Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b552c03b-cd39-4f46-801c-7063b499482d.roa
File: b552c03b-cd39-4f46-801c-7063b499482d.roa (raw, json)
Hash identifier: H3W58vDPmvrtXZibtx+eUP3I7e8w7iXVYuaflUZFgjo=
Subject key identifier: FC:3A:CA:BC:75:93:68:92:5C:D0:8F:FA:F6:32:1B:42:54:C3:02:8B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 62F2D7B5C507DDB2F119575D75D57CD20DCD28B2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b552c03b-cd39-4f46-801c-7063b499482d.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:f2:d7:b5:c5:07:dd:b2:f1:19:57:5d:75:d5:7c:d2:0d:cd:28:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:ca:88:2e:b7:6b:b3:ec:79:a2:bc:3f:29:
56:8a:bd:81:1c:83:d3:fe:be:2b:c0:53:03:57:12:
27:e0:2d:d0:1f:88:7f:7e:ca:77:f2:01:39:6e:5f:
22:60:de:fd:39:4c:11:ab:65:5c:f5:d0:57:07:66:
e0:f5:de:82:4f:1a:33:ff:1f:dd:28:11:17:38:ff:
19:3b:f7:99:c4:ec:28:e9:e4:50:66:5d:c8:33:6c:
8c:93:3b:a5:58:44:8d:cc:a7:51:30:b0:65:c6:05:
97:83:7f:bd:4a:ed:b4:da:72:52:58:f0:b1:35:75:
38:96:23:f5:cf:53:99:c5:98:bc:ba:04:2c:e1:97:
43:2b:2a:40:d7:e5:1c:81:33:16:50:b3:38:c8:a8:
18:e1:ae:04:e8:db:69:87:64:c2:b1:74:dd:ab:79:
78:f6:95:4a:cb:2f:83:4d:cc:3b:36:ca:7c:bf:c9:
3b:84:af:f2:c2:20:56:b7:74:7d:1d:19:6d:f9:d2:
c3:6e:2f:87:5a:a7:b8:db:2e:0f:e9:87:0a:c4:d1:
66:63:34:22:d5:87:e8:89:a8:7e:b1:96:96:13:c8:
db:71:f0:b3:fa:bb:a7:15:1e:66:9a:a5:29:75:77:
d8:00:33:34:fe:9e:2e:8c:28:07:06:78:8d:45:ce:
63:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3A:CA:BC:75:93:68:92:5C:D0:8F:FA:F6:32:1B:42:54:C3:02:8B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b552c03b-cd39-4f46-801c-7063b499482d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
55:b0:36:28:ae:6d:41:65:33:a7:d1:b4:5d:26:ec:af:04:96:
0f:95:d5:b6:d9:d9:2d:d5:70:1a:6e:4f:7b:7e:13:2d:3c:c0:
62:de:51:ca:6e:77:b3:9c:f8:cb:08:88:0b:6f:eb:e5:db:25:
01:b0:2a:b6:0d:7e:7b:54:d2:9b:1a:f0:76:40:b6:9f:a8:bc:
6c:fc:4e:21:bc:37:19:41:07:c5:25:2c:cd:f3:84:e9:f2:0c:
d3:17:c5:da:c0:22:6a:b5:18:0f:40:d5:82:d4:91:aa:8e:9b:
75:64:2d:49:2d:d0:28:d6:09:b5:df:e9:68:51:c4:db:df:39:
81:0e:9d:b4:f4:01:50:80:94:62:44:43:b0:74:d5:e5:eb:d5:
6c:1f:65:d6:a6:16:5f:cc:da:7e:89:d7:1c:73:05:48:79:8c:
e0:a3:33:bb:90:97:f8:2f:35:46:0d:f9:1d:5c:1c:10:0d:c1:
39:84:b4:b2:d5:06:22:2c:fa:90:bf:39:21:8d:1e:63:71:b6:
63:7d:4e:7b:dc:cc:28:b3:d1:30:cb:a2:08:94:09:04:6d:0b:
0a:cc:a8:18:31:34:f0:4f:f3:d2:a6:02:ed:9f:44:fe:d4:db:
88:2f:e3:10:68:f4:a5:6c:cf:b7:97:cf:3f:b6:8c:e3:60:84:
33:44:ba:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:25:03 2025 by rpki-client