Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dec611b1-fee6-46e7-b6ea-b5f091967ec6.roa
File: dec611b1-fee6-46e7-b6ea-b5f091967ec6.roa (raw, json)
Hash identifier: TZys7CK8Xl1DuMTqOT+4hgc14riyv6AJ36JHLncXFCE=
Subject key identifier: 6B:B9:F5:00:09:B8:1C:99:8D:1F:89:04:74:DB:74:EC:47:D6:5D:C0
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0F43C0D6980FD0A5A8F7901D66AFBEACB3B3C134
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dec611b1-fee6-46e7-b6ea-b5f091967ec6.roa
Signing time: Thu 07 Dec 2023 00:00:00 +0000
ROA not before: Thu 07 Dec 2023 00:00:00 +0000
ROA not after: Thu 11 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:43:c0:d6:98:0f:d0:a5:a8:f7:90:1d:66:af:be:ac:b3:b3:c1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 7 00:00:00 2023 GMT
Not After : Jan 11 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c1:52:e0:d9:83:a9:93:20:14:65:5e:86:82:
04:c1:fd:79:5a:89:8c:4e:14:3b:6e:58:23:08:50:
31:d4:2a:4a:20:c3:ad:49:2a:61:d0:4f:61:00:26:
2f:79:ac:6b:f3:f6:6d:f1:3b:1b:69:f8:dd:19:b8:
03:2f:3a:43:ba:fc:40:62:fe:df:3e:16:55:67:d7:
73:9d:37:aa:6c:ec:c6:13:86:ad:bf:7a:44:87:12:
29:cd:76:ff:b8:fb:44:3b:f6:1d:c5:25:53:7d:73:
cb:88:57:5e:a9:04:a9:09:f5:8a:9e:c6:1a:43:81:
6f:c0:0c:ca:87:6b:8f:1b:b8:c4:88:0a:bb:35:df:
51:1f:d6:a5:ad:23:8c:c9:3e:84:e3:9b:13:c0:85:
35:48:b4:8a:87:9b:b8:ee:ef:9e:8d:76:c2:a9:b2:
b9:5a:7d:b4:e8:ed:a7:64:57:ed:fe:98:8d:ef:68:
50:82:a8:e5:2b:60:0a:dd:22:80:5f:a9:5a:4f:e0:
2c:e9:68:73:75:61:fb:3a:a0:89:48:83:2c:61:84:
0e:77:d7:3b:7a:76:18:52:4c:d6:87:5a:50:71:ba:
9d:55:79:ef:13:3f:b9:34:62:e1:36:fa:fa:f7:60:
bf:fb:1b:46:fc:98:f5:76:89:f4:4f:8f:06:5b:62:
d5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B9:F5:00:09:B8:1C:99:8D:1F:89:04:74:DB:74:EC:47:D6:5D:C0
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dec611b1-fee6-46e7-b6ea-b5f091967ec6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
67:44:ea:02:83:db:ca:be:b0:eb:8f:b1:09:55:96:93:8d:bc:
31:52:b1:fc:e0:52:b8:5a:5d:1d:f9:df:37:ec:8d:db:c1:11:
31:cc:33:57:4e:1c:d6:60:ab:92:6d:52:aa:e9:8a:12:4a:4e:
b7:44:ad:78:cb:81:ef:35:46:09:1c:8e:37:b1:a4:e9:6d:8c:
37:d0:3a:70:8d:70:98:2f:23:b0:75:10:03:5f:32:b4:40:d5:
b7:69:72:f6:1c:cc:7d:20:f6:9d:8f:ad:11:f4:51:20:65:1d:
46:e4:2b:e7:a3:1f:ba:85:97:aa:25:63:9e:67:36:98:f6:8a:
1e:2b:f2:62:9a:3b:c9:42:5f:54:37:28:d7:75:b8:26:e0:93:
53:fe:d5:fe:59:6e:be:c7:1a:df:9b:e9:5f:0e:5f:ad:61:36:
a1:b8:4b:92:93:47:24:b7:c6:0e:c7:b6:ef:9b:23:c4:9e:22:
8f:53:8a:1c:c6:42:fe:76:23:ce:f7:79:9e:d9:c9:31:39:93:
90:d1:6c:84:a0:2d:ba:83:75:66:da:e0:32:c4:1e:32:bf:e8:
c1:7b:3f:dd:32:e2:57:4d:6e:2a:4e:9f:7d:6c:bd:81:4b:0e:
7a:f3:4f:fa:ba:6a:4e:55:f3:b0:70:cc:f4:46:49:0d:78:e5:
57:8c:69:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:32 2025 by rpki-client