Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cc2e63b8-da0e-4abb-b7d5-dd4a915f7f70.roa
File: cc2e63b8-da0e-4abb-b7d5-dd4a915f7f70.roa (raw, json)
Hash identifier: TomnFKxnmI5zqMTzCkFiP5d+VgTHOWlxrnj8vBiLT0E=
Subject key identifier: 7E:D8:8B:F6:29:55:ED:B4:43:BB:3D:70:11:33:04:94:B6:C0:86:B1
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 16B746A82E6A6D8C457387BB99A28A8C03B8AFAA
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cc2e63b8-da0e-4abb-b7d5-dd4a915f7f70.roa
Signing time: Thu 08 Jun 2023 00:00:00 +0000
ROA not before: Thu 08 Jun 2023 00:00:00 +0000
ROA not after: Sun 11 Jun 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:b7:46:a8:2e:6a:6d:8c:45:73:87:bb:99:a2:8a:8c:03:b8:af:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jun 8 00:00:00 2023 GMT
Not After : Jun 11 23:59:59 2023 GMT
Subject: CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:27:74:73:6e:8c:79:f1:f9:f0:9d:97:55:c2:
24:08:2f:ef:5d:2a:f7:9b:8e:79:2c:90:cf:d3:c5:
b7:9a:57:98:0d:6f:ff:0a:ab:8e:38:bf:58:d7:28:
2e:65:3b:7f:35:a6:35:59:0a:42:9d:78:e7:2d:b6:
af:af:73:d0:ba:fc:8b:bf:b5:f7:0d:88:03:fc:32:
05:23:d3:47:a4:5a:e7:f7:a4:75:bc:da:d2:fa:14:
7d:7d:8d:ec:84:31:45:77:3b:6b:03:b4:e5:7f:17:
0a:fe:e5:33:89:a3:e9:4e:c0:ff:bf:ed:bd:40:ad:
cb:60:d6:05:37:f8:c1:b5:eb:cc:7c:07:f8:25:89:
40:2a:11:dc:25:08:75:89:7a:f8:67:a1:d6:2d:fb:
1a:61:ec:3c:33:6c:d5:55:fe:11:c4:57:41:c3:f5:
1f:0a:d9:e7:7c:a6:e4:3d:70:46:73:5a:28:d0:db:
c7:ec:94:98:ec:68:d0:4c:4d:11:a8:9d:30:76:6a:
24:7c:14:11:c1:f1:79:eb:b8:95:9c:a8:36:a4:5c:
04:85:f1:8c:ef:5c:ff:85:c2:60:2d:2c:2b:53:b6:
68:bb:30:89:a0:08:00:47:1e:29:ba:74:e4:f2:e5:
dc:23:0c:93:3c:19:2f:24:19:4f:53:d2:da:31:52:
bc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D8:8B:F6:29:55:ED:B4:43:BB:3D:70:11:33:04:94:B6:C0:86:B1
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cc2e63b8-da0e-4abb-b7d5-dd4a915f7f70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:ba:e1:3e:43:8d:52:7c:2c:cf:c1:07:60:82:aa:d1:a6:12:
4d:20:ea:18:ed:e4:12:ce:48:02:f3:44:f7:95:81:26:c6:58:
21:f4:03:d4:e4:6f:93:8f:24:1b:9c:c7:10:7a:67:d3:ed:33:
3a:75:be:f6:23:4f:25:82:f9:b8:b5:d7:a5:1b:3c:e1:90:b2:
ea:03:e5:83:22:4b:45:25:cd:76:07:b9:be:f5:2e:e7:e1:63:
21:1c:c3:d1:67:d1:97:85:53:d1:cd:ae:e2:1e:12:ef:92:fe:
56:6f:89:88:43:6b:f6:11:e0:14:24:77:27:cc:0e:c7:d5:aa:
ce:58:d5:bf:91:a9:51:e6:a3:af:29:35:5c:5e:4e:9b:c1:d4:
cc:c8:11:01:2d:4a:e4:53:04:a9:f1:9c:22:65:8a:4d:7b:68:
28:0e:48:20:96:be:af:85:ea:0e:aa:05:75:5c:55:83:cb:19:
1c:83:c2:2e:d5:0f:3a:77:9d:9a:cf:da:a9:07:77:05:99:79:
52:5d:55:7a:c6:aa:86:14:47:d4:56:63:79:a6:6a:e7:c7:a7:
ef:e6:64:f6:fb:36:f7:10:7b:61:e8:19:7c:1f:d4:de:3a:f1:
3e:f7:77:1c:54:75:7b:15:83:7e:1b:4b:41:4e:b5:3b:38:24:
74:97:3f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:13:15 2025 by rpki-client