Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e60851b4-c919-4fa6-9fa8-ffd3c084b5a1.roa
File: e60851b4-c919-4fa6-9fa8-ffd3c084b5a1.roa (raw, json)
Hash identifier: BwNTmHVsGU9ojvrqrSYvLabxN19maxhgnJvmJ+8wNnQ=
Subject key identifier: 35:8B:E5:B8:B9:3B:0F:98:2A:F4:90:F2:91:2A:A0:93:3C:93:2C:B6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 139392005C0FDDE5C5ACDB799ADF1CD08194C265
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e60851b4-c919-4fa6-9fa8-ffd3c084b5a1.roa
Signing time: Tue 27 Jun 2023 00:00:00 +0000
ROA not before: Tue 27 Jun 2023 00:00:00 +0000
ROA not after: Tue 01 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:93:92:00:5c:0f:dd:e5:c5:ac:db:79:9a:df:1c:d0:81:94:c2:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 27 00:00:00 2023 GMT
Not After : Aug 1 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b0:bd:4f:48:b4:6e:65:a9:7b:6e:0b:85:b5:
14:fb:ed:12:c8:da:95:8e:b1:02:ea:1a:15:b1:c9:
fa:93:52:6b:07:a5:19:6f:5d:c7:5c:9d:63:5a:66:
47:5b:34:2e:c8:6c:be:a8:06:52:6c:40:78:60:52:
97:07:e7:43:19:5f:b1:92:c1:ad:37:5f:62:91:9d:
64:4e:44:f4:19:eb:68:9f:3f:ff:0c:1a:2f:3a:5e:
c6:fc:bb:13:0d:81:8c:8a:d3:b5:a6:54:07:eb:4e:
9a:d8:8a:16:08:ee:46:d2:5b:89:a8:5b:b7:65:71:
56:e2:b9:b9:33:93:3c:2b:7e:ab:2b:9a:43:91:4f:
c1:fa:99:89:b0:71:2b:91:b2:37:61:f0:24:ab:74:
0d:53:7a:25:0e:fc:d9:01:e1:ea:19:b5:f0:7d:9c:
c5:cf:ca:9e:e8:bd:0b:ab:eb:80:d3:28:4e:b9:f2:
73:99:60:8e:a9:73:38:e4:ec:ff:50:f1:ac:ee:0c:
6f:df:07:6e:7e:e5:9f:30:ec:b8:89:05:6c:0b:e6:
15:00:94:e1:f1:f3:49:3b:e0:2f:3f:ba:3e:24:d9:
5f:fd:00:88:a6:48:42:a7:a0:46:28:04:03:d6:2f:
0b:8d:c4:cf:e7:d0:87:1c:82:8e:2e:43:91:49:ef:
1c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8B:E5:B8:B9:3B:0F:98:2A:F4:90:F2:91:2A:A0:93:3C:93:2C:B6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e60851b4-c919-4fa6-9fa8-ffd3c084b5a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:c8:58:50:92:40:40:21:ff:3a:4d:81:a8:c5:0a:28:f4:d2:
1a:21:cd:77:2f:56:db:27:58:87:43:b4:9d:0d:f3:97:f7:a1:
4d:8a:54:7b:39:b4:da:2b:44:eb:09:d5:82:46:8d:0e:88:95:
e1:a7:53:23:04:a7:99:fb:4d:b8:7a:31:8a:d3:a1:69:76:cc:
50:8e:00:67:9d:09:f7:17:8f:8d:e7:af:53:51:f9:69:34:40:
e5:df:43:d1:36:6c:ee:29:bd:0d:24:5c:62:14:b8:75:3a:3a:
f3:ad:1f:69:2f:df:f3:6b:0e:35:04:4d:95:03:0f:00:97:81:
fe:44:b9:16:16:f9:59:15:31:90:c1:96:2c:67:50:6d:7f:20:
9b:59:f5:5e:8b:5b:3d:cc:d4:e4:18:6b:da:c6:55:14:8a:6a:
14:5f:f6:d6:7c:f2:b2:91:40:0c:82:56:d4:a6:46:64:ad:a0:
f4:50:26:9e:16:72:a9:2a:a9:c6:7a:71:8d:d7:be:67:7f:2a:
04:d0:5c:1c:ba:8d:1f:69:91:ef:f3:94:1f:bd:23:e8:7f:70:
40:17:13:c3:de:9b:24:b7:33:7a:48:d6:3f:db:46:e1:14:c2:
4b:32:2c:8a:8e:9f:47:85:9a:45:c6:b2:da:88:23:30:a0:dc:
76:c5:b1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:26:23 2025 by rpki-client