Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d520fe8a-b97a-4dc6-9122-baae804e9090.roa
File: d520fe8a-b97a-4dc6-9122-baae804e9090.roa (raw, json)
Hash identifier: TwbDKw4KeAVC8G7DoiE2IXbEq1V4oYk69YVlROKOVzM=
Subject key identifier: 2E:66:A8:9A:DB:5E:C7:8F:C0:9C:3E:2B:E3:46:34:46:75:07:BD:A4
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4B7B5DF1B54B59CDD4A9659A78484D8A7C51A219
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d520fe8a-b97a-4dc6-9122-baae804e9090.roa
Signing time: Sun 16 Feb 2025 01:48:20 +0000
ROA not before: Sun 16 Feb 2025 01:48:20 +0000
ROA not after: Sun 23 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:7b:5d:f1:b5:4b:59:cd:d4:a9:65:9a:78:48:4d:8a:7c:51:a2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 16 01:48:20 2025 GMT
Not After : Mar 23 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7d:36:5a:d1:fa:4b:2b:cd:f5:2b:c7:9a:a3:
57:ac:1d:16:c4:39:1e:94:a7:15:4c:2c:15:9a:3b:
92:3c:49:72:6e:06:77:28:19:69:d5:4b:6e:9f:fd:
02:e1:a1:82:be:33:e1:78:d6:72:3b:c8:a9:3d:50:
7e:6a:87:03:bd:68:6e:d2:78:50:d1:78:d0:5f:8a:
ce:fd:82:80:42:37:89:93:5f:82:b3:03:2d:62:5a:
c9:48:ae:54:07:99:f4:62:65:94:b3:f0:21:3f:1b:
dd:a8:28:67:85:51:28:ee:cf:f9:fe:43:2e:8c:0c:
01:ab:05:32:f0:6d:f5:4e:92:e0:fc:01:c5:35:a6:
65:65:f7:ac:6d:39:96:75:50:29:94:39:3a:3e:51:
1b:b6:66:ff:73:ff:f8:9d:df:43:29:cf:c6:cc:11:
2f:21:de:dd:52:7b:91:23:00:7f:27:43:42:16:70:
c2:9f:4f:3d:52:04:89:06:74:a2:f8:92:27:24:46:
59:1e:46:39:7d:74:08:11:e1:e8:f1:3b:c6:2e:4e:
4e:16:4f:43:44:2f:bd:47:89:10:e6:4a:05:e2:15:
96:d5:97:9c:5b:13:e3:5d:94:ca:d1:85:c0:3c:32:
f2:1c:f2:c9:9c:e1:eb:bc:06:f9:cf:64:6f:17:0b:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:66:A8:9A:DB:5E:C7:8F:C0:9C:3E:2B:E3:46:34:46:75:07:BD:A4
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d520fe8a-b97a-4dc6-9122-baae804e9090.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
03:4e:00:5e:3a:00:9e:19:4b:f2:66:c5:92:3b:20:7d:2c:02:
30:6b:6e:44:91:ed:0c:f3:31:b6:ce:7a:74:b2:39:e2:7b:5f:
89:81:83:78:6b:b4:6e:97:86:c8:d8:5a:71:e8:ae:fa:c8:fc:
bb:34:2c:7c:ca:1f:49:9f:08:13:3a:a2:7e:d3:21:61:90:cb:
9b:16:48:52:01:2c:78:b0:9b:c1:0f:04:d7:fb:78:e2:cf:87:
50:68:04:89:8e:0c:4c:ca:4e:2b:86:f5:fd:12:52:17:73:2a:
0a:a4:19:a7:d1:0f:c7:9b:39:9d:d2:24:f8:8c:0a:ad:f3:ec:
b1:c2:9b:66:50:50:f3:3b:aa:e4:a4:75:ef:bf:df:80:a2:87:
c5:8a:4a:b1:b7:46:7c:7d:c1:76:7e:84:eb:f1:fc:36:36:b4:
cd:61:cb:a8:bf:ca:81:65:3d:f0:1c:7b:4f:9d:c7:23:c8:3f:
b6:41:cc:98:84:34:d1:8a:16:66:67:c4:0f:a8:05:df:14:bb:
a4:52:a8:c5:d2:c6:38:ee:d8:a8:50:99:3b:96:10:68:fa:94:
9f:02:3c:40:7e:cd:8f:0a:87:dc:a7:63:ad:a9:cb:2c:3a:28:
7c:43:0f:82:e1:38:07:7a:96:c6:74:d1:3c:56:be:19:ff:e6:
c1:a1:0f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:38:57 2025 by rpki-client