Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ef0d941c-ee54-4342-9424-2445ebc53384.roa
File: ef0d941c-ee54-4342-9424-2445ebc53384.roa (raw, json)
Hash identifier: AzFLRY97le5Uhmqcevb65uPAvuT0SOi+LflQVnGqNNI=
Subject key identifier: 89:EF:8D:D6:87:27:10:11:45:71:45:BF:FB:F5:9F:86:87:19:2C:37
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 718E03959EFC0948BEA1BFA3B9DF5F3E56EC574F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ef0d941c-ee54-4342-9424-2445ebc53384.roa
Signing time: Fri 26 Jan 2024 00:00:00 +0000
ROA not before: Fri 26 Jan 2024 00:00:00 +0000
ROA not after: Fri 01 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:8e:03:95:9e:fc:09:48:be:a1:bf:a3:b9:df:5f:3e:56:ec:57:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 26 00:00:00 2024 GMT
Not After : Mar 1 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f9:ba:de:67:1e:9b:0c:35:83:51:49:52:51:
61:f1:93:52:a0:de:1e:d7:8b:90:3e:bd:1e:0c:9c:
6e:27:d8:01:41:a1:11:1d:cb:e4:8e:66:ae:ff:75:
68:98:02:c8:93:cf:7f:25:4a:33:93:e8:11:c4:b7:
28:a7:f9:ee:6d:b8:b7:9c:fc:3e:f1:7d:19:f5:14:
be:47:3f:3b:c3:8f:e9:2f:02:5e:68:da:8f:2c:b6:
db:40:db:cb:89:31:f0:52:5f:19:08:f3:05:3e:e8:
82:6e:3c:35:8e:a6:4a:78:ef:3c:3a:88:48:99:7a:
b8:a9:10:d5:6a:70:bc:50:f3:2f:ac:4c:02:fb:9c:
43:42:31:83:31:3a:e2:58:a8:08:ec:c5:bb:bd:b7:
80:76:9d:dc:17:6d:d3:f9:a5:6b:e7:db:10:3b:39:
9a:f2:ab:60:16:0e:e8:cb:06:a6:ee:b5:f9:d8:1b:
cf:c3:ad:bb:79:03:fd:65:84:a0:33:74:0c:9c:b7:
db:54:51:08:b7:f3:cf:e4:f0:b5:e7:27:30:9e:fd:
51:e3:f9:68:1a:af:f5:7b:db:e6:d7:bc:67:18:5c:
98:b6:69:09:f1:f5:d0:2f:5f:f2:5a:a6:7d:9e:a5:
42:e5:11:e0:e0:d4:70:11:eb:4f:b6:6a:f8:77:a2:
5a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EF:8D:D6:87:27:10:11:45:71:45:BF:FB:F5:9F:86:87:19:2C:37
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ef0d941c-ee54-4342-9424-2445ebc53384.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
90:41:d8:cc:04:54:e7:2e:59:c4:a3:50:e6:70:f4:ef:68:ec:
fa:b6:c1:45:ac:07:bb:b4:f2:88:08:82:3c:4c:bc:b0:91:97:
49:b2:67:00:0b:1f:d4:7f:76:39:54:46:8b:26:b9:a1:ec:fe:
4d:8c:07:5e:53:9f:87:7c:3a:71:00:af:c0:bc:21:10:74:7b:
5d:c4:2b:74:3a:a1:0d:f3:5c:1d:54:9a:14:35:96:5d:15:35:
24:ae:b9:62:c0:ff:8d:51:ce:43:f5:24:7e:22:5a:12:c1:d2:
a3:cb:bc:f4:18:2c:40:bb:52:e4:df:45:7b:f5:5d:59:d2:c9:
8b:92:70:8a:16:e0:af:23:40:1f:2f:e5:bc:7d:15:8a:2d:88:
bb:3c:d7:40:3f:bc:75:a5:95:ac:5a:c5:c9:2d:10:f7:0c:4a:
72:69:3b:fe:c8:a8:8f:e4:de:96:77:7a:11:62:a4:1a:ba:e5:
7f:af:20:74:c8:1c:7a:4c:a0:b5:02:a0:dc:86:9f:84:f7:7e:
ce:22:9a:30:b7:7c:5a:0d:d7:e1:9b:6e:ee:dd:7c:fa:05:16:
a7:59:3a:08:d9:18:6b:fc:30:d7:f6:ad:64:d4:0f:6e:f1:c6:
57:03:a9:61:87:33:aa:12:d0:c0:63:32:06:60:82:7b:45:6e:
be:e8:eb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:11 2025 by rpki-client