Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f48c1b0f-ac48-4b62-a97d-571a0f23eced.roa
File: f48c1b0f-ac48-4b62-a97d-571a0f23eced.roa (raw, json)
Hash identifier: 2QPboSBMWeNXMPpJJc3DsbjfeztI1hjKoP33eHFad0I=
Subject key identifier: EF:49:EF:FF:F1:23:80:3B:A4:D9:B1:7D:A0:0E:E6:91:93:DB:A5:60
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 199C0556DF5C79633F8038283F709D86438B9870
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f48c1b0f-ac48-4b62-a97d-571a0f23eced.roa
Signing time: Wed 06 Nov 2024 00:00:00 +0000
ROA not before: Wed 06 Nov 2024 00:00:00 +0000
ROA not after: Wed 11 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:9c:05:56:df:5c:79:63:3f:80:38:28:3f:70:9d:86:43:8b:98:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 6 00:00:00 2024 GMT
Not After : Dec 11 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3d:5d:c7:6c:f8:09:c9:76:97:85:3f:4d:df:
1c:ec:fe:be:53:bd:d8:99:43:f5:70:8c:79:f2:81:
db:f2:17:1d:17:dc:a1:b5:40:f9:c4:37:56:db:2c:
a5:04:1c:84:28:17:10:d3:76:5a:d9:07:93:f7:f6:
d9:35:7d:3f:a7:1e:9d:1d:70:0a:8d:d7:1e:49:82:
4f:ce:f9:cc:1c:cf:6f:04:a6:c7:21:63:de:78:06:
74:35:4e:91:8d:c1:0f:5d:c6:5d:2a:13:31:68:11:
38:88:30:a2:7f:55:78:8b:7f:76:91:40:96:04:83:
00:fa:4d:2a:ae:5a:80:2f:f1:01:d1:66:8c:a0:2b:
46:4f:cc:09:0d:c0:8f:80:a9:4f:52:81:fd:21:11:
57:b1:f3:bb:03:4a:8e:df:36:7b:9b:24:ee:d0:67:
99:70:bb:55:32:4c:47:81:05:aa:c8:57:53:cf:42:
26:dc:cf:94:7f:a7:2b:82:90:67:f0:a4:b0:03:5a:
1e:ba:7e:20:9d:4b:62:52:af:50:ba:83:e0:c2:8d:
25:0c:a0:fc:6f:07:03:68:b8:37:59:f7:ee:55:17:
18:52:2a:10:e3:e9:95:ad:43:9d:bb:b7:1b:6a:38:
e5:6e:41:6a:01:ad:2d:48:ba:86:0f:76:7e:f4:48:
6f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:49:EF:FF:F1:23:80:3B:A4:D9:B1:7D:A0:0E:E6:91:93:DB:A5:60
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f48c1b0f-ac48-4b62-a97d-571a0f23eced.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
77:70:2d:85:78:a2:ac:1e:c7:0a:6b:99:9c:78:07:b1:29:d9:
41:a5:ec:ee:9e:7b:7e:ec:48:2b:aa:70:d5:e6:31:b7:b7:fa:
9c:75:e7:df:11:21:f1:2a:24:d4:eb:1e:d3:8f:b4:52:71:ce:
4b:d9:24:e9:b8:db:ef:ff:f3:2a:c5:4c:8d:75:e6:1a:30:25:
c9:30:15:c1:ec:d6:c0:bd:19:60:af:6e:bb:54:46:ea:29:ec:
2e:db:33:6e:5f:81:f9:7b:f1:88:54:a7:3a:8a:f9:d6:a9:d0:
03:a3:3e:8e:d4:df:cb:10:00:b1:0b:01:f7:83:dc:12:f4:79:
8e:1e:84:fc:a5:68:a8:74:cd:3e:2d:66:11:98:ee:71:db:38:
65:78:f8:9d:a1:c8:a0:2d:ee:81:43:5b:91:dd:d3:47:96:55:
65:cb:22:1d:72:84:f6:db:1b:1e:a6:1d:dd:4b:20:d2:13:73:
40:89:e3:1a:63:81:4b:02:f7:67:18:a0:18:3f:fe:b6:84:b6:
76:2f:be:cf:fe:7b:a5:0b:8b:0b:98:6e:b9:79:f8:0e:a2:1e:
24:8e:35:f5:0e:0f:69:29:38:ee:1e:93:20:c8:d7:15:e8:49:
b1:7b:bc:42:bc:0b:f8:7f:c7:77:44:30:e6:68:a2:4a:8c:d6:
31:74:c1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:13:54 2025 by rpki-client