Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ee7bf0bc-5374-4ca8-bca4-7a8153c641e4.roa
File: ee7bf0bc-5374-4ca8-bca4-7a8153c641e4.roa (raw, json)
Hash identifier: WXaBLFsz483hhGzo38Q4vOnjy+/3+ZKV48qCJEUvTWc=
Subject key identifier: 03:49:DB:00:C2:7E:2D:6F:5F:54:30:07:AE:5D:1E:EC:E9:F8:EB:16
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 28D393D643EBA38FA127D9C67FB8BFE9CDF28CE3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ee7bf0bc-5374-4ca8-bca4-7a8153c641e4.roa
Signing time: Tue 25 Feb 2025 16:13:20 +0000
ROA not before: Tue 25 Feb 2025 16:13:20 +0000
ROA not after: Tue 01 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:d3:93:d6:43:eb:a3:8f:a1:27:d9:c6:7f:b8:bf:e9:cd:f2:8c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 25 16:13:20 2025 GMT
Not After : Apr 1 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ca:9e:b0:97:da:8c:0c:6e:f9:bf:17:f0:f3:
50:9d:89:e4:8b:77:71:29:e1:32:b2:5b:36:dd:b4:
e3:03:bb:c1:8c:ec:29:22:95:66:4d:00:12:b4:60:
ae:8d:05:70:fb:1e:42:f2:28:8d:8e:2e:4f:29:97:
1c:5c:37:8b:1a:fd:5c:9d:27:74:70:ca:75:51:92:
88:a6:98:71:e4:34:14:06:2a:ea:56:89:7b:eb:79:
5d:30:31:1b:5f:d9:cb:18:ca:72:72:d5:6b:da:44:
dc:5e:5f:04:38:63:78:57:55:c0:fe:f7:b1:36:43:
0c:76:19:43:b9:5c:ed:76:70:8c:7c:9c:64:f9:81:
1c:2e:49:8f:ed:d9:54:65:dc:2e:20:ab:6c:77:6b:
c9:1e:a1:4b:c1:53:ae:35:76:a0:d0:c0:92:15:c4:
ea:44:b9:f2:9c:1e:c0:17:50:29:86:ee:70:5c:ac:
11:1e:5a:4e:a6:99:34:fe:e9:ce:ed:1f:30:fe:61:
85:00:b2:59:71:da:1d:01:6d:e1:2e:54:f3:33:d0:
ae:27:82:de:17:39:82:d9:21:09:86:90:5c:0e:23:
9d:d5:a3:78:37:36:99:66:02:37:ad:df:d6:e8:e2:
7a:b2:8e:6e:a4:10:b1:f0:e4:d1:26:07:da:7b:fb:
c1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:49:DB:00:C2:7E:2D:6F:5F:54:30:07:AE:5D:1E:EC:E9:F8:EB:16
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ee7bf0bc-5374-4ca8-bca4-7a8153c641e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
87:f5:81:1f:90:5d:ff:f0:db:1b:fa:b4:bb:29:78:51:82:73:
19:36:5e:25:21:af:24:20:67:db:ef:59:aa:11:7b:e7:3d:7c:
fc:24:0a:e8:27:0f:73:a5:e3:7d:f6:ba:ed:13:c6:4d:fc:10:
9b:8c:2e:7e:10:8d:f3:f5:e0:4f:36:c9:e1:cb:a4:59:b0:51:
29:55:f1:95:3c:dd:4c:d4:fa:e5:32:d7:89:22:22:ce:f0:d1:
36:4c:e4:bd:59:39:4f:12:fd:32:ec:5b:98:b6:7c:d1:3a:1a:
fb:7b:84:10:fe:d6:a9:90:bb:f0:7f:ad:40:fc:7b:d7:78:0b:
ef:26:9c:6e:63:ef:27:a6:46:d1:26:72:eb:cf:70:a2:15:ff:
19:4f:40:4d:3f:85:bd:fd:b1:b6:df:0c:90:e2:3b:cf:37:eb:
e8:41:d4:51:37:03:c4:4e:fd:01:42:0f:c9:cd:46:ff:41:94:
a8:55:d8:26:6e:2e:9e:7c:e7:f1:5c:5f:ed:3e:cf:bc:e5:34:
15:42:20:6f:da:2d:71:74:c6:cc:40:1c:d0:e8:71:01:ce:e0:
a8:c4:73:ac:d4:1a:42:ff:b5:18:9e:0b:b9:19:31:e5:b9:69:
63:f1:f2:7d:b6:28:71:2c:0b:dd:2f:dd:a1:01:d6:1a:42:15:
88:fb:a0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:34:46 2025 by rpki-client