Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d528097a-d4fe-4de7-ae36-ecf6263cf3d7.roa
File: d528097a-d4fe-4de7-ae36-ecf6263cf3d7.roa (raw, json)
Hash identifier: N9l5MOxlr0ok1RUQHp5JniUhSvHpdcCMctiNaExPC1A=
Subject key identifier: 6B:82:98:20:3F:EE:AA:00:D3:87:C8:95:79:F2:1E:CF:FA:71:9C:0B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 357F1B33B7DD7698353759FF74750384C0AB7E9C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d528097a-d4fe-4de7-ae36-ecf6263cf3d7.roa
Signing time: Fri 08 Sep 2023 00:00:00 +0000
ROA not before: Fri 08 Sep 2023 00:00:00 +0000
ROA not after: Fri 13 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:7f:1b:33:b7:dd:76:98:35:37:59:ff:74:75:03:84:c0:ab:7e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 8 00:00:00 2023 GMT
Not After : Oct 13 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:41:19:9b:30:a5:41:46:95:96:42:d3:66:fe:
db:e9:a0:f7:12:77:d4:8c:4f:38:aa:52:69:b3:6a:
e6:a1:cf:79:5a:4e:72:c3:da:91:f5:76:2f:f0:78:
90:10:ea:90:cb:29:d9:1e:68:52:a4:c8:b1:cc:53:
73:10:db:44:ac:bd:47:ad:15:35:8a:2f:73:dc:20:
26:cb:cb:16:1c:31:bc:2d:0c:2b:91:21:dd:85:39:
d9:28:8f:bf:38:d4:5f:23:92:5f:8d:f6:94:a3:ab:
ef:80:7f:c9:1e:90:5b:f6:bd:a2:d3:14:dd:b3:1e:
f3:ad:fd:05:3c:c1:b0:b9:fd:a3:b6:ce:b3:98:17:
45:9d:0b:86:0e:bc:9c:a2:56:e5:59:58:cc:4a:3c:
26:ee:df:5c:0c:ac:53:0a:66:c3:b8:9b:f5:05:56:
b4:bd:6a:a6:ad:3f:6e:3c:c5:ec:29:6e:7a:4d:d8:
1f:78:2f:9c:76:9d:dd:dc:bc:e7:a7:46:75:f4:30:
83:79:99:2c:88:f5:c5:de:2a:1c:36:c3:05:66:2a:
74:53:c0:f5:af:a1:1e:f0:b4:8d:c0:c2:ee:f9:9f:
a9:a9:97:87:68:0b:1a:3e:5e:73:ad:3e:5e:6c:77:
aa:15:ee:b6:dd:b5:6b:00:f6:e5:90:74:4a:0c:a8:
2b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:82:98:20:3F:EE:AA:00:D3:87:C8:95:79:F2:1E:CF:FA:71:9C:0B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d528097a-d4fe-4de7-ae36-ecf6263cf3d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:64:a3:33:81:b6:97:6a:84:49:fa:34:24:af:41:1d:6d:c0:
a4:d1:d7:47:e3:00:87:f3:da:74:62:42:5b:80:38:19:ab:42:
1c:01:0d:8f:84:52:b5:87:4a:09:9a:80:83:bf:fd:cf:f3:37:
33:07:e8:c4:cd:44:f2:ce:58:6c:a6:41:48:57:aa:9a:7f:f6:
7f:fe:f7:5b:a6:5e:99:fb:0c:ea:54:ff:5a:84:7a:be:d3:45:
21:d9:d7:06:a0:04:e8:f4:4c:b0:9d:b0:52:36:12:ff:e6:8f:
6c:77:de:d2:30:2d:a8:ce:df:0e:7d:92:84:30:b7:aa:92:6b:
47:66:24:ff:5b:6d:cb:7c:69:43:5a:7f:be:4a:5f:bd:9b:88:
1f:42:6a:e3:87:48:cd:61:21:69:6b:1e:bb:27:5f:71:7b:fc:
2c:0e:9e:73:ba:5f:40:2d:3f:1e:69:5c:e6:f2:c3:10:d9:a3:
b7:cd:57:00:0d:c1:b2:c7:9a:60:75:27:47:32:3e:b1:8c:cd:
c4:02:a5:33:58:6f:74:ef:61:8a:3d:c8:d3:80:cd:47:e7:77:
36:f8:4d:cd:9d:11:ff:3d:af:77:1f:a1:eb:83:cf:28:a9:4a:
ae:f1:1d:8c:9a:8d:69:c1:af:74:dd:33:76:aa:76:3b:5a:0a:
18:f9:3c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:37 2025 by rpki-client