Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c844c22d-116e-4c87-b553-4bcafc31083b.roa
File: c844c22d-116e-4c87-b553-4bcafc31083b.roa (raw, json)
Hash identifier: oQ6Tu6FT04NtsNrJA5Cp9cWt1UK8+n3WthniaUCkFu0=
Subject key identifier: B8:2A:89:11:64:63:0E:0D:92:6B:ED:1C:BD:10:63:46:54:EC:FC:41
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 12378EF90AB2095C99C4760C9778EE4E9ABE9FD0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c844c22d-116e-4c87-b553-4bcafc31083b.roa
Signing time: Mon 04 Dec 2023 00:00:00 +0000
ROA not before: Mon 04 Dec 2023 00:00:00 +0000
ROA not after: Mon 08 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:37:8e:f9:0a:b2:09:5c:99:c4:76:0c:97:78:ee:4e:9a:be:9f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 4 00:00:00 2023 GMT
Not After : Jan 8 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7e:9e:d6:ce:d0:e8:f8:4c:75:f7:ff:fb:39:
8e:d6:70:6a:22:b6:c5:c3:c6:be:66:d5:ed:b4:47:
48:c2:8b:4f:a6:66:c6:44:53:2b:5e:8c:07:27:6c:
f0:e0:12:6d:03:c0:21:12:36:a6:a2:7e:a0:74:8e:
68:04:9e:a6:28:c8:0b:97:de:bd:0a:8a:b3:b9:0c:
49:f8:09:1b:a2:67:07:4d:63:0e:7f:a6:ab:e6:c9:
da:a6:4d:f0:97:d7:15:c3:27:f3:fb:90:b0:7f:38:
a1:37:6d:3a:ad:32:12:f8:d6:53:0c:b7:48:a2:24:
3a:08:77:3d:b8:e0:9f:ff:67:50:83:a4:cc:ce:16:
64:c5:30:81:24:2e:c2:38:d2:ad:8c:aa:37:c4:65:
d2:ea:96:11:2b:e1:5c:8c:3e:3e:62:6f:0b:33:55:
a0:41:75:53:01:f3:c3:d9:13:c0:c0:2f:c2:2f:a5:
d0:00:44:5f:f9:49:8c:ac:bb:48:6f:62:cb:a6:1f:
19:44:b1:33:9a:8d:ff:32:76:df:49:d7:7d:e4:7d:
82:db:42:70:2e:28:04:c6:f1:56:7b:b8:c5:03:29:
a5:55:4b:ae:5e:8b:6c:3d:17:f2:cb:bd:93:4f:9f:
9b:ad:a8:2b:f8:a4:d9:7d:eb:a1:24:84:b3:40:d7:
46:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2A:89:11:64:63:0E:0D:92:6B:ED:1C:BD:10:63:46:54:EC:FC:41
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c844c22d-116e-4c87-b553-4bcafc31083b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
03:8a:5d:70:dd:c8:fc:43:b4:08:9b:e2:27:8d:3a:c9:bf:65:
25:cb:c8:90:9a:f4:73:df:ca:7e:9a:cf:fc:b6:af:db:e1:62:
58:12:85:e2:d9:35:f7:df:63:bf:03:a1:0a:58:a1:16:86:d7:
be:19:58:fb:26:96:98:82:cb:5d:af:cf:3d:92:e1:36:5e:98:
25:fb:6f:67:99:73:e0:2c:ce:27:3f:a2:b9:72:e6:d9:9b:c9:
1a:9c:e2:dc:a0:1b:39:0f:a6:20:b5:7d:f9:a9:63:53:c4:e2:
e6:86:6e:25:18:d7:d3:8e:4c:a6:9b:bb:92:51:d8:d4:ed:b5:
c9:7b:79:cd:15:90:b1:15:d3:10:60:ad:80:ec:a3:c7:c8:b7:
34:d2:67:45:68:ce:02:1a:cc:d3:85:f1:2a:2c:53:9d:ff:7d:
e3:35:a7:dc:71:21:dc:de:e2:74:ed:62:dc:ed:a9:04:2b:08:
14:b6:64:66:37:b3:f4:4a:fd:10:88:75:16:2d:2d:45:dc:a5:
9f:8b:87:2b:3b:41:4b:be:d6:6a:e8:7e:8b:c5:0f:45:1f:6a:
a1:d1:55:cd:66:48:a7:ca:0b:9e:3c:a7:60:09:95:73:f1:7e:
41:5c:ca:d9:8c:1f:04:8f:87:cd:8b:42:cc:e1:81:8e:cd:4c:
36:f9:55:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:32:52 2025 by rpki-client