Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d536316f-ab3e-45c4-9115-b0ed0e580433.roa
File: d536316f-ab3e-45c4-9115-b0ed0e580433.roa (raw, json)
Hash identifier: /OZNHnbvrk7WHXqsQcn4CVjdAcASrgpj/TgN2woaGX4=
Subject key identifier: 06:BA:22:B0:8E:E1:6D:DA:58:75:AB:03:83:FE:FE:78:61:E1:9D:BD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 64C3BA0A025CB69D8A0F60F588BE5626AEED2FA9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d536316f-ab3e-45c4-9115-b0ed0e580433.roa
Signing time: Fri 20 Sep 2024 00:00:00 +0000
ROA not before: Fri 20 Sep 2024 00:00:00 +0000
ROA not after: Fri 25 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:c3:ba:0a:02:5c:b6:9d:8a:0f:60:f5:88:be:56:26:ae:ed:2f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 20 00:00:00 2024 GMT
Not After : Oct 25 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d7:5a:7e:c9:b7:c9:61:ab:5f:47:42:10:7e:
4a:aa:90:3b:85:12:85:ee:94:3b:6c:55:b2:c5:e9:
d4:b5:4a:72:40:c9:ec:93:03:45:a6:f0:ab:f0:da:
a5:9a:05:a6:5c:56:a2:3f:1e:99:06:82:f8:7a:02:
be:86:5b:83:7f:3d:1f:d9:43:70:2f:36:f6:47:b0:
05:ba:2c:ce:22:a4:c9:c1:5f:22:b4:16:c4:a4:87:
53:5c:4b:8c:a9:a7:bf:17:da:53:26:ba:4f:65:1c:
5e:5e:d8:91:66:ce:18:b9:39:2a:33:95:10:f8:ba:
e2:93:df:a9:1c:56:f2:9f:8c:e3:a4:93:32:e5:63:
ec:c2:a9:b2:52:8e:7e:43:cb:5c:9f:a4:fd:eb:72:
c4:1b:5f:47:3c:6e:a2:5f:82:5a:79:ae:c2:a1:ea:
e7:28:da:37:f6:25:dc:5d:81:a9:0c:b5:6e:cf:dd:
ff:99:6a:f8:fd:e5:26:02:ea:83:15:5a:f9:f6:c5:
4f:bf:8e:b8:3b:eb:20:4b:0f:68:3d:19:02:c0:d8:
06:05:9e:26:12:2b:5c:39:8c:43:42:35:01:05:f2:
33:39:61:ac:a6:ca:48:30:f9:db:50:3e:f3:45:67:
b1:6b:47:4b:ab:77:ed:db:a9:28:86:e7:94:cd:a1:
bd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BA:22:B0:8E:E1:6D:DA:58:75:AB:03:83:FE:FE:78:61:E1:9D:BD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d536316f-ab3e-45c4-9115-b0ed0e580433.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
13:05:3b:2a:76:5e:93:c6:18:0b:0a:bc:f6:fb:6b:68:e8:e4:
56:a3:ee:a0:66:10:1a:6e:d0:4e:43:99:d7:ff:3b:40:dc:a9:
a1:f5:6a:d2:d1:82:f6:f9:f4:ad:2c:f0:6c:04:c6:da:35:9c:
9b:0c:50:eb:59:02:bc:b6:1a:86:d0:23:c1:c4:70:bb:93:9a:
bc:3a:da:b1:81:23:bf:45:48:c1:36:52:e1:8d:fa:d6:9f:dc:
47:ba:8d:14:bb:31:ad:eb:c6:96:75:31:29:2c:af:a7:73:c6:
ff:03:28:65:72:80:00:52:e6:6e:32:be:e1:6c:82:88:ce:9e:
05:ab:52:15:c1:6e:23:ef:23:26:5b:98:42:5c:6e:0c:7e:41:
cd:97:dc:45:22:9e:0c:70:57:c7:e9:ff:6e:75:43:42:f0:1d:
17:f9:b2:fd:2e:2d:46:95:c1:f1:2b:0d:4d:2c:75:53:f9:25:
11:79:5e:74:32:3c:7c:17:4c:8b:af:4b:f7:5f:5f:64:74:f1:
47:9c:1e:bb:2b:f1:49:4a:44:c6:b3:f4:82:51:2d:5a:8b:eb:
39:0d:8e:3c:3e:0f:3c:be:34:03:91:47:b9:dc:b3:1a:10:e5:
df:86:94:e2:ce:ed:2b:5a:e4:5d:b9:ce:c2:5d:30:e7:33:52:
bc:7e:d2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:13:51 2025 by rpki-client