Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d6463ebb-b15a-453a-ab84-a3ac4aaafbe1.roa
File: d6463ebb-b15a-453a-ab84-a3ac4aaafbe1.roa (raw, json)
Hash identifier: s5G2F+CDFrR4IVu1K9fE/PIC/iyIEq2UClRnxLLxv84=
Subject key identifier: 69:71:34:74:2C:F9:F6:C0:8D:65:1C:CA:24:0A:6F:CF:EE:09:A5:15
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 44F22424ED9FCB2C4A3BDE00025DC66D3C603FCA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d6463ebb-b15a-453a-ab84-a3ac4aaafbe1.roa
Signing time: Sun 16 Mar 2025 09:33:17 +0000
ROA not before: Sun 16 Mar 2025 09:33:17 +0000
ROA not after: Sun 20 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:f2:24:24:ed:9f:cb:2c:4a:3b:de:00:02:5d:c6:6d:3c:60:3f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 16 09:33:17 2025 GMT
Not After : Apr 20 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:a6:53:cf:90:22:1c:95:ef:0c:f4:c6:c3:
99:1a:b1:d1:6b:85:ab:e7:e9:9b:58:f2:ba:21:e8:
65:18:c8:9e:02:a1:ae:50:24:98:c7:93:85:78:8a:
cc:c4:e5:3d:42:26:38:bc:55:da:31:97:da:17:88:
83:fd:3a:4f:d0:e3:e4:55:ee:70:8f:69:3d:f7:eb:
ab:85:a3:c2:68:ef:65:9a:07:4c:26:24:df:6f:96:
a1:7d:4b:ed:a8:45:69:43:7c:50:7b:73:9d:24:c9:
34:85:df:d6:8b:57:36:be:59:7e:b5:85:41:ba:78:
5c:45:bf:4f:ee:42:86:1b:be:35:3a:8c:42:ea:fa:
6d:a2:d1:c0:17:cd:64:3b:9b:7f:3c:a2:5e:45:50:
7e:88:af:5b:2b:0f:8c:98:2d:a2:bc:88:98:ea:b9:
31:04:85:3e:8a:3d:6a:26:31:bb:2a:8f:32:f2:4c:
83:15:8a:35:24:f4:30:7b:cb:29:15:f0:41:41:31:
8d:30:3f:1e:72:17:07:e7:54:31:72:3a:bf:aa:0b:
78:25:9a:56:18:90:60:7f:7d:98:b5:c5:cd:04:ec:
76:b3:0a:fb:43:8f:ed:64:87:29:67:d6:89:a2:23:
2f:54:e2:9b:7d:40:63:7d:e3:d3:92:c5:21:bd:a4:
43:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:71:34:74:2C:F9:F6:C0:8D:65:1C:CA:24:0A:6F:CF:EE:09:A5:15
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d6463ebb-b15a-453a-ab84-a3ac4aaafbe1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
75:88:e4:dc:0d:ec:61:eb:b2:a4:eb:10:73:06:5b:e4:6e:39:
ec:96:1c:71:22:c2:ea:f5:9b:5b:a4:fd:bd:a1:18:e3:11:b5:
69:6e:52:08:7c:56:54:05:ff:e3:b9:59:b3:25:aa:5c:d6:fb:
85:c1:06:d2:ea:8a:e1:80:b9:e6:da:ed:bd:e1:09:0b:e4:54:
b8:f8:f9:c3:cb:7e:75:d1:02:d5:a2:88:3a:47:fe:9b:30:43:
86:2a:7d:e5:11:c3:bc:1f:ca:30:d4:a6:08:61:ed:a6:61:6d:
41:c8:2d:f0:9e:62:25:74:7a:a5:10:7b:7c:ef:29:ae:97:2b:
bb:09:0a:59:1d:80:ea:06:f7:f6:12:38:46:c9:77:2a:6b:01:
5d:1f:57:6a:a7:25:f1:e2:45:5b:cd:e6:47:10:d5:ab:a6:0e:
eb:3c:82:aa:11:8c:c8:70:65:6b:f7:fb:d8:15:6f:4a:ab:39:
59:55:09:0c:68:34:1f:b7:d6:ca:15:da:99:60:58:d7:4f:69:
31:db:a8:26:a3:1f:ef:9b:a2:a9:55:37:86:0a:6e:06:ee:98:
92:ad:29:fc:e9:a4:65:69:a2:a9:87:51:bd:c4:e9:ea:9a:e6:
59:b6:eb:0b:b3:06:5b:eb:61:eb:c6:f2:91:03:34:2e:da:c2:
af:45:df:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:46 2025 by rpki-client