Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d8dc5bbf-1622-4f99-9763-5c9c165d23a0.roa
File: d8dc5bbf-1622-4f99-9763-5c9c165d23a0.roa (raw, json)
Hash identifier: OSmv/6u+Ie4bvLj6BwASP/IDxVFtcMU/sXc2A8pipmo=
Subject key identifier: 96:5B:47:24:F0:73:A9:74:C4:23:A5:D7:B8:E6:5F:DB:31:50:4E:00
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 67CE4BC40136137BEC4AEEC1257EF0B06934D445
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d8dc5bbf-1622-4f99-9763-5c9c165d23a0.roa
Signing time: Thu 07 Nov 2024 00:00:00 +0000
ROA not before: Thu 07 Nov 2024 00:00:00 +0000
ROA not after: Thu 12 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:ce:4b:c4:01:36:13:7b:ec:4a:ee:c1:25:7e:f0:b0:69:34:d4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 7 00:00:00 2024 GMT
Not After : Dec 12 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:87:9c:7c:a1:9e:a6:74:ca:b0:5c:7b:55:24:
e7:3d:d3:37:a9:f1:3a:95:53:0e:ae:f7:8e:c6:e2:
a8:54:b5:26:4a:fb:d0:42:77:1c:13:6a:95:9b:ed:
ac:83:1a:29:12:c5:71:33:f0:5a:cc:b3:52:49:60:
6e:c0:0d:0c:f1:e8:3a:b2:5a:24:a5:cb:ed:77:6f:
7a:7e:e1:9d:b8:7b:84:85:09:c6:c1:9d:4f:73:88:
e5:82:b6:5d:a7:56:48:d1:6c:66:b2:5b:15:c0:57:
11:74:70:a8:51:7b:30:69:a5:fa:14:44:ca:9b:26:
a6:8b:3c:cd:37:6d:eb:2e:07:75:b9:14:43:1b:da:
ae:38:2c:22:54:1f:ee:44:61:10:12:43:9e:46:a5:
60:a7:15:29:0e:62:86:06:3f:05:ac:26:d8:f1:dc:
cc:e7:c3:cf:86:ec:7a:79:31:d6:c8:cb:f2:87:e9:
0a:5c:8e:1a:17:3d:a9:d4:43:c0:27:69:c8:95:7a:
d9:ed:55:2c:c6:57:c7:32:64:06:9a:72:c1:5a:b1:
0f:ca:e4:83:54:e4:a4:94:6c:59:0c:41:e6:84:41:
3e:a4:07:1b:37:94:5d:5f:90:47:56:65:a5:1e:0d:
9d:a8:c0:78:0f:46:9d:86:be:90:97:25:da:31:00:
53:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5B:47:24:F0:73:A9:74:C4:23:A5:D7:B8:E6:5F:DB:31:50:4E:00
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d8dc5bbf-1622-4f99-9763-5c9c165d23a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
10:be:4d:23:57:d1:f1:ac:80:0d:ce:bc:c8:37:05:81:d9:d7:
c8:3f:22:fb:e7:7b:c8:46:b3:6c:bb:29:57:8f:bc:dc:8d:2b:
4d:60:f8:7d:c2:a2:db:0a:af:b3:c8:78:8b:e6:05:04:20:4b:
c0:96:c6:83:28:94:4c:ca:e3:1c:23:63:c9:d9:46:b1:55:95:
b8:17:e3:7c:fd:92:92:ba:65:40:c3:49:35:37:fd:53:a0:57:
ea:dc:be:f1:32:e6:f0:20:6f:df:ba:22:f7:3f:de:ff:0d:d0:
46:bc:e0:62:4d:f8:e1:2e:0e:89:9e:42:16:62:df:00:e3:2f:
a7:aa:8a:28:d5:78:f7:7d:1a:de:31:2b:96:d0:6e:df:65:90:
a4:23:f5:d0:98:fc:4e:c8:62:65:13:d7:15:e2:c5:21:dd:47:
7c:30:22:8a:ea:c0:7f:2c:7c:94:d4:7c:8a:52:cc:c4:8f:f7:
a1:b2:53:13:7d:1f:73:2e:cd:00:5c:47:f6:7d:09:28:de:c9:
e6:1d:b9:8c:bc:6d:eb:d7:f6:a0:16:75:ce:a5:98:1a:c9:01:
09:8b:b2:56:ac:25:a6:3d:ad:3c:aa:62:0f:69:de:b5:3f:73:
87:8e:c7:96:8e:32:1f:3c:07:71:38:29:14:ff:3a:eb:5e:7f:
8e:23:de:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:16:04 2025 by rpki-client