Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f828ca5d-4a77-49a2-ad2a-d87a2f93edab.roa
File: f828ca5d-4a77-49a2-ad2a-d87a2f93edab.roa (raw, json)
Hash identifier: BBfVwDzgxtsUE6RhR8hR8AYObBeN4U2H/QkSM3edKn8=
Subject key identifier: A8:C7:D4:CA:3C:95:58:2D:4D:95:11:B7:D5:88:48:A4:AE:DB:B1:2F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 193A5C8C0D8610C9323C7D78DF9C9BC4486FCE09
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f828ca5d-4a77-49a2-ad2a-d87a2f93edab.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:3a:5c:8c:0d:86:10:c9:32:3c:7d:78:df:9c:9b:c4:48:6f:ce:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1d:f4:50:65:2f:08:39:b0:49:d3:ae:01:86:
9c:e5:50:34:b9:3d:20:ee:be:8f:59:d3:4f:87:f5:
be:53:51:24:87:82:cb:87:48:82:e5:de:b4:5a:6d:
6d:ac:9e:58:b0:12:64:c1:1c:38:0f:99:ab:77:d6:
10:76:b9:c4:7a:f2:78:92:0b:f4:5c:fe:f4:32:74:
8e:d0:17:5c:2e:e9:91:13:27:3c:86:5f:3d:37:33:
8b:77:de:9d:73:ac:8d:e6:e8:22:5d:13:14:48:64:
6c:73:94:dd:06:d4:d9:2d:ba:2c:e7:45:b3:e3:ca:
2e:13:5b:bb:10:d6:e9:d0:38:be:fe:3e:89:5a:14:
5c:91:26:2b:05:0f:fa:8e:9e:4f:80:a7:90:ee:e6:
a9:26:5d:4f:4f:9a:3d:62:86:a5:f8:2b:34:92:8f:
cf:f2:7c:71:b2:91:bd:f6:fd:a4:4a:21:9f:83:0b:
fd:7d:32:65:9a:17:99:64:89:06:7b:ca:71:50:d5:
7f:e4:55:6f:da:44:66:e8:41:58:99:72:3d:2c:ec:
ca:13:c4:37:23:0d:bc:91:5f:6f:f4:3c:63:59:7d:
56:ee:83:b8:3a:ff:4a:f1:0a:bd:97:77:60:20:48:
45:86:38:ca:1e:0a:fc:83:79:c5:98:b2:d2:56:b0:
2d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C7:D4:CA:3C:95:58:2D:4D:95:11:B7:D5:88:48:A4:AE:DB:B1:2F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f828ca5d-4a77-49a2-ad2a-d87a2f93edab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
86:74:8f:c3:8b:ce:a1:22:31:f4:eb:aa:77:f0:32:e7:af:60:
f9:a8:07:46:2b:9c:0d:10:b9:4a:05:f6:8d:a9:4a:ee:2a:cd:
fd:d1:76:05:cc:ba:65:08:cb:e9:d8:40:d0:2e:70:64:ca:16:
02:8b:68:da:04:55:82:de:5e:78:58:65:ed:58:88:72:d1:19:
25:c3:2c:15:b8:8c:37:93:b1:33:86:fe:89:8e:a3:36:79:38:
70:dd:60:cd:7b:09:4d:23:04:69:0a:9b:e2:1e:07:70:66:04:
88:0b:ce:6f:b8:95:e4:69:9b:dd:06:b8:fd:c6:21:d9:ba:bd:
ba:6f:7a:9f:e2:74:cc:36:d5:25:e4:2e:db:5b:64:27:60:71:
c8:8e:9e:e0:41:2a:b1:08:52:29:17:af:10:2a:39:72:f1:a7:
df:79:da:e3:5e:80:f0:af:a0:b3:8e:99:f6:37:65:05:33:6b:
f9:87:b2:09:d7:d4:00:65:9b:d6:c1:95:2d:e6:58:8d:df:10:
f9:c2:c2:f2:7d:ec:96:1a:f6:2f:7b:40:ef:44:64:a2:53:d4:
2f:45:ff:2a:3f:f4:75:94:67:10:73:2f:ff:74:7c:23:57:e6:
2f:e5:bd:36:58:83:12:d7:81:22:1e:9c:b6:f3:36:38:89:cf:
f9:a5:60:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:32:59 2025 by rpki-client