Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b5f66e9b-1cda-42b8-9710-4bf4c5d2e691.roa
File: b5f66e9b-1cda-42b8-9710-4bf4c5d2e691.roa (raw, json)
Hash identifier: gOM3+lifQpYvaSTUpMV/cnsUPo0He3dCaOc0oZgkXAE=
Subject key identifier: 28:75:9C:9A:9A:E9:15:5D:0E:37:C4:59:12:9A:9A:2E:25:82:8D:59
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4767505DE7BC258C2F8E79202B683D59BFDD86B8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b5f66e9b-1cda-42b8-9710-4bf4c5d2e691.roa
Signing time: Tue 04 Feb 2025 00:00:00 +0000
ROA not before: Tue 04 Feb 2025 00:00:00 +0000
ROA not after: Tue 11 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:67:50:5d:e7:bc:25:8c:2f:8e:79:20:2b:68:3d:59:bf:dd:86:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 4 00:00:00 2025 GMT
Not After : Mar 11 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:b1:80:4b:ea:b1:85:5e:93:88:82:3b:44:
e5:92:e0:93:61:f1:24:58:10:6f:c4:7d:c6:32:1f:
0e:f8:48:6a:8b:6e:27:15:46:9c:71:b7:8c:12:62:
88:fb:04:18:98:a8:35:da:5f:7a:14:17:5f:a6:fb:
1e:24:98:0b:00:45:1a:71:dd:00:23:bb:47:fe:c0:
dc:d9:58:09:bc:f5:1d:a2:7f:91:35:14:10:8d:49:
2b:bb:1b:f4:02:75:6a:f3:46:bf:80:bf:51:75:8c:
2c:36:6b:0a:6c:21:c7:0b:e7:31:a5:36:e2:e9:56:
92:bb:6e:91:0b:dd:0d:7c:cb:55:56:e1:42:69:fb:
39:ca:82:d3:f0:58:12:47:40:82:70:94:05:5c:c6:
3c:2d:1d:31:5d:43:8b:a1:b0:76:a4:32:d4:37:57:
f3:9b:ad:a1:e7:2e:0c:ce:21:e1:52:fd:63:2e:34:
e4:0f:4c:53:85:64:87:b1:c7:ec:cb:83:0a:5d:77:
fd:a2:70:b2:02:f4:47:83:10:d8:d2:6a:b4:70:25:
9e:c7:ae:5f:f3:d7:05:df:3f:8b:eb:0b:14:52:d3:
f9:51:70:91:6e:51:6a:a0:3a:9d:79:e5:cf:4a:2a:
49:8b:bf:38:30:43:23:25:b6:ae:0c:e0:25:21:0e:
e8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:75:9C:9A:9A:E9:15:5D:0E:37:C4:59:12:9A:9A:2E:25:82:8D:59
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b5f66e9b-1cda-42b8-9710-4bf4c5d2e691.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:2e:ac:0b:6e:35:ea:4b:0a:a9:e0:fb:91:2a:17:e8:36:f6:
fa:05:f8:8c:38:e2:da:2b:4f:b3:7e:68:3b:81:55:4a:27:a4:
ab:5e:48:61:85:6c:70:d9:66:70:2e:83:fe:50:fd:ef:90:a5:
9f:c9:9f:ea:d6:f3:fa:dd:b4:84:d7:4a:16:de:99:33:57:1b:
09:a4:78:02:5d:f7:de:27:94:c5:ab:d1:7f:5f:5d:cc:f9:d3:
83:76:d4:8a:a5:82:81:5d:62:af:e5:b7:be:d0:bc:46:99:6d:
d7:0a:95:6c:d0:d5:72:6d:da:b8:15:66:77:c1:2d:10:c9:d4:
2b:e0:87:32:88:db:57:1e:2a:b7:34:e2:55:17:9d:72:5b:ac:
f3:bb:a3:47:ca:f6:2a:ad:e0:fa:eb:9b:c3:d1:99:8a:47:ab:
35:f4:92:df:11:8f:34:42:28:0f:38:29:98:b5:b6:23:fd:1f:
ae:d8:7f:d6:f6:a6:98:81:23:3b:db:55:86:f0:c3:39:17:34:
cb:ed:e1:ff:0f:7e:ef:4b:8e:e4:0d:ca:e9:80:3f:9b:33:ea:
8d:aa:1d:5d:03:d3:09:8b:ea:9d:81:78:34:3d:39:25:5f:71:
9c:dd:24:4b:b5:ee:da:69:a6:83:f2:33:79:11:9e:c3:a9:23:
76:2f:29:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:19:04 2025 by rpki-client