Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f998bfdc-d6b9-4988-bae5-8fd450ec35c4.roa
File: f998bfdc-d6b9-4988-bae5-8fd450ec35c4.roa (raw, json)
Hash identifier: FUE0TEevfmjoGrV6GvmpYJgAkl4NBCh+GXvy7M+xVdM=
Subject key identifier: DD:3C:41:7A:99:F0:D9:30:81:DB:66:F6:E3:C0:F2:F1:E0:84:95:F1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5671A8AAC0298DD478C512DD4489C27E802A7933
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f998bfdc-d6b9-4988-bae5-8fd450ec35c4.roa
Signing time: Mon 13 Nov 2023 00:00:00 +0000
ROA not before: Mon 13 Nov 2023 00:00:00 +0000
ROA not after: Mon 18 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:71:a8:aa:c0:29:8d:d4:78:c5:12:dd:44:89:c2:7e:80:2a:79:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 13 00:00:00 2023 GMT
Not After : Dec 18 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:20:51:06:6e:7a:a0:98:f4:c2:70:eb:4b:5a:
62:23:dd:57:30:85:57:af:e1:97:79:58:ff:f2:fd:
8d:83:f0:ca:26:5d:e6:3e:89:37:b0:6c:63:df:77:
f3:df:3c:99:a4:dd:32:2a:5b:e9:2d:ce:31:53:66:
ad:d6:df:ff:18:74:bb:a0:50:ec:ec:45:92:07:ce:
ac:ca:2a:4c:13:87:0a:5c:9b:bf:90:8d:43:3d:99:
c1:ab:02:55:e2:02:b4:f5:e4:07:47:18:87:83:e6:
34:25:36:8c:b7:55:9d:2d:74:49:a5:dc:b3:de:b7:
f5:ac:8b:52:9c:94:b9:82:74:bb:b6:17:45:31:2c:
9e:e2:34:64:78:d2:06:94:66:14:ed:b3:6f:a3:32:
c6:19:8b:97:44:fe:98:2a:07:e8:b2:40:62:48:ac:
7c:5c:18:fc:77:04:53:42:70:9e:ea:6f:91:cd:0f:
96:db:cb:d4:8a:af:01:a3:84:3b:fd:c2:16:62:b9:
07:e4:33:3e:0c:4c:a0:87:1b:71:eb:47:b0:86:f1:
e5:eb:33:18:da:94:80:cc:0d:b8:ee:9c:3b:1f:ad:
16:97:cf:48:c7:20:f4:02:66:76:09:f2:38:04:b0:
41:6d:c3:6d:e4:de:00:5a:d0:af:48:50:7c:c2:77:
90:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3C:41:7A:99:F0:D9:30:81:DB:66:F6:E3:C0:F2:F1:E0:84:95:F1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f998bfdc-d6b9-4988-bae5-8fd450ec35c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
68:48:48:4a:1a:54:fd:28:90:fb:7a:57:3f:3f:95:d8:08:3e:
a6:74:be:79:53:af:6a:21:0c:12:09:84:7d:5b:0b:f4:6e:50:
0d:d9:67:9d:0e:77:6f:0a:0c:73:46:58:30:c9:d6:70:a5:77:
02:2a:4f:ab:6d:50:fa:d4:66:72:81:73:ef:0e:fe:ab:95:c4:
e7:ba:2b:68:55:e2:0c:af:2e:2b:84:57:ac:c5:1f:5e:ca:78:
8e:91:7c:17:c7:4c:56:c6:e5:27:06:f8:39:08:26:6b:81:0a:
9a:79:94:76:3e:4a:1a:77:95:28:39:f6:7a:3b:52:ec:7a:5e:
a2:f6:17:26:6a:31:7d:6f:4b:ed:f4:78:29:e9:70:f2:55:a3:
67:95:ba:7a:e4:c1:4d:8b:e1:b6:9d:b8:57:4d:fd:ec:e6:e3:
df:54:40:72:dd:06:1f:96:05:36:21:33:a4:cb:05:57:d0:89:
0e:b9:c0:c4:d9:47:91:ee:c5:4c:37:19:90:f3:d5:bb:d0:9d:
87:b2:ff:1f:71:96:d6:8e:a7:58:45:9d:4d:99:59:ef:9f:a7:
35:8e:3b:d3:55:de:87:af:0b:b7:10:23:8e:a8:57:a7:c9:0f:
89:74:17:2a:fe:dc:90:d0:8c:76:c5:40:f9:5a:f6:7c:a5:59:
91:57:ab:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:27 2025 by rpki-client