Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d9c92258-5372-41bf-8a8a-99c1c5733ed6.roa
File: d9c92258-5372-41bf-8a8a-99c1c5733ed6.roa (raw, json)
Hash identifier: npCzoqUwoas7f3GoOTw9+39eo5lnMfUiCLxIZsUMq14=
Subject key identifier: FC:85:EE:3E:B3:C5:69:30:71:97:0E:37:83:85:5E:3E:8E:84:0A:C8
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4F4DB0B4CB7665F04E0B8158DBB7C765FB8841D3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d9c92258-5372-41bf-8a8a-99c1c5733ed6.roa
Signing time: Sun 30 Jul 2023 00:00:00 +0000
ROA not before: Sun 30 Jul 2023 00:00:00 +0000
ROA not after: Sun 03 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:4d:b0:b4:cb:76:65:f0:4e:0b:81:58:db:b7:c7:65:fb:88:41:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 30 00:00:00 2023 GMT
Not After : Sep 3 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:96:49:b7:18:86:cf:5f:0e:fe:41:82:d6:
da:cb:43:89:01:a6:f5:10:a5:51:a9:8d:9a:46:a7:
7f:a4:81:c4:ce:e2:63:09:99:3c:7d:e4:3e:1a:27:
1b:a5:8b:aa:f5:81:69:0a:cd:41:50:35:99:e0:d9:
9f:68:44:9d:52:5c:8c:08:fd:9b:31:96:50:02:f7:
b0:46:75:1e:ea:fe:3b:a3:a5:dc:1f:33:96:53:03:
af:cf:f1:ea:bc:f1:75:29:c6:e8:19:9e:81:9b:a8:
89:fa:e2:09:72:f3:23:e7:d5:06:21:c5:83:ab:8f:
fb:c9:86:0e:33:91:a4:a3:48:7c:33:52:b8:bc:6b:
a6:65:5a:02:89:5d:00:01:ab:1a:71:fe:b7:ce:32:
80:3a:bc:2c:e2:8b:9d:9e:e0:74:b0:35:6c:82:6c:
df:55:c2:01:a2:62:fa:69:1e:ec:0c:b5:ce:4c:f8:
41:06:9c:db:5d:94:36:bd:f1:67:0f:26:a0:47:35:
c5:f2:88:68:5a:89:97:14:3e:26:ce:cc:90:4e:ef:
a3:2a:ef:73:9f:e8:81:74:b0:22:7e:ea:95:7b:a6:
16:c9:50:f4:2b:d7:fd:dd:79:0f:a1:3e:5a:e5:12:
38:75:f5:89:7d:2a:03:51:06:62:23:cc:bb:8a:f9:
24:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:85:EE:3E:B3:C5:69:30:71:97:0E:37:83:85:5E:3E:8E:84:0A:C8
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d9c92258-5372-41bf-8a8a-99c1c5733ed6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
71:89:b4:c0:1d:30:c5:ef:15:73:e2:9e:7a:94:e9:c5:60:54:
bf:66:db:cd:c6:51:83:cf:96:8e:25:56:4d:f8:4b:09:dd:b9:
3f:b5:8e:6e:97:36:c1:bf:01:1c:9e:31:3a:87:b4:38:47:a4:
4f:b0:e5:4f:86:8e:4f:46:23:03:a1:e7:d2:ad:b8:62:b1:e5:
0e:18:42:58:b7:13:34:9f:60:fa:26:15:cc:68:42:9a:62:11:
6b:63:73:70:c5:5f:40:9e:50:44:47:a4:1f:02:aa:a8:2f:66:
74:7e:b1:8e:b9:fd:76:e2:c7:3f:b3:7d:3a:d1:cc:68:01:d8:
fe:92:f8:5d:62:47:d4:3e:31:d8:60:19:12:29:fd:ba:a6:f4:
3e:c0:7f:df:7c:87:9d:d7:9a:18:a6:34:1b:06:59:8b:d0:75:
90:09:fe:12:45:4a:4a:35:b7:70:a1:80:6d:66:2a:b3:05:36:
44:c0:8d:c8:23:c3:e7:6d:d4:fe:6f:47:b8:3c:77:3a:20:d6:
13:59:1d:c4:a6:7e:62:36:46:ad:dc:af:f6:a6:d9:4a:66:7b:
43:5f:1b:4c:4f:ad:b9:5f:24:de:dd:0d:be:5d:f4:05:48:30:
27:0c:7f:06:13:fc:e5:00:e7:2e:a3:53:d3:68:e0:bf:f1:36:
4e:a2:0b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:12:58 2025 by rpki-client