Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d8649173-ce02-47ae-a3f7-92f709e3dae4.roa
File: d8649173-ce02-47ae-a3f7-92f709e3dae4.roa (raw, json)
Hash identifier: 1bOykLQXijtqXIgM9rnYZPb8yjsr/CerELg9ZU30XaM=
Subject key identifier: BE:8A:A4:BA:0F:75:3F:8E:19:D6:49:AA:E9:BD:F1:BA:1A:89:E7:74
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0EABCAC7E2362A280E3047E23A7A8FB07FA7BD44
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d8649173-ce02-47ae-a3f7-92f709e3dae4.roa
Signing time: Mon 30 Oct 2023 00:00:00 +0000
ROA not before: Mon 30 Oct 2023 00:00:00 +0000
ROA not after: Mon 04 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:ab:ca:c7:e2:36:2a:28:0e:30:47:e2:3a:7a:8f:b0:7f:a7:bd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 30 00:00:00 2023 GMT
Not After : Dec 4 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:96:e5:ba:a8:5b:34:9d:e4:82:b6:2a:35:f0:
37:ee:ce:2a:ef:52:75:31:09:90:04:8f:3a:54:af:
30:19:ac:af:3e:7e:44:69:ab:fb:55:db:ab:82:cf:
20:95:26:51:15:a7:d3:84:f4:20:61:25:a2:1c:0c:
44:1d:ce:cc:04:8d:99:05:6b:c9:ce:ce:ca:b3:79:
53:20:cf:f5:9b:27:ef:24:fa:0e:0c:01:30:27:19:
44:8a:72:bf:bd:da:20:e2:e5:ad:6b:5b:67:c2:9b:
70:8e:ff:dd:f3:34:57:0a:d5:f3:5c:22:43:d7:c0:
44:70:1a:98:9b:30:ae:11:d5:a2:93:ed:f6:79:c2:
fe:51:58:56:bf:c2:6f:d2:f5:13:44:27:b6:0c:0a:
d3:84:0c:35:3b:98:c1:a7:50:7f:99:48:62:0d:e3:
e0:71:22:67:ad:77:e6:58:a1:fa:4e:29:7a:9a:76:
a0:11:54:6a:62:fd:4d:f6:8c:99:ea:d5:1d:74:5e:
aa:16:45:1f:4d:dd:66:fa:1b:5a:c0:f7:a8:17:99:
3a:02:05:bd:7e:8e:91:84:c7:92:c1:c0:2b:1d:9c:
b4:df:d4:2a:9f:8f:d9:ab:68:b6:73:dd:46:b4:10:
68:a9:d6:e6:da:ad:ac:e7:56:84:82:a9:a7:0b:5b:
62:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8A:A4:BA:0F:75:3F:8E:19:D6:49:AA:E9:BD:F1:BA:1A:89:E7:74
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d8649173-ce02-47ae-a3f7-92f709e3dae4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
20:e9:88:93:0a:f9:1d:51:a0:b6:c6:d6:56:52:67:83:27:e2:
73:3c:82:95:3e:cf:3c:14:bc:8f:b1:94:bc:df:a3:11:65:d4:
3b:c7:17:7e:6f:c6:99:66:d8:88:22:81:9f:63:8b:6d:4c:de:
4d:8d:56:3e:8e:20:2e:74:96:72:d3:a7:0b:90:3e:8a:e7:ba:
4e:ac:f1:71:dc:06:1a:1b:48:97:dc:c5:da:ed:c2:54:5e:39:
b6:50:08:64:38:f1:b0:83:99:16:b4:a7:94:ae:02:1b:2f:d8:
86:f5:00:34:4c:99:52:8f:43:ea:f8:54:25:25:e3:cc:54:5a:
4d:b7:a2:4a:91:18:9a:1e:3a:74:86:31:16:a4:2d:c5:19:05:
4a:79:ad:3d:62:07:f7:29:3f:8b:4d:80:f5:bb:a5:be:35:fd:
aa:ea:08:10:1c:88:40:78:25:c7:12:86:36:23:4e:c6:77:43:
16:11:79:8b:ed:f6:08:c0:06:61:c7:c3:1b:00:32:e7:80:df:
c0:3c:98:ab:2c:15:cf:8f:71:68:77:9e:2d:f5:44:18:92:fc:
49:90:9d:0f:a7:d0:4e:a8:ac:5e:b4:81:ce:34:e4:51:01:c5:
40:a8:6e:f9:71:7a:1b:2f:d2:07:18:0e:11:60:60:7e:d0:0d:
f2:40:de:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:54:08 2025 by rpki-client