Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ffe1a174-956b-4a56-a845-467c5ea1b341.roa
File: ffe1a174-956b-4a56-a845-467c5ea1b341.roa (raw, json)
Hash identifier: ifzXBdJHL/SXaPZ8JE1FPIo3sbs2wydVjk4loFlfqaM=
Subject key identifier: 54:EA:D4:4D:88:4C:A5:F3:3B:6E:BA:16:BE:2B:05:14:21:2C:A1:A7
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 288DE0C1D5A91C83EBBD0E66144B3B5D378B0850
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ffe1a174-956b-4a56-a845-467c5ea1b341.roa
Signing time: Sun 27 Aug 2023 00:00:00 +0000
ROA not before: Sun 27 Aug 2023 00:00:00 +0000
ROA not after: Sun 01 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:8d:e0:c1:d5:a9:1c:83:eb:bd:0e:66:14:4b:3b:5d:37:8b:08:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 27 00:00:00 2023 GMT
Not After : Oct 1 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a3:4f:fe:f7:f0:f5:65:a9:27:41:73:dd:7c:
d9:21:47:db:b9:90:15:a7:cb:aa:e1:e9:71:c4:6a:
24:1f:a2:cc:3b:40:ba:15:7a:c4:8b:22:59:33:1c:
ee:74:c2:d3:77:e9:25:32:5c:ca:60:c3:24:f5:84:
2d:76:28:31:c3:a0:d9:98:50:aa:35:e2:9b:b5:88:
61:c0:b7:fe:3c:78:ed:6a:e3:2a:af:bf:6e:25:0c:
ac:f2:7b:99:b9:fe:3e:e2:8c:d6:da:78:41:cc:34:
ab:88:b4:e0:8a:ca:20:51:97:ac:3f:df:f1:25:d3:
73:1b:58:ae:63:be:d6:84:1b:f5:36:43:91:24:b7:
0a:3e:63:0d:bb:a9:5b:8a:0e:58:a2:14:10:93:f8:
55:55:49:52:8a:4c:8c:86:bd:4d:3e:05:f2:46:ba:
54:ff:2c:ad:1a:fb:28:7d:c6:9c:9a:42:3a:ab:74:
99:0f:fc:91:4a:87:38:78:b4:09:49:83:0e:f1:1f:
14:c8:9f:d2:d8:9b:ba:10:29:58:5a:bc:88:9b:51:
24:f3:e2:0e:24:c4:b9:63:4e:9f:5f:84:ff:c7:e2:
4b:61:61:23:36:db:e6:87:03:d2:55:3d:a3:50:ec:
34:13:8d:53:3e:70:a0:e8:92:a2:0f:cb:f5:d0:7e:
80:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EA:D4:4D:88:4C:A5:F3:3B:6E:BA:16:BE:2B:05:14:21:2C:A1:A7
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ffe1a174-956b-4a56-a845-467c5ea1b341.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
12:04:1b:91:1c:ec:13:25:4f:07:6e:44:83:a3:2f:b4:f7:98:
b9:34:d7:3b:78:91:49:85:51:3f:48:b8:45:8a:b0:69:ba:5e:
44:5f:c6:31:27:e5:8a:13:8a:b3:e9:a6:94:cd:76:ab:0d:11:
dc:dc:dc:c7:bb:cf:14:65:e6:1f:35:e4:84:3a:a2:0d:b6:28:
34:d1:8b:e3:66:2f:45:c2:95:ba:c3:67:23:e5:39:80:39:d3:
42:8b:ce:63:3b:d3:9e:e5:06:c9:5b:45:cf:32:ca:95:3e:21:
dd:b2:96:ab:38:a6:be:95:36:79:6b:7d:94:88:93:18:5f:1b:
f8:0e:15:67:a9:6b:5c:94:65:df:68:4e:5a:eb:f2:7b:bb:aa:
e0:11:b3:79:24:08:d1:2f:25:98:3c:fe:9b:32:44:0c:88:b1:
e7:32:0a:af:37:d1:8d:69:d3:4d:e8:b7:e7:fb:20:2e:7b:8e:
d6:06:85:5b:e3:6f:6b:ca:dc:ff:cd:7f:85:2d:e1:f3:75:56:
84:50:46:f5:59:19:0e:ae:b7:34:ff:c2:16:f0:86:05:96:31:
85:ec:dc:0c:5b:55:e7:b1:4d:42:70:30:15:01:b4:0a:94:60:
8d:ab:0b:84:24:0f:6f:38:d9:fb:51:56:8d:7f:ab:28:83:58:
32:cd:04:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:34:59 2025 by rpki-client