Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f9a1220c-4b90-49e9-8bf9-edc769e7773a.roa
File: f9a1220c-4b90-49e9-8bf9-edc769e7773a.roa (raw, json)
Hash identifier: jY6T8YqJ2FcjSM/p6xn5Xn2dbv6ULAKTTlXi14hBEjs=
Subject key identifier: 7E:A7:18:52:3B:85:6C:F6:C9:FF:06:E9:6A:8C:79:9D:B5:94:47:24
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 724D01F43AB9530B3FE45EEDD11E3F45B5354CAA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f9a1220c-4b90-49e9-8bf9-edc769e7773a.roa
Signing time: Thu 16 Jan 2025 00:00:00 +0000
ROA not before: Thu 16 Jan 2025 00:00:00 +0000
ROA not after: Thu 20 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:4d:01:f4:3a:b9:53:0b:3f:e4:5e:ed:d1:1e:3f:45:b5:35:4c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 16 00:00:00 2025 GMT
Not After : Feb 20 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:82:14:fa:82:3d:7f:64:92:4a:18:14:0f:56:
24:96:35:01:b3:e0:2a:b7:67:b8:86:3e:d0:2b:2f:
35:3f:d0:c0:3a:8d:aa:e2:40:63:f8:18:f9:77:7b:
e7:21:48:86:2c:c0:1f:7e:f2:6f:43:e5:57:cb:bd:
47:45:f2:e1:72:17:85:95:49:91:e6:c0:88:91:18:
9b:ed:5d:14:90:aa:ca:d9:ab:df:52:c7:35:18:74:
d5:cc:72:a3:97:dc:c5:14:ee:e2:8c:13:6b:38:cc:
9e:2d:d3:a8:c9:e1:82:6b:b8:8c:fb:1e:ed:32:05:
30:6b:df:e7:5c:61:fa:d5:dd:a1:74:24:0f:43:fc:
9f:a7:63:3c:56:93:bc:19:6d:69:57:17:4a:d9:72:
77:04:92:7e:6b:f8:e3:29:77:29:70:39:04:ce:c0:
fc:75:f7:a4:92:5a:c8:0e:ee:8e:00:38:ed:d6:57:
55:3b:5c:8b:94:81:fa:03:61:d4:4e:f8:b8:ae:1b:
d8:dd:6f:65:ce:42:b2:40:8d:ce:8d:cc:dd:97:b6:
24:c4:77:80:b0:34:2e:11:7a:a3:f4:6b:85:34:43:
35:a4:ca:87:a5:30:81:f8:52:28:96:a6:ad:e7:13:
d2:c3:b4:b5:9e:74:6a:38:c2:67:d3:1b:89:ff:f3:
68:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A7:18:52:3B:85:6C:F6:C9:FF:06:E9:6A:8C:79:9D:B5:94:47:24
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f9a1220c-4b90-49e9-8bf9-edc769e7773a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f0:91:57:d7:03:3c:b9:bd:5b:72:c8:65:16:8d:32:00:66:
d2:4f:8e:52:ff:05:1e:7f:46:3a:eb:85:17:e2:81:2d:4c:2c:
5e:60:12:d9:5d:f2:c6:15:ef:52:a8:47:76:20:a2:a7:1d:a7:
1b:b9:13:45:1a:07:de:2f:4e:1a:e0:24:0a:be:49:f5:3c:e4:
43:3d:d7:b2:6d:de:c6:d2:53:18:f5:be:a2:8e:29:ec:f5:39:
e2:9e:d1:fe:e4:a1:3d:f6:b7:77:b9:19:81:d8:7a:21:06:60:
2d:81:88:2d:13:cf:ad:83:a7:03:60:03:34:5e:ed:10:8b:7f:
98:57:51:14:84:dc:40:11:08:63:6d:ba:f1:67:a7:d3:8e:11:
1a:91:0b:aa:1e:26:18:fc:5e:98:d9:14:35:e9:20:1c:14:2a:
f6:84:df:c5:95:71:81:84:74:8b:d5:68:ae:cc:7e:21:d7:03:
7e:30:86:15:36:f2:57:d8:62:ad:ee:50:89:11:5c:04:1d:98:
a3:15:04:5d:e3:47:31:b1:7f:00:9b:d2:10:fe:df:bd:ab:25:
3e:ac:0a:2e:9b:69:17:e1:18:7f:39:60:dc:b9:07:2b:85:aa:
5d:b1:52:6c:29:9d:20:2d:9f:c6:39:89:65:b1:0c:73:2d:28:
b1:29:16:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:49:46 2025 by rpki-client