Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f514d8cd-2b87-474f-ae17-a8c46bc30399.roa
File: f514d8cd-2b87-474f-ae17-a8c46bc30399.roa (raw, json)
Hash identifier: ESc8dVs1Wp7Feb29bA4m4xq0qcEvy8BwoxiKVK+gl6w=
Subject key identifier: 5D:83:73:FF:11:41:03:F4:7A:B1:5E:42:FC:54:E9:56:15:8C:66:C5
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 2B60A25B4C8596A0541E29274E85C20051FB1945
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f514d8cd-2b87-474f-ae17-a8c46bc30399.roa
Signing time: Wed 14 Jun 2023 00:00:00 +0000
ROA not before: Wed 14 Jun 2023 00:00:00 +0000
ROA not after: Sat 17 Jun 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:60:a2:5b:4c:85:96:a0:54:1e:29:27:4e:85:c2:00:51:fb:19:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jun 14 00:00:00 2023 GMT
Not After : Jun 17 23:59:59 2023 GMT
Subject: CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1c:c6:47:94:57:d4:ef:0b:64:93:4a:ae:27:
22:61:e2:34:b4:d0:99:74:d1:f2:bb:d1:16:ef:38:
6d:c3:4d:cb:5f:6c:99:78:4b:56:fa:f6:b5:d4:84:
ee:39:0d:5b:b5:0c:68:84:86:1b:a2:47:38:e5:96:
02:ae:42:db:37:c0:11:2c:40:53:9f:94:d2:22:83:
87:2d:06:7c:ca:6f:66:ef:68:61:c3:c8:1a:49:c6:
a5:9e:1f:49:33:55:8b:17:63:55:3b:31:70:57:d9:
fb:87:d2:36:03:97:44:d1:3d:75:ae:2e:15:86:4d:
0e:f2:07:5b:31:ec:24:09:44:05:62:5b:f9:4f:0a:
7e:e1:98:95:54:78:43:bf:98:ca:b8:7f:5f:69:ea:
75:a6:fa:c2:c3:24:af:57:f6:04:f6:24:ce:39:69:
ef:a0:a3:42:c5:62:42:ea:80:d3:76:a3:41:2a:5f:
cd:ae:19:5c:00:f0:93:6a:26:31:e4:d4:16:68:d3:
da:51:4e:36:b6:34:b0:0b:ab:5d:bc:4b:24:71:fc:
23:5a:db:fb:04:c1:3c:a7:73:e0:3f:c5:9f:a5:78:
93:ec:f3:f9:07:92:4b:5f:1b:6c:d0:fa:06:19:5f:
72:9c:fb:51:81:72:f9:bf:41:4f:90:c6:0a:7a:42:
f1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:83:73:FF:11:41:03:F4:7A:B1:5E:42:FC:54:E9:56:15:8C:66:C5
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f514d8cd-2b87-474f-ae17-a8c46bc30399.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ce:f0:0b:c6:7b:23:4c:77:ec:81:fa:57:68:d3:e6:fc:2f:
64:cf:b0:bb:13:30:58:b5:ee:29:79:59:6d:ac:a2:31:0c:cd:
9e:c1:ee:78:25:da:d1:69:65:d1:5f:36:c6:b6:15:ab:b8:51:
2d:39:53:bb:f7:71:10:d7:d2:ee:c5:61:0f:a3:f9:c3:8b:fc:
2b:4a:6a:44:64:e4:66:4a:77:2c:ef:01:2b:8f:48:6c:3c:cf:
06:b6:f5:78:b7:6c:df:c6:b1:5a:bf:a0:90:f2:93:c4:a0:59:
94:6d:ab:6e:db:6f:d1:41:22:15:39:df:d4:40:30:95:c3:06:
97:ae:b0:1d:bf:d1:57:8e:54:e6:7e:d7:30:19:9f:23:02:c2:
fb:e5:c4:78:cf:a9:4a:8b:55:aa:c1:55:2a:7f:f9:43:6e:33:
27:fb:9d:a1:ba:d3:89:da:da:d1:db:2c:0a:4a:d0:73:d4:18:
8e:95:ba:05:c8:da:3d:c8:15:73:e7:13:b7:4c:0b:ba:70:68:
38:6c:fd:66:3e:4b:b1:43:8e:08:28:0d:e2:fa:48:62:86:5b:
97:b4:3b:62:d9:a7:3d:8a:d5:a6:7e:09:e1:87:24:10:2d:09:
0d:90:d1:f3:18:b2:04:95:34:ca:c0:cc:c3:d2:94:9b:b4:a4:
46:45:05:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:26 2025 by rpki-client