Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b14b4be8-7bff-41ba-b0f8-6eb4986906f4.roa
File: b14b4be8-7bff-41ba-b0f8-6eb4986906f4.roa (raw, json)
Hash identifier: 4R9bfQ5MVNHj2h5C6Qhm0kHncoI896SkM9JjhgvlnXw=
Subject key identifier: CB:35:02:D3:16:4B:D2:A0:FB:43:30:EB:81:40:9E:59:92:D7:36:64
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 08DDE857D9C35A887D097C002539DA6D7A6111C7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b14b4be8-7bff-41ba-b0f8-6eb4986906f4.roa
Signing time: Tue 25 Mar 2025 02:38:16 +0000
ROA not before: Tue 25 Mar 2025 02:38:16 +0000
ROA not after: Tue 29 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:dd:e8:57:d9:c3:5a:88:7d:09:7c:00:25:39:da:6d:7a:61:11:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 25 02:38:16 2025 GMT
Not After : Apr 29 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:7e:b1:af:0c:d9:00:f1:d1:06:38:cd:05:
f2:4b:50:64:74:67:17:b6:10:43:e9:4e:f8:11:38:
dc:6f:c6:3e:9a:43:eb:72:11:f6:15:d2:04:01:f3:
9c:28:bf:0e:10:dd:6c:53:31:8e:65:5c:c1:5e:d5:
aa:46:16:bb:99:25:35:3b:fb:3e:bd:14:cc:ab:6d:
f1:b0:1d:7c:14:00:4f:80:75:38:8f:84:b1:d2:68:
f1:04:22:f8:71:1f:de:ca:5f:1c:75:e7:46:9a:d1:
f7:c4:a5:a5:b1:79:22:19:92:ab:85:5e:7e:c4:27:
5c:87:07:57:ef:21:93:51:60:d6:19:98:e2:9b:fe:
73:22:68:56:14:43:01:2f:d7:69:10:0e:d1:63:32:
b3:b4:e2:73:bd:c1:24:47:99:dc:95:91:b7:36:8d:
dd:c3:60:dd:a0:ed:ca:08:bb:fb:e4:ab:90:93:0c:
00:1e:64:4b:46:4f:df:93:ca:67:43:c3:8e:ce:37:
71:e6:bb:59:7a:81:85:1c:a0:e3:ab:a5:b7:39:25:
80:e9:39:25:55:3e:aa:95:96:c6:1c:9d:4d:77:cd:
20:5b:7e:75:d6:e9:6b:af:de:e6:ca:50:62:b3:02:
2c:10:df:e9:e8:d2:44:77:94:d8:8a:12:42:7f:9a:
14:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:35:02:D3:16:4B:D2:A0:FB:43:30:EB:81:40:9E:59:92:D7:36:64
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b14b4be8-7bff-41ba-b0f8-6eb4986906f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:f8:cb:8c:9a:16:21:47:ec:2a:06:ab:a5:c4:aa:c1:0e:07:
b4:9a:c7:ba:69:6b:44:80:65:28:39:a2:d7:34:13:fd:0f:84:
73:47:cd:ac:2d:be:bc:17:34:d9:a6:d3:b1:4c:c0:dc:c6:ff:
71:7c:88:85:b1:79:04:63:42:63:d4:5b:ef:72:bb:6e:6d:19:
39:73:ff:ce:0a:94:1a:a8:66:fb:e6:f2:97:12:47:f2:a9:75:
76:74:77:47:fa:c7:94:9e:ba:67:0d:04:5d:5b:95:25:18:98:
c1:e0:ad:8a:3a:b8:c5:3c:54:13:4a:3c:c2:b9:c3:07:54:ee:
6d:bd:ea:a9:c3:d2:3f:ac:52:f8:7b:a8:9c:38:3f:14:3b:e7:
df:50:8e:47:99:75:c5:a8:fe:f9:65:d3:ca:c2:2c:b1:aa:91:
9a:79:42:a8:14:ae:62:82:16:63:93:bc:69:2b:4c:88:38:dc:
1e:49:06:ed:0e:35:6d:bf:6e:eb:2d:7d:86:21:ae:f3:69:fc:
de:1d:00:d5:f9:90:55:7c:d1:c0:1e:7d:8a:87:21:50:e5:0a:
57:78:cd:7b:ee:b5:a0:6f:c1:6f:1e:bb:e1:82:c5:8b:f7:de:
6c:8b:91:11:25:39:39:c1:39:d6:dd:96:d2:bf:9d:5a:ad:84:
27:e1:2f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:50:28 2025 by rpki-client