Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bb3919c6-53cc-46f9-b39a-b01df153c405.roa
File: bb3919c6-53cc-46f9-b39a-b01df153c405.roa (raw, json)
Hash identifier: tapTrQJMM4uAYo98tEuN8XQDkvMYhDEQEJrZ2FCzIdU=
Subject key identifier: BE:8A:13:F6:A7:76:A9:7C:42:BD:79:6A:0E:C3:E0:A4:75:0D:50:59
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 130D5C3A2FD4D090F364F0CCA70C33C224EF60DC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bb3919c6-53cc-46f9-b39a-b01df153c405.roa
Signing time: Sun 09 Jun 2024 00:00:00 +0000
ROA not before: Sun 09 Jun 2024 00:00:00 +0000
ROA not after: Sun 14 Jul 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:0d:5c:3a:2f:d4:d0:90:f3:64:f0:cc:a7:0c:33:c2:24:ef:60:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 9 00:00:00 2024 GMT
Not After : Jul 14 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7b:b1:71:bc:26:62:3d:ae:94:db:e1:15:a5:
a3:90:b6:96:f2:f9:8e:ad:76:d0:d3:2d:79:63:1e:
e5:d9:94:9b:c6:5d:f5:bb:50:01:59:38:37:53:d2:
67:02:7e:e1:e2:04:38:e1:6f:9b:3f:73:c1:2f:86:
4c:a5:d7:b4:20:21:ec:00:98:08:7d:e1:3b:82:d6:
83:25:97:98:8c:09:71:9e:5b:4a:d1:b5:13:e1:e8:
ed:10:ca:77:f9:91:44:c4:57:4b:11:ce:3c:bd:14:
79:1d:18:ec:c3:9b:5c:2e:26:9a:10:30:7d:dd:15:
3b:a2:30:90:eb:22:54:7d:b6:cc:95:08:b0:0a:d2:
9b:6b:0a:e9:4c:23:8f:c1:1e:a8:de:a3:3b:67:9d:
74:78:64:77:33:d6:6e:22:68:b1:1b:67:ae:23:1c:
15:b5:9b:e9:de:42:ea:4d:b0:70:3f:d8:1c:a8:cd:
9e:0a:a7:59:83:16:36:a1:77:c2:12:3d:c7:66:6e:
71:e8:65:c3:92:fe:8b:c3:a8:42:9f:6f:78:4a:15:
b7:31:b5:97:ec:81:d8:3f:42:7a:40:b5:0e:05:c5:
e0:cb:04:ad:c5:15:2d:30:75:e6:0e:f0:d6:94:46:
aa:45:4e:d2:9f:25:5f:2e:c1:64:9f:c0:c4:ce:68:
bc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8A:13:F6:A7:76:A9:7C:42:BD:79:6A:0E:C3:E0:A4:75:0D:50:59
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bb3919c6-53cc-46f9-b39a-b01df153c405.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:99:03:94:04:7a:1f:10:1b:e9:48:97:20:a9:9d:a0:5b:c2:
fd:23:e9:fc:b0:2b:b5:d7:6c:a2:63:e2:c0:e9:9b:8b:1b:8e:
1f:19:ca:ca:e8:98:54:7c:3f:a9:69:b3:a6:e4:5a:ac:87:ea:
99:b8:61:93:63:3c:65:8b:d9:9e:a8:c2:19:f3:be:b2:33:b5:
71:bd:57:6c:d0:fe:c2:d2:fe:81:4f:a7:42:04:25:40:d7:10:
1a:1e:03:89:e2:93:96:e3:74:34:a4:90:d0:23:fa:ab:05:9d:
a4:2a:66:3a:6f:df:35:f0:5e:01:fa:b4:c7:4d:e1:77:e4:99:
ce:10:61:d8:71:75:e6:07:9e:a8:e1:4e:11:43:de:e3:76:c9:
62:d2:4c:e4:10:89:75:84:78:93:07:41:ed:84:d7:57:c7:67:
2a:04:2f:cf:db:f0:84:4c:23:f4:27:c8:7c:20:d9:8d:65:34:
ee:0a:d2:75:31:a1:64:01:81:fd:95:f3:63:ef:c7:b7:46:c9:
9e:4d:e3:12:4b:c6:0d:59:39:46:93:66:a3:42:ee:f5:b8:64:
ce:4e:ae:25:a8:6c:a6:8d:7a:e6:fc:3d:37:33:14:6e:8e:2e:
f5:b8:8a:bb:b0:c9:6a:99:ed:73:b2:c1:84:88:89:e1:52:4a:
63:15:f7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:25:10 2025 by rpki-client