Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/42711dc8-7d7d-46a6-a220-9e5bde0a5e63.roa
File: 42711dc8-7d7d-46a6-a220-9e5bde0a5e63.roa (raw, json)
Hash identifier: Uj0UeRCj98Ye5a5vHhOfyb88DNAmjJ+RhDTi0J5Bn8k=
Subject key identifier: 60:2B:92:F9:14:9B:AF:CE:E2:B5:B6:17:31:B2:99:E5:D3:5C:56:4B
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 68D8280BB99EE363B543554C77FB7085E10D7A3F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/42711dc8-7d7d-46a6-a220-9e5bde0a5e63.roa
Signing time: Fri 09 Jun 2023 00:00:00 +0000
ROA not before: Fri 09 Jun 2023 00:00:00 +0000
ROA not after: Mon 12 Jun 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:d8:28:0b:b9:9e:e3:63:b5:43:55:4c:77:fb:70:85:e1:0d:7a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jun 9 00:00:00 2023 GMT
Not After : Jun 12 23:59:59 2023 GMT
Subject: CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8c:1b:f7:08:1f:fd:60:de:2f:63:5c:37:12:
b6:fa:c6:1e:ad:75:db:67:c3:78:03:50:4b:91:85:
8b:b0:13:f9:74:ad:bd:4c:d7:6c:cb:c1:7d:12:62:
44:43:82:c4:55:fd:de:90:39:cd:5c:2d:a8:c4:b2:
ca:2d:63:0d:b6:a1:43:28:84:19:9f:7b:00:74:a5:
65:12:a5:98:20:55:c0:60:98:4f:11:1f:c6:e9:b9:
2e:82:74:95:d2:74:99:73:8b:50:a1:45:9c:6b:fc:
35:a3:db:6d:ec:3f:13:bd:10:18:34:16:37:a8:5d:
ce:8f:4a:37:9f:60:63:82:c9:0d:2e:59:2c:56:b3:
2c:64:0a:aa:4d:2d:a1:ae:c8:5d:96:c2:59:b5:64:
7a:b9:7f:08:af:6e:e9:8b:44:05:5e:0f:10:f3:4a:
3e:26:17:8d:14:30:b2:18:14:b7:61:94:75:cd:db:
ee:d1:f1:b9:3a:f8:ea:6d:09:bc:13:e2:bd:16:0d:
7f:f1:c9:60:ac:5c:a0:a5:9e:aa:b1:68:c2:ce:9b:
1d:06:1b:6b:cc:35:a8:14:69:25:24:9c:f1:fd:f1:
cc:b5:bb:ef:7b:57:00:92:fb:4a:39:62:86:86:99:
17:e0:3e:47:0e:b4:9f:c0:15:90:71:9e:c6:0e:ea:
65:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2B:92:F9:14:9B:AF:CE:E2:B5:B6:17:31:B2:99:E5:D3:5C:56:4B
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/42711dc8-7d7d-46a6-a220-9e5bde0a5e63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:46:b0:3a:1e:d6:eb:e8:ae:ff:26:a0:63:46:6b:88:c7:72:
58:a5:a7:06:40:c3:94:91:c2:f4:c0:7a:f9:0d:8f:65:df:11:
03:d4:ea:8b:e4:21:19:67:3b:a0:6f:aa:cb:b2:de:a3:b7:1f:
01:82:88:39:1a:06:f7:e2:ff:21:ca:0e:1b:12:b3:92:6b:63:
2a:56:d1:ac:5b:99:41:9f:5b:b4:1b:84:91:3e:14:80:b0:fa:
e0:24:d4:70:3f:19:4f:b8:35:fc:a3:91:2c:4e:7c:98:31:dc:
24:1d:53:a1:cd:c7:90:b0:6e:e3:98:de:ff:0c:98:3f:f4:92:
c2:2d:f4:89:79:2e:33:ab:72:8c:7b:34:62:36:68:30:ee:67:
48:4e:3c:da:a2:cd:45:08:fd:07:34:f7:54:8f:64:40:4a:bc:
fb:92:a8:f9:dc:eb:90:56:1a:14:93:0e:45:a8:88:23:9b:33:
2b:ae:f3:80:70:00:b3:4c:47:67:7e:e6:68:a7:cd:72:c2:12:
14:19:b1:fd:8e:6a:7c:27:91:22:cd:8a:91:57:36:b0:0d:84:
88:ea:e4:ed:6e:ca:ed:01:06:82:0a:b3:58:6f:64:ce:28:68:
af:fe:b8:f4:50:9a:84:2a:fc:9d:0a:35:3e:7f:f5:1c:b7:46:
91:b4:ac:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:29:01 2025 by rpki-client