Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f95511ab-38a1-4880-b554-2123a4d35d78.roa
File: f95511ab-38a1-4880-b554-2123a4d35d78.roa (raw, json)
Hash identifier: v9c1TPglRe4f7EU5Kgdi9s9l0VRNxnRd/uDVy8Kc/oo=
Subject key identifier: EA:ED:B4:9E:39:03:27:95:51:F0:6F:56:20:0B:27:82:E3:9E:40:17
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4EDD9E363F9E4335D25D059CB25EB10FA0CE5680
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f95511ab-38a1-4880-b554-2123a4d35d78.roa
Signing time: Thu 02 Jan 2025 00:00:00 +0000
ROA not before: Thu 02 Jan 2025 00:00:00 +0000
ROA not after: Thu 06 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:dd:9e:36:3f:9e:43:35:d2:5d:05:9c:b2:5e:b1:0f:a0:ce:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 2 00:00:00 2025 GMT
Not After : Feb 6 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5d:72:5d:7a:33:b0:4b:b3:a8:a5:65:97:a5:
e4:e4:8a:2b:76:5e:8d:95:2f:bc:f6:4a:e8:93:e8:
c3:30:b0:e3:cc:3c:03:99:70:4c:db:20:d2:bd:be:
aa:be:de:59:3a:e7:84:cb:03:26:0a:66:ca:42:42:
a0:b2:0c:3e:f6:1c:0e:cc:b4:60:64:40:f5:a9:63:
0a:61:36:10:47:53:df:c4:76:bc:f8:5f:5d:de:26:
3e:f9:1d:fa:e3:dc:16:f5:93:a6:e2:1e:3e:fe:1b:
0d:92:be:4b:78:7f:e2:54:83:7b:58:c5:4c:a1:95:
13:a6:2b:8e:ce:8b:9f:c0:40:6b:90:7b:40:e7:27:
56:c1:00:ef:0c:bd:30:f7:26:71:b3:1d:d2:17:8e:
41:a1:1a:c5:50:d4:62:81:96:a8:19:c2:08:7f:71:
49:a2:34:d3:b3:9d:12:7d:0a:84:6b:1a:df:ac:d9:
91:3a:b6:e6:f9:8f:5e:86:fa:d1:c4:6d:f5:23:da:
c7:5f:b1:34:5e:3f:bc:80:4c:e5:2d:73:74:9f:92:
0a:b1:20:59:65:e6:5e:f6:d5:c9:7d:22:fd:b1:ed:
80:b9:82:77:78:19:49:01:91:fb:b1:24:a7:ea:fe:
3a:9f:38:fd:e2:77:70:49:83:8b:7f:1d:c5:61:7d:
ad:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:ED:B4:9E:39:03:27:95:51:F0:6F:56:20:0B:27:82:E3:9E:40:17
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f95511ab-38a1-4880-b554-2123a4d35d78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
18:c8:82:29:0c:53:dd:c7:15:19:45:56:63:0e:07:e9:47:45:
47:3c:14:8c:53:e6:c2:11:61:5e:c4:3f:1e:18:4d:85:ad:06:
fe:f9:4a:e7:12:c2:82:d6:51:2f:76:dc:52:13:b4:9a:89:76:
78:66:ad:ce:04:41:ab:81:4a:5f:95:2c:ce:4b:be:80:70:ab:
a4:f8:71:51:be:b1:f8:ba:14:5e:ff:7e:f5:71:76:eb:ad:63:
b1:5e:6d:a3:64:88:47:a8:d9:a3:bb:af:bf:9f:10:80:be:be:
f7:e4:73:1b:f6:94:41:1f:17:0d:77:b5:59:9a:0c:44:ef:a8:
24:cf:40:43:8e:91:0b:03:e8:02:9a:3c:19:8d:23:6c:55:37:
6c:de:b0:0d:a1:7f:67:d2:c5:19:bf:00:8c:2b:15:7d:ae:aa:
ad:cc:10:b2:4d:eb:ef:50:6b:9c:16:91:90:11:90:8d:41:21:
48:75:e7:6d:85:49:3d:89:fe:17:a7:cc:23:9b:22:17:55:0f:
eb:bf:2a:e2:53:ae:02:4f:39:82:f8:40:c3:54:fe:ee:2c:3f:
21:b1:79:66:58:3d:17:b7:bb:59:66:1a:d0:10:4b:d3:0e:78:
26:7b:41:94:ec:24:e1:2e:c1:08:d1:4d:f0:af:d5:c8:a0:9c:
f1:95:aa:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:31:35 2025 by rpki-client