Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f8f6ce2b-c96a-45d0-a02b-268a42015c74.roa
File: f8f6ce2b-c96a-45d0-a02b-268a42015c74.roa (raw, json)
Hash identifier: sMLKbMBdEV5QWQ30Eb5BuwT7NKUwSFIt1+VKQbxtus8=
Subject key identifier: B7:E5:FA:4C:6B:2C:3F:B0:F8:8C:7D:34:87:98:52:9C:C1:4E:B8:8C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1032F3DC71B85E8A7D6F4B58A3CDF9651C767DDA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f8f6ce2b-c96a-45d0-a02b-268a42015c74.roa
Signing time: Thu 05 Dec 2024 00:00:00 +0000
ROA not before: Thu 05 Dec 2024 00:00:00 +0000
ROA not after: Thu 09 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:32:f3:dc:71:b8:5e:8a:7d:6f:4b:58:a3:cd:f9:65:1c:76:7d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 5 00:00:00 2024 GMT
Not After : Jan 9 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:9c:68:2e:71:ca:aa:aa:e5:86:7e:82:72:
4b:9c:af:2a:62:6f:28:31:e5:16:b2:52:11:41:7b:
b6:cb:09:7d:ef:c8:c5:56:e5:54:03:ad:a1:18:6a:
54:02:b5:dd:7b:83:10:5c:44:01:34:c6:2e:cd:e0:
99:bb:32:38:e8:57:07:34:82:fc:66:23:0f:73:c8:
38:41:c2:19:04:ec:d2:e1:a2:92:40:76:58:ad:06:
95:ec:df:73:49:3c:e9:4f:0c:97:aa:8b:0c:cc:d9:
db:6b:7f:4f:c0:da:45:73:77:7d:2d:be:82:df:1a:
fe:6c:fd:32:fa:0d:f0:4b:4f:0c:b4:e6:d3:5a:76:
cc:b0:f2:7c:f1:b9:73:7b:b3:c4:28:93:de:b7:89:
b7:94:b1:4b:ff:c6:eb:7c:ca:51:52:aa:b2:5b:bd:
2c:32:f6:db:aa:47:35:59:92:c3:19:da:c0:21:51:
6b:3e:c9:6d:82:ae:65:f3:72:fd:0a:85:98:00:e5:
1e:43:66:22:11:56:b6:a4:5b:33:ba:46:88:c6:e4:
ea:4e:f2:aa:ad:4c:13:9d:7d:b7:e6:26:7c:9f:1e:
24:c9:c9:83:23:31:54:49:ff:38:04:77:05:eb:82:
fe:79:c0:b5:cd:85:ea:8c:36:61:5b:ae:fb:79:ef:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E5:FA:4C:6B:2C:3F:B0:F8:8C:7D:34:87:98:52:9C:C1:4E:B8:8C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f8f6ce2b-c96a-45d0-a02b-268a42015c74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:66:df:70:9a:7e:33:26:01:f6:a8:fa:b0:b0:3d:b6:e6:a4:
b7:bc:cc:35:5b:0f:07:46:ac:df:f4:b5:6b:f5:c1:ad:83:06:
fe:fb:17:6f:b9:79:97:02:af:f3:d5:77:c5:ee:07:17:c4:61:
3c:1f:75:dc:ef:91:12:12:05:c1:84:6c:8e:1a:a8:d1:b8:f4:
f7:af:30:85:15:bf:8a:6d:cc:e7:9f:c6:62:64:a0:52:22:64:
ae:08:70:f5:40:4b:89:45:8b:6e:f6:fc:d3:3d:7a:19:c6:05:
46:58:60:3d:0b:5a:21:df:27:5e:f1:c3:a3:73:17:3f:41:8e:
38:8f:a7:7b:55:7a:98:89:03:88:6e:58:97:b5:28:cc:ad:c9:
9f:8b:f9:c9:ba:96:01:da:3f:78:35:d8:dd:0d:0b:c0:bc:ca:
92:d9:d6:f2:df:36:16:a1:83:86:96:7a:08:75:2b:c6:c5:a8:
86:36:c2:25:2a:53:58:47:a1:f1:3c:ab:2e:22:95:04:37:91:
64:2a:5a:4b:7b:79:c0:9b:e3:2f:23:de:f1:38:72:2c:8e:a5:
6e:3a:f9:1c:62:c2:f0:3e:3f:6e:10:1e:6c:30:61:6c:ff:10:
cd:e9:07:ee:ea:52:c8:36:9f:94:b2:63:09:85:1a:9c:41:33:
32:5d:db:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:43 2025 by rpki-client