Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cda824ee-e0d3-4e1e-944a-8963e64ec319.roa
File: cda824ee-e0d3-4e1e-944a-8963e64ec319.roa (raw, json)
Hash identifier: 3Zo4HAaOrdiZ1nU22GiwjYIJHVX4sjbYYo3pumm9/vQ=
Subject key identifier: 99:07:D4:0C:EB:F9:17:3F:D9:34:4C:4D:03:46:3F:85:AB:7A:7F:BA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 12EC6DB373A7688605E1A17F9BFF78C940A63C02
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cda824ee-e0d3-4e1e-944a-8963e64ec319.roa
Signing time: Thu 07 Dec 2023 00:00:00 +0000
ROA not before: Thu 07 Dec 2023 00:00:00 +0000
ROA not after: Thu 11 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:ec:6d:b3:73:a7:68:86:05:e1:a1:7f:9b:ff:78:c9:40:a6:3c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 7 00:00:00 2023 GMT
Not After : Jan 11 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:b9:71:b9:2e:32:0c:13:82:65:3a:71:74:
6b:b2:8e:94:88:aa:b7:b7:66:b6:9f:77:b7:22:b0:
17:cf:a2:6e:30:86:02:32:6d:07:fa:ac:3a:1c:5a:
a8:33:e3:c5:7b:56:6b:61:46:7a:c8:37:94:10:ee:
8d:0a:e4:85:f2:a2:dc:2f:5c:64:03:03:29:62:21:
d7:08:d0:70:d1:d0:5b:dd:a6:fc:4d:3d:a3:78:99:
48:e0:fb:0b:1d:97:9e:b7:24:ad:db:88:f2:26:7a:
50:36:1a:c5:64:26:5a:fb:1b:82:43:27:28:5f:e1:
c4:8f:35:10:9a:37:20:02:31:3a:7e:ce:95:36:f2:
77:47:c0:ba:09:21:c8:9c:88:62:61:cc:b3:e6:74:
a6:c3:d4:5e:d6:aa:22:ce:ab:e4:a7:a3:63:2e:a5:
60:13:51:6c:ae:29:51:3c:58:98:53:97:88:b2:aa:
df:c4:d6:84:9d:e9:9b:bf:50:92:a6:c3:87:d4:2d:
9f:62:f5:c2:75:9f:9a:2c:5f:48:b5:30:c8:b1:9d:
04:bf:3b:73:ee:54:37:c7:9f:5a:8f:47:c8:07:8a:
c5:b9:e0:ef:21:15:74:8d:02:68:2e:54:14:98:f5:
0c:60:28:56:b3:fc:d1:1b:7c:51:d2:34:66:90:6e:
3a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:07:D4:0C:EB:F9:17:3F:D9:34:4C:4D:03:46:3F:85:AB:7A:7F:BA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cda824ee-e0d3-4e1e-944a-8963e64ec319.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
36:30:11:5b:ba:75:eb:74:b2:21:bd:57:c4:9c:f5:bf:1e:50:
ca:c3:8f:c9:2b:1d:88:44:8b:37:c3:c1:54:91:5d:b2:f1:39:
80:8e:70:ff:b2:01:fb:f2:2c:a0:e1:00:83:2b:f3:16:b1:a0:
91:24:04:22:23:2a:82:9f:99:6d:37:b8:da:f5:80:62:c7:d2:
d6:c5:88:3d:99:6a:0d:c0:09:cb:04:98:ca:04:7a:4a:09:7b:
aa:78:d1:6a:1f:32:43:27:e1:48:4a:e4:6c:2f:b7:61:66:00:
e7:2d:f8:9c:fa:29:8f:77:60:65:99:a8:65:16:e7:51:7d:f6:
fd:73:c3:53:e7:17:35:20:25:97:75:7b:6a:92:7e:2f:2c:e7:
51:53:9a:27:72:a2:b2:32:a9:29:0e:96:ba:cc:99:5d:ea:91:
d8:f5:89:3f:79:95:ec:33:50:aa:c4:ba:cb:ff:18:32:17:6a:
8c:c5:aa:fc:44:00:c2:35:b0:77:52:f5:03:42:76:8b:f3:71:
f8:6c:f7:e9:5a:5b:af:3e:fb:d9:cd:6a:2c:c6:ca:4d:5f:d7:
b4:5a:00:b9:69:12:a5:9f:e8:df:eb:3b:92:6d:05:19:e8:8e:
e0:b4:87:2a:29:f4:de:b9:3f:cb:04:11:8e:ad:f8:e5:14:72:
4f:46:89:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:58:33 2025 by rpki-client