Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f4fc70d5-47a1-46e4-ae58-6be4482f695d.roa
File: f4fc70d5-47a1-46e4-ae58-6be4482f695d.roa (raw, json)
Hash identifier: 6A1XQWYFkRbbaddV1p9QobSNu6dFfnZPU/4cTR8y7PE=
Subject key identifier: 18:55:FB:42:7A:2C:D8:93:4F:F4:53:E8:9F:18:65:30:69:38:A0:79
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 192CAD3A089C98060D3BD70499B1BDA09CDB582E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f4fc70d5-47a1-46e4-ae58-6be4482f695d.roa
Signing time: Thu 23 Nov 2023 00:00:00 +0000
ROA not before: Thu 23 Nov 2023 00:00:00 +0000
ROA not after: Thu 28 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:2c:ad:3a:08:9c:98:06:0d:3b:d7:04:99:b1:bd:a0:9c:db:58:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 23 00:00:00 2023 GMT
Not After : Dec 28 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:38:f0:c6:d4:5f:24:52:78:e9:5c:eb:2d:
b1:af:74:73:64:43:b8:d7:1d:6a:ca:de:7b:18:21:
56:48:02:65:4a:fe:64:56:b9:86:2e:7e:65:ae:fc:
b4:ba:ae:fe:fc:05:b7:fc:c5:d5:ff:a6:48:3b:b2:
45:38:36:a3:4a:83:bd:4d:0e:00:27:b4:c2:b3:aa:
ed:de:41:e5:3b:69:ec:4d:48:9c:8c:7e:1d:fe:50:
19:71:14:36:eb:e8:0b:a7:08:40:c7:de:8e:37:82:
0d:02:23:9b:3c:7a:80:46:95:6d:28:22:d7:4f:b1:
c7:8a:93:d6:57:22:17:9e:0a:ee:67:a9:fb:4a:83:
f5:5a:50:ac:d4:28:96:79:46:56:8f:28:28:12:ee:
97:9f:0c:b2:6a:19:be:bb:91:b5:88:d6:a7:38:a4:
a9:40:5c:6f:11:29:84:8c:35:df:ec:79:a3:e9:f3:
fb:66:a7:24:ad:c3:e6:85:8f:65:dc:76:fd:95:2c:
8f:50:73:f2:7f:52:9f:e2:fd:a2:61:8d:77:7b:9e:
5a:b9:48:4e:de:08:d4:b8:15:1d:33:4e:e9:03:cd:
50:31:4d:6a:b3:50:b4:f7:b6:d1:33:0e:f8:8a:64:
a8:81:57:c4:06:29:0a:ae:d0:25:fb:62:3c:61:14:
dc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:55:FB:42:7A:2C:D8:93:4F:F4:53:E8:9F:18:65:30:69:38:A0:79
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f4fc70d5-47a1-46e4-ae58-6be4482f695d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:17:fc:44:4e:73:9d:e8:73:33:f6:a6:fb:6a:27:c6:d8:8d:
af:36:27:ff:8a:9d:27:b9:99:fe:41:3a:ce:09:19:82:04:2e:
4d:b4:e9:bd:a0:9c:ea:33:f8:8d:c8:7d:4f:88:1d:7c:95:c1:
59:2a:f2:ac:fb:9f:50:62:d5:ff:47:1a:5a:74:a9:c0:e9:95:
bf:c0:69:88:4b:14:2e:09:ba:e1:25:88:64:01:43:e0:dc:54:
c6:13:8a:3c:0c:c7:d4:22:37:6c:d5:13:86:6d:14:4f:03:dc:
9e:43:77:16:0b:07:18:06:b8:e6:cf:b0:4c:43:a0:66:f9:53:
ac:04:68:76:ad:2c:2d:c1:50:ac:d4:46:26:c9:cb:e2:21:29:
1f:29:01:0b:a7:aa:b1:5c:9f:44:23:01:39:bd:06:cd:e9:92:
8a:92:86:f3:57:63:93:8f:6e:81:ad:ee:45:bf:f9:b3:0f:20:
b6:c5:61:6f:62:94:b6:5c:0c:3e:00:4a:a3:36:24:d6:cb:fe:
ca:8a:25:8a:a6:5a:45:08:35:1a:12:64:69:c9:c7:ed:67:b4:
51:44:cf:8c:39:62:e4:e3:d4:58:8b:e3:f1:9d:0c:45:91:07:
fc:55:f4:d4:81:11:8d:bf:c1:66:06:08:7c:ef:9c:d5:7a:a0:
e2:15:0f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:54:34 2025 by rpki-client