Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f8880d38-3b3b-49c1-8c98-b4697e5876d0.roa
File: f8880d38-3b3b-49c1-8c98-b4697e5876d0.roa (raw, json)
Hash identifier: qh5YHUOxfywRTJ3Qn0hxhDx6mcXChydz6uad+SE3tng=
Subject key identifier: 7E:9C:3B:2C:5C:AA:29:F7:DD:83:43:26:6E:14:4C:1C:26:85:D8:E6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 15A33C544015BC9B190A24F8191D3827768A0D1F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f8880d38-3b3b-49c1-8c98-b4697e5876d0.roa
Signing time: Tue 09 Jan 2024 00:00:00 +0000
ROA not before: Tue 09 Jan 2024 00:00:00 +0000
ROA not after: Tue 13 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:a3:3c:54:40:15:bc:9b:19:0a:24:f8:19:1d:38:27:76:8a:0d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 9 00:00:00 2024 GMT
Not After : Feb 13 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:a9:86:f8:d2:c4:2e:d2:86:6d:ac:05:ca:
65:b7:bd:6f:7d:12:26:b2:71:f0:8f:81:eb:95:f2:
46:4d:20:40:eb:68:36:f8:a3:e2:6e:e1:1c:06:70:
b4:13:71:68:0a:db:21:5b:dc:3d:35:26:9e:b1:39:
96:69:4d:7f:3f:11:8d:cf:9f:c1:82:a3:b6:0a:77:
3f:db:85:ba:63:f0:73:52:05:e7:77:4c:ea:9c:2f:
fa:c7:cc:ee:03:de:b8:0d:45:f6:30:ac:0b:cb:7d:
ed:6f:59:04:f1:3e:ff:96:13:88:f5:0c:e2:25:9f:
a6:bb:64:35:0b:16:1e:11:8b:18:34:53:27:76:23:
3d:39:fc:45:63:7d:6d:65:2a:ca:f7:9d:d4:16:22:
f1:8b:36:e2:90:4b:fd:c0:b5:be:68:ab:9a:45:0f:
f2:e3:c1:79:b0:75:d2:bc:10:b2:85:79:d2:18:a4:
34:96:d0:f4:34:91:0a:90:3e:ef:92:ea:f1:02:ce:
29:bf:b3:d3:c4:fb:0a:a5:98:85:a8:9a:1e:43:16:
ab:e0:00:e1:cd:bc:a9:81:9a:59:03:13:47:bd:3b:
4b:c1:06:b2:d5:17:68:a2:f2:5f:c8:b8:dd:8f:46:
87:31:50:02:4c:03:61:8a:73:64:5d:72:a2:ee:ac:
19:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9C:3B:2C:5C:AA:29:F7:DD:83:43:26:6E:14:4C:1C:26:85:D8:E6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f8880d38-3b3b-49c1-8c98-b4697e5876d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
49:5f:83:3d:6b:1b:2a:7e:4a:87:bb:ed:d2:be:6a:ed:50:1b:
88:ca:3d:f3:ec:28:af:7c:9f:cc:65:66:3b:74:5f:ee:5a:29:
54:10:aa:6e:bb:ad:b1:40:aa:bc:49:ed:13:b2:43:f0:c0:c8:
22:bd:03:28:af:06:1c:01:0d:9d:6a:5a:4a:50:c9:38:a0:b5:
92:54:a5:05:b2:40:3e:b1:2b:87:79:1b:94:91:61:e9:34:d2:
c1:44:a5:47:73:2d:d6:34:e3:78:ea:81:dc:12:2f:b5:75:32:
69:41:da:83:49:db:1a:37:9e:29:6e:e8:5e:26:95:4c:89:e4:
36:3e:a8:ae:2d:ca:89:67:57:c5:77:f2:bd:ae:5e:70:3a:a4:
e5:61:6a:da:37:e5:4d:e6:ab:59:2e:75:63:03:c7:f5:37:b9:
2c:bc:3b:15:15:f0:65:d3:2a:47:ce:c8:10:b2:9d:2e:cc:82:
a4:4a:cf:68:81:24:6b:ed:2b:7d:2d:ec:18:8c:a7:e5:8d:ff:
93:9d:19:2d:fe:3e:24:5b:01:0f:a6:be:35:7c:94:66:0d:af:
3a:85:f9:72:d7:8a:35:3e:32:dc:4a:82:9b:1b:47:3b:29:a1:
e1:40:4e:7a:30:51:98:19:95:5a:d0:5d:e0:89:33:b3:c5:eb:
b1:47:d1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:51:04 2025 by rpki-client