Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e5674b6e-932e-47d0-ace8-9053b2cae0de.roa
File: e5674b6e-932e-47d0-ace8-9053b2cae0de.roa (raw, json)
Hash identifier: DsRi6kPqSYzGd1RQbpFwwcw9oYnFJDKByXtqsRa+X78=
Subject key identifier: 0D:CA:DE:2C:4C:68:A8:68:C4:F5:FB:6C:1B:1E:72:A9:29:0E:CF:94
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3B58E14D65260C2CEC4C6432782977E15CBA21BE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e5674b6e-932e-47d0-ace8-9053b2cae0de.roa
Signing time: Tue 08 Aug 2023 00:00:00 +0000
ROA not before: Tue 08 Aug 2023 00:00:00 +0000
ROA not after: Tue 12 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:58:e1:4d:65:26:0c:2c:ec:4c:64:32:78:29:77:e1:5c:ba:21:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 8 00:00:00 2023 GMT
Not After : Sep 12 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:38:a5:ce:35:3e:52:91:3a:aa:43:59:b3:f7:
29:9c:9b:1d:fd:83:1c:9b:b0:0c:40:19:91:df:02:
d1:64:5e:05:76:29:6c:2a:e6:c3:38:0f:6b:c7:70:
83:dd:c1:5b:ea:84:2f:d3:5a:89:8e:0f:d7:61:7c:
86:ac:78:fd:f0:0d:8c:6f:db:07:b1:12:01:ad:da:
3f:5e:cd:9f:4b:8c:2c:6f:53:ee:34:c3:f0:a3:7e:
45:7b:0e:ce:be:14:b5:24:5e:24:b4:eb:4e:bf:3b:
50:a7:6f:10:ed:76:ac:40:1f:db:0f:2f:8c:5e:92:
65:87:49:87:3a:88:7a:d2:23:71:e6:75:50:fe:ef:
08:a3:91:a3:2c:3e:0d:1a:8a:cf:39:26:70:b4:2a:
92:4f:4f:21:8b:e1:4e:3a:b5:cf:58:06:e8:ca:ac:
46:b1:32:46:21:e9:b3:c1:49:19:e8:34:b5:ce:ab:
ce:ab:46:11:66:17:e9:76:90:ed:fc:d7:d6:51:80:
45:94:1c:a6:f1:8c:83:c0:f8:f5:26:06:a3:8d:f9:
41:72:99:fd:27:32:3c:38:85:24:4d:87:59:d2:5c:
71:e8:df:6f:ec:e8:2d:3b:ab:04:a3:b0:14:2c:1a:
c5:aa:36:1f:cd:cb:0f:ab:6c:39:c8:7c:df:b2:9e:
05:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CA:DE:2C:4C:68:A8:68:C4:F5:FB:6C:1B:1E:72:A9:29:0E:CF:94
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e5674b6e-932e-47d0-ace8-9053b2cae0de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
08:8f:69:5e:48:07:1e:f5:db:4f:64:d2:3b:29:ff:f3:09:ea:
ab:e0:bb:94:16:fd:a1:90:d0:e8:d1:91:53:5d:94:23:98:bd:
8e:df:ea:4f:95:7f:4c:4d:c2:ca:e0:94:5b:0d:5b:c3:d0:19:
b5:d8:97:fa:17:79:91:8e:0c:fe:12:57:d8:d5:2e:64:92:59:
bc:bd:27:ba:27:43:c5:0a:d4:53:77:9b:e8:7d:1b:1d:19:c8:
a2:48:0d:76:02:0d:6f:a9:27:22:80:63:68:40:1c:40:de:32:
8d:ef:41:69:00:a7:dd:00:73:dc:06:14:5b:bb:aa:42:23:3f:
b5:fa:84:11:8d:08:f9:9f:a3:a1:87:bc:f1:ef:04:12:82:a2:
0f:26:9f:db:5a:52:72:06:5e:0a:eb:91:ca:29:d2:dd:a5:ba:
0c:9c:54:8e:de:ef:f5:a4:ef:fd:7a:c5:f7:e1:56:2f:25:20:
09:28:fb:cf:13:7f:8f:d0:8e:10:32:ec:ed:74:70:41:79:1b:
63:cd:ca:e6:36:0d:86:d1:76:df:58:c2:ae:09:43:5a:81:b3:
56:75:14:6c:ab:09:5d:84:26:76:79:6b:73:8e:78:02:a4:da:
4c:53:b8:0c:44:04:f5:5b:5a:b0:60:27:46:a1:fc:18:7d:76:
50:3b:b1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:34:37 2025 by rpki-client