Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ee1bc17c-1c2d-40a7-bfbc-d2b768667a97.roa
File: ee1bc17c-1c2d-40a7-bfbc-d2b768667a97.roa (raw, json)
Hash identifier: qoJ6BQtf/twZw1sTk/jqQwYCVOSG2PF1HzI9lKS8u+w=
Subject key identifier: E3:1C:CE:E1:74:CE:87:51:69:B1:CF:A5:DE:86:1B:E0:8B:AE:8E:C2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1889C80354ED9B4512FDF1B21BE5075713698985
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ee1bc17c-1c2d-40a7-bfbc-d2b768667a97.roa
Signing time: Mon 07 Aug 2023 00:00:00 +0000
ROA not before: Mon 07 Aug 2023 00:00:00 +0000
ROA not after: Mon 11 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:89:c8:03:54:ed:9b:45:12:fd:f1:b2:1b:e5:07:57:13:69:89:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 7 00:00:00 2023 GMT
Not After : Sep 11 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:66:42:58:f7:fc:16:62:1d:db:66:be:5c:67:
b7:6c:4a:2d:99:d4:4c:55:2b:57:b4:81:22:34:16:
30:c8:f0:3f:58:00:73:e3:2f:25:ea:ec:83:e4:bd:
85:92:29:0a:01:21:dc:6d:53:7a:b6:b5:26:fd:68:
5f:e3:93:53:fb:b9:c0:5e:db:ae:d3:39:89:69:46:
57:07:fa:77:52:77:f4:83:32:ca:e6:34:01:bb:c5:
23:01:64:0f:0d:60:07:9a:4f:06:8a:50:3a:23:a6:
af:cc:51:6a:52:35:7d:58:09:3b:fc:6c:76:3e:cd:
68:c6:3d:65:a9:95:93:dd:88:4d:0a:18:e9:57:9a:
20:a2:19:c7:f2:b3:3d:f0:ff:a9:4e:72:01:f0:30:
78:7e:5d:65:1d:dc:39:28:d3:ac:1f:37:04:3f:bb:
96:d9:95:e6:ff:0a:fc:ac:0f:23:c0:e4:26:9c:79:
76:0e:8e:42:09:81:b7:ae:2f:96:62:c6:ee:d6:2a:
6a:52:ab:02:81:88:19:52:f2:db:6b:e1:ab:50:37:
34:68:73:ab:78:c6:7f:8b:9f:55:d0:58:9a:3d:d8:
8b:14:9d:b0:ea:e6:de:10:7c:b9:53:0a:ac:58:af:
9d:1d:80:24:da:56:82:b0:cc:97:fa:42:d5:5a:95:
ad:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1C:CE:E1:74:CE:87:51:69:B1:CF:A5:DE:86:1B:E0:8B:AE:8E:C2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ee1bc17c-1c2d-40a7-bfbc-d2b768667a97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
66:48:7c:d0:61:4d:7b:f2:05:24:68:71:db:8a:ca:26:d7:85:
48:61:8a:1d:02:aa:03:c1:02:c3:04:d0:55:97:05:cf:bf:37:
b6:cd:1e:94:51:1a:60:ed:93:6f:c8:42:4a:73:28:e1:68:38:
31:44:79:ee:fa:19:96:81:a2:0e:31:35:bd:0c:64:60:3b:33:
8e:3c:d0:f0:d9:c8:fb:2c:a1:15:4b:2f:87:ab:3b:28:eb:e3:
03:67:ce:e5:da:6d:70:6b:e0:ad:ff:af:5e:b2:af:d4:4b:c9:
4f:c4:df:d8:22:f6:2a:f3:b0:2e:f3:40:3b:23:13:42:7f:29:
2a:83:9b:1d:81:bc:bc:09:38:cf:1d:ca:f0:fa:a0:95:d9:6f:
4b:29:76:c0:5b:69:6d:0c:f7:3f:98:ad:7d:69:fd:c2:05:ff:
aa:48:4f:7e:d0:ff:d4:71:45:30:c7:07:db:8a:ac:a9:ed:9c:
19:1a:96:c4:eb:6b:2f:48:8a:7f:81:28:60:4e:d8:42:38:fa:
02:23:f0:17:d1:a0:50:f7:a8:19:60:a7:e6:64:0a:9e:ac:fc:
57:02:91:6e:cb:a1:38:7d:96:40:d9:e4:3b:f7:9f:17:6b:c5:
43:65:19:9f:b9:b3:01:15:00:a4:71:fa:7f:47:f2:17:ba:6b:
fd:1a:2c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:48 2025 by rpki-client