Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ee3091dc-f669-4cf9-96cc-0a2fda76b55e.roa
File: ee3091dc-f669-4cf9-96cc-0a2fda76b55e.roa (raw, json)
Hash identifier: MmIB9N0IDENeBiArJ0asPqbnZHW8KCR59Omkx/FBbgg=
Subject key identifier: 6C:71:71:17:73:89:74:D3:AA:B9:76:AA:F4:57:B5:2C:AC:88:54:D0
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 213DBDBE3FF86242F08FB81C19DC7BE61A72C4CE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ee3091dc-f669-4cf9-96cc-0a2fda76b55e.roa
Signing time: Mon 06 Nov 2023 00:00:00 +0000
ROA not before: Mon 06 Nov 2023 00:00:00 +0000
ROA not after: Mon 11 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:3d:bd:be:3f:f8:62:42:f0:8f:b8:1c:19:dc:7b:e6:1a:72:c4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 6 00:00:00 2023 GMT
Not After : Dec 11 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:9d:43:69:17:1e:4c:3f:10:30:8e:cb:4c:
00:87:80:93:73:90:63:31:45:5e:44:31:af:58:7d:
ac:49:92:98:32:d0:90:45:d3:16:8c:df:c9:ff:9a:
9e:cc:7c:e7:e3:db:cb:2c:8b:3c:e9:0d:01:2a:eb:
ee:dd:a4:ad:11:ba:c3:11:38:73:da:b3:40:5c:24:
fc:7c:d5:95:8d:92:73:08:68:e7:4b:15:47:81:28:
5d:78:3e:58:a4:26:86:de:f9:bd:f5:70:b4:a0:dc:
ff:a2:55:26:58:8e:34:eb:fa:6f:d5:b8:77:31:43:
cc:c4:34:38:af:54:17:19:bc:e2:b7:6c:ba:e0:85:
78:98:10:ca:08:20:8a:65:29:8f:24:82:8d:f2:d0:
89:5a:68:76:52:dd:79:ea:6e:77:f0:d9:b5:64:af:
cf:af:b2:08:3d:b2:c4:75:8e:13:83:24:06:a6:d4:
12:c1:4f:bf:b4:db:4c:32:63:da:6c:a8:ff:b1:af:
9b:59:36:b9:78:15:d4:f1:07:c9:bb:ef:01:03:0e:
7d:57:31:1b:3e:61:3a:ab:b4:7a:64:19:d0:51:cc:
e3:f0:23:3d:2a:72:d3:93:6a:06:8a:45:18:29:54:
5f:fb:2c:e8:27:97:b4:81:a1:ea:97:72:63:4b:ab:
c8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:71:71:17:73:89:74:D3:AA:B9:76:AA:F4:57:B5:2C:AC:88:54:D0
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ee3091dc-f669-4cf9-96cc-0a2fda76b55e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
30:12:59:50:36:83:63:76:2d:95:89:33:0c:f6:6a:25:cb:5b:
0d:80:b6:9e:c1:5e:80:f4:5e:d0:34:8c:f7:37:47:80:35:33:
a8:67:9c:81:24:da:1f:66:ad:a6:4b:fa:79:18:11:69:07:2b:
58:98:70:50:3e:a6:f2:e5:ad:3c:32:cb:d8:6f:b9:45:1a:17:
98:b8:dc:7e:0c:aa:cd:ba:fa:aa:21:68:21:ac:8d:44:73:a2:
c8:11:c6:6b:7f:bb:31:89:25:b7:c7:e2:cf:5a:4f:a3:dc:79:
4d:27:7a:17:92:37:1e:12:2d:d6:b5:3b:d9:df:df:b2:9b:d8:
c5:b3:89:24:25:68:34:8b:53:81:f8:b5:1d:ac:f3:85:92:0c:
6c:cd:bb:ce:e0:10:ea:22:76:da:b2:af:d8:85:5c:67:47:28:
ee:ed:99:70:e8:e8:6d:37:6b:5d:d6:18:0b:e1:11:c1:fd:ed:
3d:60:36:01:d0:44:e5:86:1e:22:85:fd:a7:16:fe:13:15:9c:
c0:f6:e9:26:c7:db:b6:cb:ab:f9:15:2d:ec:ef:d4:6c:e2:4c:
51:c7:c5:04:18:95:01:d9:6a:0b:bd:9a:1e:53:a1:df:61:bb:
4f:5f:53:c6:fc:47:44:78:4e:87:cc:d0:1c:ef:fe:e9:7e:22:
0b:d3:8a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:39 2025 by rpki-client