Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cae2c585-97c2-44a3-9130-7cfd524a2455.roa
File: cae2c585-97c2-44a3-9130-7cfd524a2455.roa (raw, json)
Hash identifier: lsVgdWIFcU/Dybsmkt++k2d044kdVjT2Vdzo53li/ZI=
Subject key identifier: 6E:BE:CE:E2:4C:F0:0A:10:E0:E4:78:9C:3B:CF:59:42:5F:AB:AA:65
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1B9B952CEB774C2E014506C87DA9E60C7437131D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cae2c585-97c2-44a3-9130-7cfd524a2455.roa
Signing time: Tue 17 Oct 2023 00:00:00 +0000
ROA not before: Tue 17 Oct 2023 00:00:00 +0000
ROA not after: Tue 21 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:9b:95:2c:eb:77:4c:2e:01:45:06:c8:7d:a9:e6:0c:74:37:13:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 17 00:00:00 2023 GMT
Not After : Nov 21 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9e:94:fe:a1:46:b3:7a:34:fa:eb:c7:de:5e:
57:df:b5:14:f1:84:8a:26:b4:88:28:ac:2b:b7:65:
6a:ba:94:cb:e8:94:a9:32:dc:7e:39:66:1c:83:76:
2d:27:cd:bc:33:36:b6:1d:39:04:b3:6b:83:54:84:
fd:7b:a6:b7:64:c2:e4:8f:12:a2:e1:07:c2:ac:6c:
84:37:fd:40:e4:45:4a:f6:f7:49:c8:c4:34:d0:3d:
e2:f7:a7:1e:e3:27:21:d3:22:27:a0:33:cb:aa:f2:
53:fd:b6:05:e9:bc:e0:74:03:93:90:f1:76:a4:cb:
fa:a0:73:ee:fb:d0:7d:75:55:31:e1:2f:b9:5b:c6:
c6:f9:5e:f8:2c:22:92:04:10:f8:39:86:f8:9b:66:
b6:16:79:8b:07:fb:e4:3a:cb:e8:31:76:a8:b5:98:
78:58:7d:dc:c8:dd:08:f4:99:a4:6d:1f:2b:f7:fe:
b8:bb:fa:36:db:cf:82:19:14:63:b8:87:05:31:c8:
87:a3:3c:d0:36:56:cf:d9:33:8b:d6:ce:90:46:2e:
86:4e:d9:74:8b:2f:db:d2:c0:f6:a4:b6:cf:d6:a5:
5f:61:89:3e:00:d2:1d:b6:3e:38:d5:84:7b:61:e9:
48:0f:f8:3b:11:76:2e:ef:f3:24:8e:5a:b6:4e:6a:
88:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BE:CE:E2:4C:F0:0A:10:E0:E4:78:9C:3B:CF:59:42:5F:AB:AA:65
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cae2c585-97c2-44a3-9130-7cfd524a2455.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:a5:df:06:75:5c:a0:4a:f8:d7:99:65:6b:3e:81:4f:72:7c:
65:03:31:5e:69:8c:b1:23:a2:cc:86:ea:13:0b:c5:15:fe:56:
c0:ff:b9:34:18:2a:5b:a7:54:72:48:0d:07:91:45:fa:a8:50:
31:f6:12:e8:4b:ec:c2:1d:88:85:48:be:43:1c:40:ac:73:3a:
fe:ed:c2:35:9c:10:ca:9a:73:a5:7f:df:51:f6:5d:99:75:e8:
97:09:d7:d9:8c:e8:99:64:df:64:54:3f:e5:4e:a7:8e:1f:10:
ee:07:e4:d3:fe:d8:03:85:32:3c:46:e0:e4:97:74:7b:2c:f4:
e7:04:01:7d:21:96:22:69:a9:76:ba:b7:74:42:1b:0e:3e:4d:
33:38:5d:ed:72:12:63:dd:9d:66:f3:3b:31:2e:71:b4:f7:f7:
c6:c9:b3:15:68:b1:88:a3:10:eb:a5:e3:2a:86:32:d6:3c:0b:
58:0c:44:d0:8e:78:3f:52:75:6b:48:6f:36:90:5d:2e:23:65:
db:fa:99:fa:2f:97:b1:32:56:9c:df:01:57:2a:ff:4b:27:20:
df:c3:a5:8d:71:28:a4:eb:97:df:ee:6d:bb:65:20:6d:c2:90:
be:09:b9:34:4a:11:0f:fa:e6:34:da:aa:85:d8:20:73:34:be:
a4:5b:57:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:37 2025 by rpki-client