Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c8e6b61f-d1c5-4b5b-ac5d-a9b568296056.roa
File: c8e6b61f-d1c5-4b5b-ac5d-a9b568296056.roa (raw, json)
Hash identifier: g4rfOXMxrVUZa0UPnbHlvmmlKErc70FocRJsfqiMKa0=
Subject key identifier: 96:5C:97:A0:6E:A8:DE:E6:17:1F:81:C9:04:CB:A8:EE:E1:C5:15:C6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 16C0350528D03CAF21B1AAEB9612381DCF2AF475
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c8e6b61f-d1c5-4b5b-ac5d-a9b568296056.roa
Signing time: Thu 06 Mar 2025 21:08:25 +0000
ROA not before: Thu 06 Mar 2025 21:08:25 +0000
ROA not after: Thu 10 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:c0:35:05:28:d0:3c:af:21:b1:aa:eb:96:12:38:1d:cf:2a:f4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 6 21:08:25 2025 GMT
Not After : Apr 10 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7f:fa:49:00:d4:16:08:ed:42:20:1c:9a:05:
14:fc:eb:64:fd:02:65:b2:14:0f:1f:14:4c:cb:38:
37:03:1c:c7:03:7f:cc:a2:ce:2c:9a:d1:d2:80:b9:
15:cd:cb:98:86:d7:e4:c0:06:c4:21:cc:80:4a:2a:
01:f2:5d:b6:1c:89:19:38:92:b7:c0:03:dc:e8:1f:
63:57:b0:5d:42:46:71:8d:48:17:d3:c4:37:9d:43:
af:12:54:7e:a7:00:dc:a4:53:28:f2:79:e4:e4:ab:
6d:bd:ff:5a:40:65:98:1b:2a:ce:7a:4c:27:76:33:
2d:ed:49:15:cc:32:67:78:6e:7e:34:be:f1:70:1c:
ec:c2:f5:d1:d6:0c:83:78:30:0f:23:a0:0c:51:c7:
57:b0:7d:ec:70:64:35:57:98:22:bf:73:f9:f0:d9:
e7:90:5a:66:b8:b3:74:ce:12:a6:f1:17:f2:b8:03:
68:b0:e5:95:3d:5a:35:07:cf:65:f0:e7:34:12:03:
4b:49:20:5c:33:26:15:4b:4f:55:d4:8c:01:eb:56:
bc:69:7a:ab:46:dd:fc:80:f1:08:12:94:31:94:92:
4a:1c:07:64:eb:ea:42:0a:f8:27:fb:19:53:19:da:
85:ca:da:f5:e6:25:0a:39:a9:1a:71:c6:2e:7b:bc:
c7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5C:97:A0:6E:A8:DE:E6:17:1F:81:C9:04:CB:A8:EE:E1:C5:15:C6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c8e6b61f-d1c5-4b5b-ac5d-a9b568296056.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
25:68:89:d4:b7:21:a4:dd:dd:51:aa:ac:ba:81:b6:3d:98:92:
4e:65:59:1f:cb:57:22:55:85:99:93:42:44:8f:e1:80:c5:8f:
25:5d:a1:e8:aa:dc:04:12:94:ea:6c:96:78:6d:8c:7b:b0:3a:
a8:20:e7:73:fd:8f:f6:dc:22:fa:c0:9f:57:93:5f:68:1d:59:
dd:b3:8a:37:23:70:09:c3:54:fc:f8:93:0c:8c:3c:c2:27:d1:
57:51:ac:42:eb:6c:25:0c:5a:13:e6:de:5a:51:56:e4:0b:55:
e7:35:dd:de:0e:75:61:02:35:e2:01:e1:6e:ce:8f:7d:df:b7:
0e:df:a2:ac:a2:65:40:6e:20:d2:74:16:ce:be:83:32:f1:2c:
39:b1:74:b6:32:f3:10:4a:fa:16:a6:23:ab:6b:77:2f:b9:16:
67:32:09:ad:77:6a:84:bc:9e:a4:35:0b:2a:1b:8a:84:d4:6d:
df:20:eb:d4:cb:eb:1e:f6:b3:8d:67:48:56:79:55:d4:ef:a7:
95:d5:33:eb:e6:70:38:f7:55:6d:4b:9f:02:0a:fa:ec:93:fc:
33:27:b0:dc:99:e0:8e:43:2f:30:a7:f5:65:61:7c:1e:a1:b3:
23:f5:fd:e0:14:57:07:88:81:17:e6:db:17:95:48:78:c0:77:
a1:87:7b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:46:28 2025 by rpki-client