Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cbd04906-e374-45a1-8854-27f93b08d708.roa
File: cbd04906-e374-45a1-8854-27f93b08d708.roa (raw, json)
Hash identifier: SMTS80UwwYLRKtRJTm6Zq2x5NUHCXLkXXjFjeGtbMts=
Subject key identifier: 23:EF:6F:EC:F7:3A:B3:D7:C2:07:27:CE:21:4F:05:D5:A0:54:29:A1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3316BBAAF6116AD1508803279826520136AFB7A0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cbd04906-e374-45a1-8854-27f93b08d708.roa
Signing time: Sat 05 Aug 2023 00:00:00 +0000
ROA not before: Sat 05 Aug 2023 00:00:00 +0000
ROA not after: Sat 09 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:16:bb:aa:f6:11:6a:d1:50:88:03:27:98:26:52:01:36:af:b7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 5 00:00:00 2023 GMT
Not After : Sep 9 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:85:c9:3a:05:f1:64:ba:d1:c8:b8:62:94:
87:3e:59:da:03:68:92:e3:26:71:fc:94:10:14:39:
ab:9b:81:50:fc:a5:5c:8f:64:d3:38:30:f2:fc:64:
6a:6f:9f:ed:c3:c8:e7:fb:f9:d8:0c:48:1d:ea:72:
86:1b:e7:dd:b0:ba:11:83:86:8b:51:b5:c6:e1:55:
fa:50:1c:b1:50:bc:48:ed:1c:f8:88:ad:36:69:28:
80:39:a5:22:d7:8c:8e:d2:88:43:ed:ba:6d:21:e5:
01:35:21:95:47:8e:59:b0:71:26:a5:d8:f9:f2:82:
48:26:09:bd:a0:af:dd:ef:a6:f5:30:32:15:c2:09:
f8:61:99:12:35:ea:a7:09:33:19:18:a1:2b:36:0a:
81:19:37:a3:0a:e1:c0:ca:df:d5:53:2d:3d:fe:8d:
83:e0:23:d6:17:04:5e:b3:c7:53:c0:c5:c4:73:aa:
ab:26:2c:df:91:3d:f4:19:13:a7:17:1c:be:a9:9b:
dd:6c:c0:37:fe:05:34:c2:e8:9a:cf:fd:44:05:18:
14:34:17:e8:d7:e1:1a:c6:9d:49:7b:c2:86:36:50:
93:30:fc:54:94:c5:5a:b5:c6:66:e3:6a:1d:59:da:
0d:00:29:3c:b4:7c:5d:6d:46:19:33:af:aa:44:82:
30:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EF:6F:EC:F7:3A:B3:D7:C2:07:27:CE:21:4F:05:D5:A0:54:29:A1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cbd04906-e374-45a1-8854-27f93b08d708.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e7:ce:ec:90:6e:d2:51:08:59:e6:22:46:84:01:66:95:fa:
65:15:22:cc:be:7a:b5:8f:1c:a9:a1:88:fa:12:99:a0:38:0e:
03:da:07:c9:05:20:34:c5:f0:e0:b8:a1:4c:e8:9d:92:cd:7d:
35:c1:af:08:79:88:89:dd:ce:4c:a7:3f:5e:51:76:57:b3:3a:
94:ef:02:f9:e0:af:4c:34:80:a4:ad:79:e2:c4:09:c7:fa:86:
1c:0d:f4:9d:83:43:53:fe:7a:81:c3:05:f0:b9:f9:78:4c:80:
bb:1a:0b:10:77:66:d8:48:6d:80:a5:a5:a5:cf:08:db:f2:25:
f5:ea:f9:7f:10:f3:5f:c4:07:b1:7a:12:60:0e:5f:8b:be:78:
fc:54:bd:93:dc:d7:17:4f:d9:25:be:85:f5:75:f5:07:93:31:
42:66:5f:2c:b4:4d:a3:8d:fb:65:59:44:a6:5b:bb:3c:fb:92:
4a:c7:97:ff:b4:57:c3:d4:56:eb:22:28:96:d1:bc:1b:28:70:
44:55:7d:d7:4a:81:e0:2f:6d:0e:72:1f:dd:33:88:16:03:ad:
e9:6f:4c:30:2e:a6:c7:c3:05:ed:2d:f3:da:dc:6c:2a:07:7f:
74:aa:db:8f:46:bd:69:33:8a:c3:8a:56:c7:e2:a2:61:79:dc:
00:e3:71:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:06:04 2025 by rpki-client