Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dddb5d7e-dbc0-41b6-82f2-952042537c39.roa
File: dddb5d7e-dbc0-41b6-82f2-952042537c39.roa (raw, json)
Hash identifier: n5kBWGjbMB6w3xP0h0mPtX7cpTb8mUfvWT9AT6CF87o=
Subject key identifier: 3D:DB:42:8F:50:0C:90:38:38:93:F5:C5:D0:E3:CB:34:22:4E:E2:43
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 44243A69D0A27E2E6D1FB4AF099B0B8DF771ADB3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dddb5d7e-dbc0-41b6-82f2-952042537c39.roa
Signing time: Tue 27 Jun 2023 00:00:00 +0000
ROA not before: Tue 27 Jun 2023 00:00:00 +0000
ROA not after: Tue 01 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:24:3a:69:d0:a2:7e:2e:6d:1f:b4:af:09:9b:0b:8d:f7:71:ad:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 27 00:00:00 2023 GMT
Not After : Aug 1 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8a:fb:a0:2a:0c:2b:2f:6e:d4:1a:f1:52:b5:
1d:1e:dc:26:05:cc:58:fe:8d:d2:3a:a6:68:2d:b3:
d4:18:b3:b7:cb:da:e7:ef:ff:5b:46:1f:84:48:29:
52:5f:8d:f6:67:23:68:8f:6e:30:ba:15:c5:15:1a:
3a:6d:b4:35:83:64:9d:d9:51:1e:ac:59:cd:3e:dd:
c7:d0:c2:ad:de:b0:fe:f7:5f:3a:26:ed:8d:74:5b:
f9:a4:a6:98:b0:6d:8b:60:40:14:d6:e1:68:19:64:
0f:ec:59:0e:5f:c4:d7:ca:05:91:f6:f5:f1:8b:b9:
ad:ae:8a:5b:2c:49:7f:9c:b4:79:6c:07:17:9e:28:
5c:81:81:c3:5f:34:17:b2:2a:40:bf:df:1b:8b:7b:
06:a6:fa:9d:f3:ab:3d:be:fb:98:23:3c:c6:76:64:
12:2e:71:a8:f9:1c:1b:df:16:fd:61:f7:87:99:d3:
aa:8b:70:a1:e4:70:88:35:f6:61:b5:9f:e5:6c:d5:
09:0e:34:90:73:4f:8b:d3:ce:ff:e9:4b:73:ba:b1:
e3:af:d5:a1:19:de:29:07:c8:61:81:c5:06:56:1b:
45:dd:53:cb:32:f5:1c:41:f7:62:25:3d:b6:96:2b:
1c:38:d3:d3:75:87:cd:ac:e7:63:27:85:61:4f:89:
73:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DB:42:8F:50:0C:90:38:38:93:F5:C5:D0:E3:CB:34:22:4E:E2:43
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dddb5d7e-dbc0-41b6-82f2-952042537c39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
60:b3:a2:7b:0f:27:93:33:96:2c:b6:31:7d:28:0d:bd:39:14:
90:ae:93:4d:01:bb:5a:13:98:6a:ec:f3:b7:3f:1e:05:db:c6:
50:84:6b:69:e1:ce:1b:73:34:55:a4:94:57:a3:dc:e2:d6:db:
39:f0:b9:39:25:6f:0a:fa:19:68:0b:ba:56:bc:db:b0:2b:a0:
94:2b:50:a4:ff:b5:77:87:d5:16:97:e5:26:41:1b:da:bf:83:
70:ba:cf:55:20:c8:61:a4:ce:0e:72:d9:89:42:6b:ea:2f:57:
44:8a:18:2e:1a:37:2e:78:72:fe:5c:4e:20:51:88:3b:1d:0d:
d5:fc:ea:87:29:68:bd:22:14:57:63:b7:ff:fe:ec:88:cb:d5:
2e:c5:c7:35:02:d3:57:87:bb:47:72:de:44:65:70:18:1d:f9:
63:d4:07:93:93:0a:99:81:5b:79:f8:9a:24:28:78:8c:ab:58:
39:15:70:28:52:ea:e8:4c:5e:ef:4e:cb:72:ec:78:4d:78:ab:
2e:de:14:81:69:b4:2e:fa:bc:49:d3:81:6e:f1:9d:a0:95:04:
1c:14:44:e0:65:66:51:01:c9:ca:fb:a8:1e:46:9d:66:5b:94:
d1:c5:a7:0a:27:8b:2d:2f:d1:b7:51:06:84:b5:73:a7:9e:13:
f5:7c:9c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:55:08 2025 by rpki-client