Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a9ccd70e-1a18-4be6-af07-f2b3f359968b.roa
File: a9ccd70e-1a18-4be6-af07-f2b3f359968b.roa (raw, json)
Hash identifier: BfJbSlfcCNYrdWklYr8IyAZltpLtliP9J4BXxa9KesU=
Subject key identifier: 63:D4:92:3F:5A:46:E0:59:0F:42:D8:57:0D:0F:B4:C7:B0:3D:B4:8F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2B68DC031C8A75878782CD6E4B42BB30DFB49B72
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a9ccd70e-1a18-4be6-af07-f2b3f359968b.roa
Signing time: Mon 17 Mar 2025 10:33:18 +0000
ROA not before: Mon 17 Mar 2025 10:33:18 +0000
ROA not after: Mon 21 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:68:dc:03:1c:8a:75:87:87:82:cd:6e:4b:42:bb:30:df:b4:9b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 17 10:33:18 2025 GMT
Not After : Apr 21 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7c:69:4f:2c:76:49:a2:31:99:33:b1:7a:e2:
03:a4:8f:8d:8a:d4:a4:67:cd:26:d0:1c:46:af:78:
aa:08:a6:e6:bb:0a:0f:1e:54:52:43:bd:ee:14:8a:
7c:66:4a:3a:d9:ef:36:dc:62:b2:a7:22:e7:17:95:
62:03:98:83:46:97:fb:ce:53:6c:be:f7:cf:17:34:
14:58:28:ce:50:17:e3:47:29:dc:cf:b4:d4:77:70:
e1:1f:b4:4e:2f:3d:64:91:57:ac:39:76:64:d7:dc:
a1:8d:3a:25:f0:a0:5a:f6:b8:72:03:d9:4b:0e:fc:
c7:64:8a:5b:4d:21:ab:77:56:26:30:f0:00:5f:93:
a6:8c:41:79:79:3e:3a:86:c1:d2:b1:60:bd:5c:4a:
69:37:8a:02:7b:83:72:7c:e1:d9:a7:59:23:b4:49:
bb:57:4b:32:aa:e3:94:f6:0a:2f:1b:cf:44:01:a8:
18:cb:8f:52:51:dd:1f:c6:ff:e8:7d:10:4e:cc:56:
f6:9b:76:f7:1c:9d:a8:bc:2b:48:be:9f:da:5a:96:
ec:52:69:85:c0:de:8d:0a:54:13:30:80:fc:3b:2c:
39:9d:04:dc:65:6c:ec:dd:37:80:bb:16:c5:7a:3b:
ea:57:22:29:6b:8c:a8:8b:00:61:7e:2c:91:0d:81:
3f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D4:92:3F:5A:46:E0:59:0F:42:D8:57:0D:0F:B4:C7:B0:3D:B4:8F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a9ccd70e-1a18-4be6-af07-f2b3f359968b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
29:3a:55:08:ca:56:c3:2f:97:53:39:0a:ab:db:b0:3c:54:25:
8e:06:03:cf:4c:39:b0:a9:24:62:ef:35:d3:b4:95:ab:55:7d:
b8:a3:61:c2:23:0f:95:6a:a7:bd:85:0a:78:4a:6a:43:18:67:
01:7e:ee:44:12:a4:0f:9f:9d:d4:31:f0:02:20:4a:e5:94:ed:
b4:46:23:15:e3:27:1f:03:48:b6:f1:cd:48:f4:75:c0:7b:e6:
9a:34:04:2d:e0:97:d4:80:26:7e:f7:61:83:1e:9e:9e:2d:71:
d0:4f:a0:dc:41:08:07:c4:d7:1e:f4:8b:93:76:40:fa:65:6d:
b5:ec:a1:7e:4a:e4:21:59:99:f1:e6:c2:49:80:5d:96:14:c5:
3e:cb:66:da:9e:c1:2f:09:c8:e9:69:35:0d:a2:84:9f:6e:b7:
8e:09:f2:a1:f5:71:07:6e:e1:41:08:e4:b1:35:9b:4d:26:d9:
83:0b:7c:5a:09:d6:3b:f7:e7:1d:3a:c6:87:fb:d9:10:2a:a8:
ad:73:9f:4d:5f:18:c0:69:cb:a7:63:50:65:37:c2:0d:69:93:
02:68:14:3a:96:28:f9:9d:bb:1d:90:51:74:3b:92:96:01:c1:
cc:e9:0d:5f:ae:13:a3:cc:ec:21:f1:b3:80:9c:b0:50:1e:44:
69:c8:d9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:39:25 2025 by rpki-client