Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d927fdeb-b740-4ae8-b620-bfb050abca4e.roa
File: d927fdeb-b740-4ae8-b620-bfb050abca4e.roa (raw, json)
Hash identifier: m95MkRxr0e/4Vxu9gyPUpU706kcvE2/6yn2aokWxpwI=
Subject key identifier: C3:08:40:C5:E9:3E:76:4A:D8:30:26:BF:E7:A6:BB:05:36:3A:D7:5C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7973979BC54998FC23C6C97AF17822363D5C7939
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d927fdeb-b740-4ae8-b620-bfb050abca4e.roa
Signing time: Wed 02 Aug 2023 00:00:00 +0000
ROA not before: Wed 02 Aug 2023 00:00:00 +0000
ROA not after: Wed 06 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:73:97:9b:c5:49:98:fc:23:c6:c9:7a:f1:78:22:36:3d:5c:79:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 2 00:00:00 2023 GMT
Not After : Sep 6 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:19:94:74:6a:c7:17:ab:a3:06:f1:8f:6a:70:
40:93:a0:7c:c9:01:7f:78:05:40:ef:0a:16:0b:6d:
49:19:d1:4b:43:71:2d:b9:31:8d:94:00:18:2d:ed:
3f:90:af:08:d4:24:7d:a0:59:2e:9c:85:92:32:1d:
ca:84:99:c6:55:24:f3:3e:31:28:9d:34:85:42:a7:
d8:d5:59:69:4e:6c:67:e2:1b:75:79:52:3c:83:bb:
9f:d2:84:d5:67:b5:2d:25:c7:53:a8:1f:f7:92:30:
87:04:af:db:f5:4a:8b:3e:09:0f:be:30:73:82:c7:
56:70:06:c4:1e:72:45:da:8c:86:4f:e5:a1:00:86:
24:76:c3:6d:89:c0:89:f1:4f:21:ed:ac:88:8d:04:
ef:2c:cb:5a:64:f1:b2:db:de:9f:ec:99:10:56:a3:
67:9c:6d:02:f1:77:74:a4:9a:8b:95:c3:83:7d:b0:
4b:f0:de:19:17:62:93:65:ad:c2:73:07:b0:3a:bf:
60:55:2f:27:e4:c0:71:70:29:9d:0e:43:ac:fb:f5:
c2:bd:8b:25:60:1d:7d:ed:2c:09:62:61:37:35:bc:
d2:43:07:b1:a2:e8:ed:4d:de:27:cb:b0:bd:5c:85:
38:ac:52:9a:ba:5c:86:68:6f:bc:65:df:5e:73:16:
01:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:08:40:C5:E9:3E:76:4A:D8:30:26:BF:E7:A6:BB:05:36:3A:D7:5C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d927fdeb-b740-4ae8-b620-bfb050abca4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
14:a5:8d:31:b8:a4:aa:aa:eb:05:83:cd:e5:a7:f7:f2:a0:de:
c7:88:44:27:cd:0a:8d:5c:b0:cf:e8:9a:84:c7:fc:44:26:72:
9c:a8:61:55:37:3f:ff:1e:eb:0e:70:9a:e9:1c:49:e9:ca:8a:
69:90:23:05:eb:73:35:07:66:ec:6c:db:d9:40:de:b9:e0:37:
cb:b0:df:da:7f:78:d5:d6:fd:18:42:de:ad:d6:33:72:c0:17:
f0:ed:f6:31:08:77:44:f7:a4:d2:d6:84:ad:d9:83:82:88:ac:
31:aa:0a:41:f1:7a:57:d6:ec:ba:30:ab:e1:a7:4b:d2:a9:81:
37:10:c1:e4:99:98:bf:d5:bb:4d:15:99:9e:ac:e2:52:6a:6a:
6a:f2:03:a7:cf:7a:ec:da:d9:d5:d5:5e:a2:0d:ca:f4:a0:a0:
ef:d0:c8:df:d5:15:3c:47:de:9d:5f:d3:2f:6b:2b:85:4d:49:
5b:e7:19:91:b1:cc:b0:ff:dd:4e:67:77:4b:90:87:9c:29:2e:
d0:1c:23:6d:4c:75:33:a7:88:7b:99:ad:55:6a:02:86:7d:65:
ba:4d:cd:d6:d8:b8:48:ba:28:d2:a8:89:42:fa:f8:8a:a8:7b:
3d:52:89:d0:fe:0c:84:e5:58:9c:78:29:1f:ff:37:ce:ec:58:
82:d7:a6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:35:14 2025 by rpki-client