Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c425db96-115a-4293-a409-f4be0377af7e.roa
File: c425db96-115a-4293-a409-f4be0377af7e.roa (raw, json)
Hash identifier: o6E5jS0sq58U6rxHE1bGAyGOzVfUeISEXCQ6y6bjww4=
Subject key identifier: 47:7F:6E:78:76:65:D0:43:DC:34:77:A9:FB:51:14:25:D4:6C:65:BC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2A4BB76CBE89FBB67D6EA24C81C4CB4D1412B09F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c425db96-115a-4293-a409-f4be0377af7e.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:4b:b7:6c:be:89:fb:b6:7d:6e:a2:4c:81:c4:cb:4d:14:12:b0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c8:13:77:7c:55:94:91:7e:94:ac:83:b8:44:
80:15:0d:a7:0a:bd:9d:66:0d:b1:c6:72:e8:40:fe:
f8:03:c0:17:af:72:5a:02:12:2e:4d:2d:7f:a5:dc:
19:ea:8f:07:6d:d1:07:6c:c4:8d:1f:f8:26:40:c8:
a9:ee:a9:dd:20:4f:e5:f1:2e:17:4f:65:50:94:ab:
b3:49:63:9b:df:01:57:d3:8f:e1:ff:74:6f:fb:52:
01:85:52:0a:13:33:6b:19:48:81:d1:58:db:20:eb:
31:2e:a9:5d:d9:f0:6c:94:72:ff:e7:ac:a7:55:74:
10:80:dc:58:f5:ca:e9:f1:21:75:ee:85:68:4d:94:
c7:15:f8:10:53:97:6b:c2:d2:45:2d:b9:f9:4c:7f:
d6:6e:1b:3d:80:20:35:f1:74:2d:d8:e3:e1:28:61:
fa:d5:f7:19:c6:18:15:b6:78:15:90:e1:ac:6e:e1:
4d:ef:3d:32:07:cc:63:9e:24:a5:c0:29:d3:98:20:
f6:4d:28:ea:a1:e2:af:d6:1f:e6:6a:95:4c:57:7b:
bb:82:7a:7f:2f:2a:91:ea:23:c5:7f:7b:70:f2:69:
4a:da:ed:20:3c:81:89:fb:8c:c2:ba:5c:54:42:e8:
03:53:fc:9c:7c:7c:50:89:b5:49:15:4c:67:f8:da:
08:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7F:6E:78:76:65:D0:43:DC:34:77:A9:FB:51:14:25:D4:6C:65:BC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c425db96-115a-4293-a409-f4be0377af7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
43:41:aa:07:ea:ae:0d:5a:c2:93:2e:5d:32:e6:d9:a4:8d:e2:
5a:d1:3c:d0:ed:ad:84:01:21:6a:47:30:8c:e1:61:63:0a:bc:
08:16:bd:61:cf:6b:33:24:68:50:3b:29:e4:e7:6e:26:a6:d3:
e0:c3:9b:72:92:03:0e:af:1a:ee:ef:7b:85:f1:5c:55:c3:08:
90:fd:8b:bd:09:90:99:fe:b4:bd:59:c0:a8:32:f0:e2:04:fa:
5e:b1:32:66:04:c0:82:dc:12:1a:80:98:74:3b:f4:f9:e1:a3:
01:22:9b:da:e4:d1:e5:62:22:74:c1:ac:5f:ed:90:9b:6b:98:
da:90:45:ba:75:25:89:70:1f:69:f0:7a:fe:87:ba:7c:e6:61:
a2:38:f3:f1:6f:8f:b6:e1:dd:25:4c:73:fe:bc:3c:cd:22:1b:
34:8b:05:4c:87:19:fd:89:8f:d1:94:78:0c:3e:dc:74:01:57:
be:48:c3:9e:c8:ff:83:b4:4f:73:1c:21:56:a8:17:fb:0f:ae:
3b:61:52:ba:69:9c:90:d7:91:83:e0:48:eb:55:53:da:4e:c2:
37:83:de:7d:14:09:73:81:e1:ea:ac:86:b7:a2:8b:fe:ff:b3:
19:31:27:6f:c6:2f:c8:83:74:5c:60:e2:31:02:d1:12:d2:d8:
98:eb:89:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:18:40 2025 by rpki-client