Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b06ce502-fa27-4c23-8a84-d9f270ef6de4.roa
File: b06ce502-fa27-4c23-8a84-d9f270ef6de4.roa (raw, json)
Hash identifier: 0Wc+svXIortZyD1VlSent/aUN2XVe4tHNpeIEqr/084=
Subject key identifier: FD:A3:0D:59:BB:9F:39:66:1C:0F:70:03:22:55:1C:5D:E8:0C:97:16
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2828B420B77FB6AE8CC1734B7BF700E3F1A79F8A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b06ce502-fa27-4c23-8a84-d9f270ef6de4.roa
Signing time: Fri 22 Dec 2023 00:00:00 +0000
ROA not before: Fri 22 Dec 2023 00:00:00 +0000
ROA not after: Fri 26 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:28:b4:20:b7:7f:b6:ae:8c:c1:73:4b:7b:f7:00:e3:f1:a7:9f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 22 00:00:00 2023 GMT
Not After : Jan 26 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:1b:f0:14:0f:2d:d4:78:59:93:14:45:0a:
29:d4:78:3b:8c:a0:b4:6c:57:16:6c:90:f6:d3:e7:
37:ba:ed:a2:21:11:31:65:03:aa:03:3c:6f:20:88:
e0:33:31:93:52:83:54:4a:4c:92:23:ba:67:c2:3e:
f9:ca:fb:4d:0c:8a:67:2c:c5:68:6a:84:da:0c:52:
80:c3:b7:44:42:d7:4a:37:59:c8:c0:55:eb:15:99:
d0:5f:85:ea:66:0f:39:08:8f:36:5d:33:dc:2b:22:
ba:05:0c:30:d9:30:92:e2:9c:38:aa:37:be:77:8a:
4b:d2:aa:b0:ce:3c:14:bb:d9:a3:0a:f0:84:7a:ba:
c6:d1:1b:65:d4:c4:86:09:05:53:37:ac:c8:49:ac:
15:36:64:78:da:cb:27:c5:ec:72:d2:ca:3f:6b:d3:
00:07:41:37:3f:49:f4:e7:f1:52:c5:78:b7:a8:2e:
7d:5d:4c:a4:0d:41:b2:bd:23:75:38:3a:be:88:b7:
ba:dd:6c:4e:86:f7:b8:4c:e3:c0:5d:92:72:d4:32:
c9:7f:46:0b:03:21:e1:d8:45:6c:5f:0e:0e:29:e6:
f4:63:38:91:1c:35:b6:97:d4:6f:80:0c:f0:30:a2:
16:03:4e:c9:fa:c6:e6:e8:53:c1:2b:a0:ee:82:79:
c2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A3:0D:59:BB:9F:39:66:1C:0F:70:03:22:55:1C:5D:E8:0C:97:16
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b06ce502-fa27-4c23-8a84-d9f270ef6de4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
52:eb:bd:80:83:e2:36:fe:15:d3:d5:f2:3d:93:0b:27:df:12:
fb:6e:54:8e:56:a9:24:f8:61:f8:bd:2b:a9:43:e6:d4:6a:5d:
ac:d0:63:a8:8a:9e:53:82:f2:bb:cc:f1:2d:85:cc:49:5b:d3:
44:f0:7a:e4:71:74:ee:de:16:89:a9:40:1c:ac:44:bf:00:26:
94:4a:94:59:f8:9c:2e:9a:d7:a2:76:f1:fc:51:9e:dc:6f:ab:
ca:55:e9:af:28:b1:73:d0:97:e2:62:13:6b:ed:5d:90:a0:b8:
93:cb:dc:b0:c5:b4:b6:fa:3e:ff:ff:46:72:7b:ca:cc:a7:12:
cc:03:47:8a:71:4b:ac:75:cc:d3:1d:1a:7b:cf:1e:2d:1b:ee:
b0:d7:2e:b2:01:c0:a1:a1:00:05:07:19:66:ed:59:a0:13:2a:
d9:b6:2f:a5:a5:96:7d:55:9b:4c:29:49:8e:ba:d6:1a:c0:c6:
0f:43:32:44:4e:4a:bd:1f:0e:f1:9d:bd:7f:34:81:e0:06:de:
1c:02:85:d2:8d:52:57:4e:78:27:25:27:6a:55:b2:99:d7:90:
29:d7:2b:7b:11:34:ad:d9:9e:c3:df:cf:bc:5e:31:29:d1:db:
d5:b1:ed:e2:3d:13:0f:a9:5a:10:9e:b8:b6:51:d5:f3:2c:b9:
fe:6c:5b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:11:54 2025 by rpki-client