Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b8805e8f-465c-412b-994d-fd8cbdb37a9f.roa
File: b8805e8f-465c-412b-994d-fd8cbdb37a9f.roa (raw, json)
Hash identifier: 030WNPpN6iKc6S6NEbpDAvExSgRot9fXPGEmL+JQQNo=
Subject key identifier: 70:9C:CA:DC:64:ED:DF:F8:86:EE:0D:74:E4:7A:53:4E:E4:E2:79:43
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 176810FF42A15AE76D1243CB7754BB88C4F296EA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b8805e8f-465c-412b-994d-fd8cbdb37a9f.roa
Signing time: Wed 20 Dec 2023 00:00:00 +0000
ROA not before: Wed 20 Dec 2023 00:00:00 +0000
ROA not after: Wed 24 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:68:10:ff:42:a1:5a:e7:6d:12:43:cb:77:54:bb:88:c4:f2:96:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 20 00:00:00 2023 GMT
Not After : Jan 24 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8f:0d:98:42:a3:50:71:c7:96:ea:3c:f3:31:
c8:ca:e3:c8:be:a9:8e:ef:71:b3:ea:99:b0:7b:a0:
06:79:61:f2:9e:bf:67:2a:c8:8c:02:ad:9a:cf:03:
b2:8f:90:d9:49:88:77:60:e3:af:8b:5a:45:4e:eb:
ae:ff:61:6d:b5:eb:18:8c:71:a3:a8:df:41:ed:62:
c6:79:e5:a3:8f:82:81:1f:71:0b:c9:7e:8f:1a:0e:
f2:ad:90:95:28:7f:7a:aa:a2:e7:8c:61:79:63:96:
80:a1:ce:0a:b1:e4:f6:6d:98:08:2f:4c:50:da:d8:
03:fc:bb:3a:73:8e:1e:bd:54:59:dd:e5:76:a8:c0:
5b:c3:77:13:76:3f:9c:93:27:68:9b:28:96:12:f1:
a5:47:dd:ca:09:17:87:48:ef:97:54:b2:bd:57:7d:
1b:28:40:4c:4d:d8:ab:b9:86:92:cf:80:8d:ec:8a:
b3:25:4d:35:74:69:63:3a:d8:f4:c9:39:1e:36:16:
f9:16:57:fb:aa:57:64:6d:01:aa:03:78:be:e0:dc:
ee:e6:bc:a3:1a:32:04:0f:20:fe:88:c7:3e:a2:8d:
53:4a:80:0b:34:50:8a:7b:e1:ae:98:13:9e:e6:b2:
c9:b7:4b:75:af:54:ad:61:1f:f0:54:1a:57:46:23:
7e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9C:CA:DC:64:ED:DF:F8:86:EE:0D:74:E4:7A:53:4E:E4:E2:79:43
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b8805e8f-465c-412b-994d-fd8cbdb37a9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
49:fc:7a:6e:22:59:d8:9d:6f:6b:a4:31:f1:c1:c4:22:89:4c:
40:d7:12:d5:4f:71:18:76:3b:aa:30:0f:72:b7:2e:d6:b4:f8:
c7:3e:7f:57:67:d3:8d:2b:19:2e:d1:a8:1d:86:cd:17:0d:f0:
41:73:99:ce:4e:90:75:4b:9c:65:25:7b:05:a0:fb:01:00:11:
78:c8:8a:2a:dc:35:4e:e0:19:ae:0b:90:ad:c1:ed:f8:30:79:
5c:96:a2:f8:c2:83:c2:12:50:8f:f9:c6:0a:cd:97:81:e8:4f:
7a:19:c4:fa:30:8d:b9:92:d3:5b:c8:f3:f4:d4:77:7a:a8:13:
d3:a1:7c:d5:c0:45:1b:39:61:7f:2e:a1:52:29:2d:df:a8:91:
21:a6:a0:8c:6c:c4:6d:19:61:b6:2e:f8:5f:55:fa:fa:4d:9a:
a1:ac:f2:ef:90:da:b8:49:30:26:2d:da:ab:37:d1:4e:79:a1:
aa:71:1b:71:35:87:0c:15:43:a5:b1:47:4f:42:de:19:b5:80:
0a:c9:f8:41:17:01:46:ec:7e:a0:a6:b7:c0:80:ae:dd:3d:71:
0e:79:f9:85:1c:fa:f3:71:45:9b:65:5e:13:9c:b1:ed:4a:34:
1d:ea:32:da:d8:ad:08:ac:b0:3a:17:1d:ae:46:71:c8:c8:fc:
07:19:2d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:00:34 2025 by rpki-client