 09 Mar 2025 07:18:20 +0000
ROA not after: Sun 13 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:a2:8e:21:0a:4a:b0:fe:c6:ef:83:ab:ee:29:d8:64:76:97:29:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 9 07:18:20 2025 GMT
Not After : Apr 13 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:89:b3:38:9b:aa:08:46:ea:29:98:59:38:74:
f2:fb:28:c6:7b:1d:0e:6a:80:f3:1a:a5:e4:f9:3a:
25:c3:d9:bd:f8:88:55:a5:75:c9:34:ff:1b:72:ac:
13:4a:90:52:b2:25:5b:17:80:69:e8:cc:70:c1:f6:
34:c7:67:8b:7b:8c:93:dd:93:a6:0f:3d:a2:85:f8:
b6:81:65:37:32:4d:f8:cc:2f:d4:26:f3:7d:76:12:
af:83:ea:b7:8a:38:55:20:5d:ed:e5:34:61:56:a1:
26:92:dd:2c:76:e8:63:04:c6:fe:3e:f8:3c:a3:89:
93:e5:95:ad:b1:92:f8:32:5c:17:e1:0b:c9:bc:8a:
5d:94:1c:5b:f9:f6:73:e9:9d:37:11:16:b4:06:a0:
a3:30:af:f3:ca:e3:26:b4:b3:4b:cf:e3:d4:1d:d4:
6c:12:62:0f:04:33:22:75:3b:c9:d0:ba:f5:8e:ee:
3f:27:96:99:20:04:a4:d5:fe:53:54:e2:43:e9:68:
3d:05:8a:09:d6:15:2b:5d:99:dd:50:90:3e:d8:a0:
31:b0:9b:b6:3b:51:b1:91:d6:a1:bc:8b:50:16:5e:
40:79:d8:97:fa:79:22:5c:92:26:22:fa:9d:8f:b1:
50:dd:7e:1d:ac:99:51:43:ec:2e:f1:fb:c4:41:1d:
5f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:88:20:12:BC:2A:EC:10:24:7F:80:B6:2D:8D:79:1C:A8:D4:AD:E1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a944ba14-0d8a-4258-b871-49581c623d82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:4d:f5:d6:4b:10:06:df:7e:90:16:59:a5:01:33:14:ef:5f:
f7:e2:fb:fe:8e:1f:8e:b3:37:a5:01:7a:89:7c:a1:8a:0d:1e:
20:1a:89:f9:56:80:a6:30:1c:97:8b:bc:ed:42:37:cb:97:48:
ff:1f:91:33:a4:45:4a:d5:ce:9d:8d:28:bf:73:05:d4:2a:56:
01:58:ce:57:8e:03:b8:d4:a0:dc:05:4c:fa:73:67:ac:0d:f8:
a5:ff:95:98:17:f8:8a:a7:1c:5b:5f:d2:3f:01:1d:bb:bc:e3:
8d:20:1e:a7:f5:54:51:a5:a1:0c:6a:91:c7:a5:e6:74:10:52:
ff:3f:a5:49:a5:3a:4c:60:9c:84:65:60:bd:1a:01:98:cf:5d:
bf:91:2f:92:dc:50:93:21:e8:7b:9f:4f:f8:4d:85:c9:2e:82:
0e:24:5f:20:b2:7a:c4:0a:8a:29:61:2e:66:ad:bd:13:dc:15:
e4:0b:9f:2f:13:da:ef:d9:52:ca:7f:ef:f6:e3:e8:38:fb:ca:
9f:60:94:4f:5c:eb:6c:29:c0:c2:f0:6a:f7:aa:c3:63:82:2e:
bf:44:83:bc:dd:2c:6c:70:ff:a3:47:68:9b:d1:cb:4d:41:9b:
01:11:9c:48:ad:d6:ee:82:0d:8f:5a:29:6c:94:1e:0c:d4:6a:
82:46:0e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:54:48 2025 by rpki-client