Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ecafc72a-d98f-4a06-aea3-32704cecce52.roa
File: ecafc72a-d98f-4a06-aea3-32704cecce52.roa (raw, json)
Hash identifier: ZoZtUeQ4XSXdz/Ijse9I9GXbfaG37e+lceD0TuenDZI=
Subject key identifier: 63:DA:FA:89:8F:B2:8C:4A:03:D2:F2:B9:76:EE:4C:DB:1A:01:71:6B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 20E427D7FD0305CB0610417E8518067AA7133ED0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ecafc72a-d98f-4a06-aea3-32704cecce52.roa
Signing time: Fri 28 Mar 2025 03:08:19 +0000
ROA not before: Fri 28 Mar 2025 03:08:19 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:e4:27:d7:fd:03:05:cb:06:10:41:7e:85:18:06:7a:a7:13:3e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 28 03:08:19 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:a5:a4:c7:f8:70:ed:58:15:1d:39:8e:f5:
72:dd:16:ed:f6:9f:43:18:99:3a:30:7c:2d:fd:23:
7c:b8:bf:8f:e6:bb:09:6a:4f:5e:67:78:03:a0:8a:
42:b5:04:0b:f4:c0:ba:11:74:15:04:3c:ca:05:5a:
cd:56:69:25:51:e2:ae:4b:f1:f1:c7:36:5d:de:ef:
25:c9:4a:55:b7:02:8c:88:6f:ea:59:a2:39:f3:67:
f7:97:04:c0:7f:e4:94:80:a2:95:90:01:b3:2a:8e:
e7:10:48:17:37:9a:a2:2e:7f:84:c6:07:1c:47:ee:
6b:07:fc:22:1d:4c:c9:82:a1:3e:0d:3a:2f:2e:ff:
04:cf:e4:3b:05:0d:fe:2d:1a:7a:28:ef:3c:03:b7:
c3:2a:9c:67:48:1e:7b:b9:38:de:98:60:b7:fd:62:
0e:81:b1:00:e3:2f:3b:1c:c5:d1:94:75:7a:db:f2:
c6:12:a4:40:c2:66:35:81:c0:b3:a6:a5:00:4f:ff:
96:4f:be:74:29:29:3e:28:88:da:83:31:6c:ca:dd:
9b:73:f8:5f:89:e6:d9:b8:56:50:88:23:2e:de:f6:
e7:d9:e4:fc:52:83:4f:4b:68:34:c4:1e:a3:0e:f8:
a4:d4:1d:5e:16:97:33:9d:f2:9d:cc:4e:37:ce:c5:
f0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DA:FA:89:8F:B2:8C:4A:03:D2:F2:B9:76:EE:4C:DB:1A:01:71:6B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ecafc72a-d98f-4a06-aea3-32704cecce52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:7e:08:fa:37:59:c4:59:f1:c7:0a:06:01:97:f3:51:93:26:
68:1f:fa:19:85:88:7f:2f:35:cb:fb:a3:87:7f:36:ca:75:14:
74:a1:d0:b3:39:d3:04:65:b4:3c:18:87:10:d8:70:eb:c5:e4:
72:6b:73:35:87:99:0a:ca:b2:c0:5a:55:27:10:81:f9:3d:7a:
89:25:7d:ca:c1:ad:47:c4:f4:c3:1b:46:52:7d:af:cb:6b:13:
4b:11:a8:3d:98:c4:06:1d:d0:a5:e1:95:61:50:48:46:be:ad:
2a:b6:ca:70:76:d7:34:8c:61:8c:c1:a9:5a:a4:27:a9:08:69:
5e:a5:71:dd:da:8d:59:5f:4a:ab:0f:4c:b0:09:2d:cc:84:96:
59:ab:9f:fe:3e:e5:49:37:3c:ab:96:7a:db:ef:dc:65:09:61:
9c:ae:6b:91:da:71:92:4e:91:d1:70:74:24:e8:b3:0f:4b:8c:
8f:66:ab:c2:2f:2c:64:52:ed:90:64:45:b7:fb:1f:3a:50:5f:
e8:d8:ba:6f:79:a7:75:b2:f5:95:a3:79:7d:5e:38:85:72:6a:
b1:6c:39:93:8f:5b:0d:80:d8:4d:24:ce:57:a5:9b:13:86:01:
26:75:17:c7:95:38:4a:1a:e6:a9:d2:f0:cc:53:46:24:aa:70:
e8:68:e5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:59:05 2025 by rpki-client