Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/af9d8aa9-2a40-41df-a5fa-bc09cbe7d636.roa
File: af9d8aa9-2a40-41df-a5fa-bc09cbe7d636.roa (raw, json)
Hash identifier: +U6mXrHU6K6RejM7qmITM6lYDzpExELrhAzz3aCRP98=
Subject key identifier: 09:B1:A0:A6:69:A2:BC:21:BB:2A:FD:B9:81:E1:39:54:FD:1A:28:FE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4148B070810994E16E705E596523B72495CD92A0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/af9d8aa9-2a40-41df-a5fa-bc09cbe7d636.roa
Signing time: Thu 13 Mar 2025 13:13:19 +0000
ROA not before: Thu 13 Mar 2025 13:13:19 +0000
ROA not after: Thu 17 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:48:b0:70:81:09:94:e1:6e:70:5e:59:65:23:b7:24:95:cd:92:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 13 13:13:19 2025 GMT
Not After : Apr 17 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:1f:93:93:54:aa:64:7a:b3:6f:bc:69:79:20:
16:9c:d2:be:e8:e9:7b:6e:57:d3:05:1d:77:84:39:
a1:9d:ab:aa:7a:0c:c4:2b:b0:28:88:49:19:12:db:
93:b7:14:06:54:46:e5:b1:0a:d5:63:16:da:26:67:
91:35:d6:90:c5:e6:41:57:58:02:88:2d:9d:22:0d:
c4:64:58:cf:69:2c:24:2e:31:13:4b:aa:67:a8:8a:
d1:f4:91:86:46:6b:3f:20:46:40:1b:2f:56:00:f3:
46:49:23:53:02:a9:43:33:02:04:89:ed:04:26:ea:
33:60:e9:37:cc:c9:07:d3:dc:b5:fa:93:e1:b8:14:
20:84:b2:24:70:05:9b:94:07:1b:8e:4d:80:87:df:
f1:fc:df:ce:c0:11:8e:94:15:45:1f:13:b8:b9:4e:
1b:b3:ce:30:86:0e:00:6a:2f:d7:d4:67:b1:61:a9:
87:16:c4:a4:95:8e:ff:56:cc:cf:34:eb:74:78:5c:
37:ac:25:81:e6:ec:3d:c9:cb:b8:e7:f1:71:ba:fb:
77:ee:f5:6f:94:4c:a0:ac:94:bc:6d:bd:e6:30:9c:
84:c0:55:9d:66:bd:18:7a:3d:7e:c0:e4:09:9c:d9:
6f:05:39:1e:7c:62:d2:04:ac:96:8c:ab:e5:ce:b6:
f7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B1:A0:A6:69:A2:BC:21:BB:2A:FD:B9:81:E1:39:54:FD:1A:28:FE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/af9d8aa9-2a40-41df-a5fa-bc09cbe7d636.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
68:02:13:3b:9d:64:37:6b:dd:63:dc:10:54:8e:a7:43:4a:2c:
29:3c:3f:aa:49:61:fc:89:42:38:58:98:01:11:51:ac:75:b2:
e9:7b:08:25:b2:9c:5d:49:3a:38:15:eb:d7:d5:c0:35:80:c2:
66:5d:ac:6d:1c:3e:1f:40:ff:35:27:dd:7f:1c:e0:77:8f:75:
40:8c:2f:29:a8:15:fb:61:6c:14:6c:17:1d:6e:1d:16:36:7d:
5d:a0:b3:5a:17:cc:08:ed:49:70:2e:a5:01:40:74:4a:85:a1:
b8:54:04:ab:55:58:bb:4d:4d:fc:26:86:fd:29:32:01:1d:8c:
81:75:f5:f7:76:63:ee:37:c6:2d:c5:a5:1f:04:28:47:7f:56:
b9:48:76:14:67:c8:36:9f:bb:b3:56:2d:ad:3a:0f:1a:08:9d:
cd:74:dc:40:f6:16:47:dd:a5:da:67:ba:6f:11:c4:64:aa:46:
36:05:24:c8:7b:a4:76:3a:ab:58:26:54:b4:96:5f:bc:a2:9b:
6f:91:0e:84:16:c9:4a:11:e6:63:82:c5:2e:6b:94:3b:c5:ad:
13:c6:ff:04:64:67:90:3b:e7:05:3e:90:4c:04:e2:e4:28:60:
89:0d:7c:7f:44:cd:91:0f:27:21:11:1a:c3:70:87:10:1e:b3:
ea:fa:8a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:48 2025 by rpki-client