Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ff018d8b-53da-4018-92a8-fc3313c9a836.roa
File: ff018d8b-53da-4018-92a8-fc3313c9a836.roa (raw, json)
Hash identifier: yPXwYNGKaj53m3BE9TawSVTF97T9EfQC2yAEoELQoDs=
Subject key identifier: E7:D0:15:99:98:15:14:F8:64:E3:8B:CA:AB:7A:9C:E3:4A:3D:02:D1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5CF867C9414605B38D6ACFED89BF6EE52981E742
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ff018d8b-53da-4018-92a8-fc3313c9a836.roa
Signing time: Fri 18 Aug 2023 00:00:00 +0000
ROA not before: Fri 18 Aug 2023 00:00:00 +0000
ROA not after: Fri 22 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:f8:67:c9:41:46:05:b3:8d:6a:cf:ed:89:bf:6e:e5:29:81:e7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 18 00:00:00 2023 GMT
Not After : Sep 22 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:40:e7:aa:13:42:44:bc:bc:19:40:8d:c6:
6a:03:12:a3:bd:56:b2:9d:dc:56:95:9d:50:f6:3e:
64:0c:bb:d8:06:64:9d:9c:4f:80:7c:64:25:cd:9e:
4f:85:fe:89:c5:7d:5d:31:e2:9b:b3:b7:d9:9a:91:
85:d1:15:ea:9b:b9:79:7c:7c:49:f0:0f:39:c0:6b:
3e:fe:56:57:0f:13:67:9e:e9:06:f6:cf:61:9a:1a:
c4:44:8c:71:cc:3e:a0:82:7c:9c:d3:cb:bb:df:bf:
75:e6:47:a7:a6:c8:fb:10:64:d4:81:5f:1d:f4:c4:
5c:0f:58:20:e0:a0:fd:7e:c9:fa:fd:28:f6:3a:a2:
45:ba:06:1f:50:fc:b3:0d:fc:0e:61:c4:cb:81:14:
ea:b8:4a:7f:79:18:46:29:43:1c:17:0a:81:5d:55:
8c:aa:e9:d7:68:ea:e7:75:17:57:05:c5:17:49:59:
fb:21:0f:75:1a:03:d9:4f:ba:9b:3e:a6:c2:30:2b:
35:3b:03:b7:68:da:0b:ab:d0:94:29:b8:4f:67:8f:
04:b7:43:71:5c:92:c2:81:0f:47:17:2b:54:45:a7:
23:4b:d3:8d:e9:08:f5:ed:dc:97:e5:ae:8f:28:9f:
0d:42:4f:be:f0:95:cc:f8:22:f2:e2:ff:99:bf:79:
46:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D0:15:99:98:15:14:F8:64:E3:8B:CA:AB:7A:9C:E3:4A:3D:02:D1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ff018d8b-53da-4018-92a8-fc3313c9a836.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
63:da:2c:61:0c:01:07:2e:a6:d9:aa:71:b8:bd:3b:99:7a:ae:
89:30:26:1a:3f:5c:6c:f5:89:c2:74:eb:79:6b:fd:c3:d9:da:
1b:86:f8:61:f7:47:51:ec:71:95:65:c6:e7:3f:02:80:85:59:
f5:34:ea:51:8f:b1:3f:2c:85:64:16:d2:3d:b1:0b:2b:df:8b:
09:73:1a:66:9b:09:09:0b:9c:56:e4:5b:fa:1d:33:26:94:f7:
9e:0b:72:a1:58:d5:f2:41:99:2b:a0:78:3c:6b:09:58:bc:7b:
b7:bd:04:e4:88:b5:41:66:21:cb:6d:a5:23:fe:8b:96:e1:e9:
86:bb:bc:19:63:f9:54:12:95:fa:b9:5f:b6:87:f5:a1:b0:87:
60:1e:07:d1:a6:a1:34:96:84:ed:ad:43:ef:c1:0d:af:9f:ea:
1c:bb:65:de:7f:20:a8:66:26:dd:00:a7:1c:21:70:fe:5b:06:
fd:5d:ad:b4:bb:10:c3:42:3c:fc:20:59:ad:b2:8f:10:7c:88:
b8:1b:7c:65:90:a8:bd:10:22:9f:f3:ba:e2:8f:82:5d:73:06:
bd:21:0e:19:9a:89:1b:c3:69:6c:28:4d:3d:46:22:57:16:1d:
b0:c8:56:62:23:da:65:64:f6:b0:31:4e:b8:22:c8:85:0d:9c:
b0:24:fc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:17:33 2025 by rpki-client