Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fde7258c-1316-4f0c-9d33-c3b416f8735a.roa
File: fde7258c-1316-4f0c-9d33-c3b416f8735a.roa (raw, json)
Hash identifier: ITkpE5jx98rprHBIlTsa0pGiU2suP1gMsvAH5P52RRM=
Subject key identifier: 13:25:B4:4F:98:EC:42:95:2F:8F:92:A6:C2:2B:68:D9:6C:47:90:3B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 37A5FD755065DA7738937E0002E4388F2A65404C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fde7258c-1316-4f0c-9d33-c3b416f8735a.roa
Signing time: Sat 15 Feb 2025 05:43:22 +0000
ROA not before: Sat 15 Feb 2025 05:43:22 +0000
ROA not after: Sat 22 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:a5:fd:75:50:65:da:77:38:93:7e:00:02:e4:38:8f:2a:65:40:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 15 05:43:22 2025 GMT
Not After : Mar 22 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2e:bf:a0:1f:b4:b0:a9:bf:16:36:56:d2:39:
1d:64:f6:f6:74:6c:b1:81:9b:d1:7b:67:06:4a:14:
e9:17:6e:aa:43:5c:80:1b:aa:e3:e2:4f:5f:4c:2d:
c4:b8:14:0a:02:f5:10:f7:1a:8b:a5:59:ba:33:71:
4c:d0:b5:77:7a:40:d6:74:5b:f0:5f:20:d6:36:83:
76:0d:d6:c7:2a:d8:77:e5:ec:51:3a:56:f5:ae:f6:
38:af:c8:c3:4a:be:7b:94:cb:4e:6e:a9:65:3d:54:
59:16:45:6e:c4:4c:83:39:9f:c7:cb:d4:57:65:b6:
f1:25:5b:e6:7a:a7:69:2b:fc:e6:34:75:c0:c1:c0:
5f:36:aa:0f:80:07:ad:4d:b8:8c:bf:db:18:70:cb:
9c:0d:59:1e:b6:e3:b1:9f:81:2a:75:2a:33:02:4a:
02:54:d3:30:85:6c:25:fa:b6:f1:89:2d:e7:fa:fa:
e7:34:b3:26:55:cb:07:0c:84:99:16:7d:65:af:7e:
73:a5:90:5b:e3:25:59:b4:b3:4a:96:e4:95:f6:ba:
91:74:41:b1:c2:9f:6f:7c:74:64:99:fc:7e:75:d5:
05:c1:76:6f:ff:ba:2c:db:b7:7b:13:c9:a4:28:93:
d8:2c:67:47:e9:32:91:fc:43:a7:6b:54:e3:53:6a:
76:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:25:B4:4F:98:EC:42:95:2F:8F:92:A6:C2:2B:68:D9:6C:47:90:3B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fde7258c-1316-4f0c-9d33-c3b416f8735a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ab:5a:9a:5a:25:b0:2f:53:6d:45:1d:85:b2:73:53:1b:8e:
42:3e:ad:46:59:26:5c:1c:77:f6:65:68:4e:0c:93:9f:13:38:
ff:47:00:e3:25:45:c3:a7:7e:15:1b:2c:31:f4:0c:7f:a6:08:
f6:cc:50:1e:f3:fa:d9:93:db:bf:97:26:60:31:5c:27:b3:ae:
01:3b:cc:df:27:35:d5:31:16:5d:7a:1c:60:f3:25:96:1a:3a:
e8:b4:12:18:1f:6c:13:6b:78:ea:39:e6:2c:ca:69:08:64:6a:
99:9a:5b:e2:66:f2:de:5b:23:09:1c:68:3a:13:30:6a:07:dc:
91:e1:cb:86:69:ee:cc:73:f6:2b:78:d0:7f:88:87:b3:88:46:
a3:87:b0:93:50:ec:2d:66:50:3f:3b:0b:23:29:78:0e:e0:6d:
d2:86:05:18:c3:11:d1:82:45:c8:2f:e8:95:fd:ea:d1:ee:00:
85:fb:fd:7b:38:73:6f:d9:ef:34:c2:de:4d:0c:10:58:84:30:
93:5d:61:d8:46:af:ab:39:fa:aa:96:b6:d4:a4:a4:b1:6a:9f:
18:40:46:40:00:89:38:92:75:5f:2b:56:f2:b5:4e:8d:cc:5c:
f2:37:1e:9e:19:35:9a:c0:d1:9b:26:f3:4f:ac:c7:31:66:46:
77:05:ed:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:04:14 2025 by rpki-client