Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bb416d9e-cf99-4cbb-9aa1-61e52f25f896.roa
File: bb416d9e-cf99-4cbb-9aa1-61e52f25f896.roa (raw, json)
Hash identifier: /WgFl1evf4xmDpvRF9D+uJChkLWFeGYutcM+rfUx+qg=
Subject key identifier: FF:12:B2:FA:E2:E8:DF:DA:CA:1E:70:8E:B6:CD:8B:AF:3A:31:8A:88
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4FA74360B278EFD883DF018E4ADBB9EEB18872D2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bb416d9e-cf99-4cbb-9aa1-61e52f25f896.roa
Signing time: Fri 14 Feb 2025 12:43:15 +0000
ROA not before: Fri 14 Feb 2025 12:43:15 +0000
ROA not after: Fri 21 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:a7:43:60:b2:78:ef:d8:83:df:01:8e:4a:db:b9:ee:b1:88:72:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 14 12:43:15 2025 GMT
Not After : Mar 21 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:a2:86:76:dd:15:10:d3:aa:29:4b:f3:2c:
66:28:02:19:5a:8a:71:e8:77:28:1a:7a:f3:51:a2:
65:de:4c:d7:8f:c7:ef:28:d3:6e:29:6b:43:14:0a:
69:4c:8a:c8:1e:ad:26:00:ed:d3:9b:50:1b:03:62:
f4:e2:9b:2c:c3:40:06:23:fb:f5:1e:8b:11:45:11:
68:06:42:54:d8:85:47:34:dc:10:42:3e:66:8c:bb:
d6:ae:e8:a1:32:b7:29:15:e5:06:67:6b:cd:b6:f1:
be:57:4c:ee:4c:6d:7e:80:a1:9c:02:09:93:20:8f:
99:f8:78:bd:59:d9:19:39:f8:f2:e3:b7:3e:7a:1e:
c4:cc:61:40:c2:1a:c7:5a:c7:62:8f:0c:93:64:08:
06:97:26:e1:b7:b5:95:2e:42:30:6b:cc:35:14:c2:
a9:b4:b4:4c:96:b3:a0:c8:1d:6b:3c:38:a4:e1:0d:
40:78:07:40:0e:71:68:f2:b6:2f:fe:1c:90:d6:dd:
54:e2:ce:e7:25:ef:ce:47:22:0b:07:bf:e8:b8:b4:
14:36:f9:d2:be:02:27:0c:df:31:67:10:ee:4f:61:
97:0e:54:24:ce:d4:2b:f3:8c:9c:37:81:c9:43:7a:
f0:a9:14:9c:91:54:ff:21:53:32:d8:05:c5:7c:8e:
b1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:12:B2:FA:E2:E8:DF:DA:CA:1E:70:8E:B6:CD:8B:AF:3A:31:8A:88
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bb416d9e-cf99-4cbb-9aa1-61e52f25f896.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:d7:81:06:86:84:42:55:51:96:ad:a7:e7:9d:f3:ca:46:b3:
e8:90:a5:8f:14:ff:90:c0:05:b5:37:b1:e3:e2:a5:22:71:77:
b0:ce:b8:6b:dd:4e:84:e7:82:df:8e:09:f6:d1:cd:1a:fd:ee:
91:06:0e:d9:a5:b9:e4:21:63:7b:fe:44:95:9e:76:ca:e4:67:
63:5d:9c:3b:e9:9e:0d:09:18:86:83:46:17:d9:96:bc:f3:2a:
38:1a:c4:fe:0d:19:01:1d:fe:d8:23:1b:51:2a:56:2f:41:5d:
2f:a2:a3:f3:8a:18:6c:49:26:84:33:35:56:d9:13:f1:05:a9:
a4:4c:a1:d3:b5:60:ea:93:8e:61:2f:c3:d3:82:36:36:cb:52:
49:97:17:ad:fe:31:d8:24:ba:b2:db:45:4a:b8:21:40:c6:a9:
b5:d8:43:93:f1:11:0d:7f:4b:68:83:7d:42:65:84:8b:34:d3:
5b:90:7e:b8:91:0b:67:bd:75:e9:71:43:28:52:17:ae:c5:12:
88:2d:c0:fc:fe:5a:f7:8d:63:99:11:e4:5e:56:4c:0c:a6:5b:
b1:4c:3f:20:a7:41:9f:30:40:3d:4e:b9:a1:b3:67:10:1a:11:
89:b7:6d:e1:93:b8:df:17:1b:f7:7a:df:49:3c:41:b2:72:31:
92:ce:82:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:33:27 2025 by rpki-client