Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/68997c7b-c405-46ee-a929-cac899018525.roa
File: 68997c7b-c405-46ee-a929-cac899018525.roa (raw, json)
Hash identifier: 8vN47TVDP2Ih0OLkVQWXYuPZrS26PSyVcPjPCFF0wlI=
Subject key identifier: 9C:35:85:3D:E3:E8:B7:4E:2C:06:63:9C:96:20:D7:C1:36:45:FE:96
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 1870F8264868206B15CC3E29AE4E9DEA217393A1
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/68997c7b-c405-46ee-a929-cac899018525.roa
Signing time: Thu 08 Jun 2023 00:00:00 +0000
ROA not before: Thu 08 Jun 2023 00:00:00 +0000
ROA not after: Sun 11 Jun 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:70:f8:26:48:68:20:6b:15:cc:3e:29:ae:4e:9d:ea:21:73:93:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jun 8 00:00:00 2023 GMT
Not After : Jun 11 23:59:59 2023 GMT
Subject: serialNumber=a986247c5850d93a4c0a13a87ee886a27bdb092847326f6bfffc9fe98d1af723, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:52:2d:1b:3e:d8:c7:77:23:b7:3f:55:a0:11:
84:f7:9a:6f:e8:09:94:dc:91:22:0d:bc:d0:0e:74:
bf:39:81:69:61:cf:d4:f4:c3:22:54:76:72:6f:1c:
f4:4e:f6:5d:8a:44:2f:1e:b7:2e:90:0d:69:fe:85:
e2:93:68:37:62:1b:e3:b7:fc:7f:bc:6d:4c:07:e0:
0d:07:71:39:c8:cf:92:7e:21:48:78:19:bd:37:51:
51:52:22:db:a8:c8:f2:b2:70:14:87:10:62:a7:63:
7a:94:d7:78:16:9d:47:3e:9b:8d:0f:59:f0:ba:3c:
01:bc:53:40:7b:f7:23:df:5b:62:89:f8:58:e2:c1:
ac:ef:c3:3e:b2:79:0d:f8:a4:66:09:5a:ff:f8:47:
dc:3a:18:2c:af:8e:b0:d2:02:47:1a:92:1a:3e:c2:
5c:72:20:57:7b:ca:93:62:0e:74:02:7e:91:fe:c8:
40:5f:98:e7:c4:ad:3e:c0:6b:dd:3e:57:ba:a3:7c:
bc:21:45:41:6b:82:4d:50:e4:33:81:a9:56:88:e9:
6b:9a:a6:9e:76:41:65:4e:89:71:eb:3d:38:65:1c:
00:27:31:ea:49:26:9d:c9:34:d1:f9:ea:a2:f0:2f:
96:cd:e3:f6:43:a4:03:76:ca:22:18:cb:d0:7b:fc:
30:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:35:85:3D:E3:E8:B7:4E:2C:06:63:9C:96:20:D7:C1:36:45:FE:96
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/68997c7b-c405-46ee-a929-cac899018525.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
49:20:3f:ab:ea:8a:3c:45:7c:8c:5a:80:37:85:ea:ef:08:72:
4a:40:a9:8e:58:f4:d6:3f:ea:e3:55:51:c5:1b:29:ca:ac:46:
98:ca:3c:04:d3:59:24:9c:87:53:ee:e6:6d:fd:b0:d7:3a:ad:
58:b3:8f:42:ad:de:0e:93:25:27:ea:ed:46:89:64:23:dd:b5:
30:14:52:cc:da:9b:e3:0b:1e:35:d8:86:17:fa:af:89:d4:d4:
d3:ef:11:89:71:21:a5:36:f7:81:58:f2:c2:71:5d:08:f1:81:
e9:04:ef:37:c8:47:3d:d3:e2:00:49:53:f4:2b:e7:6c:35:02:
1e:0d:51:4c:40:1b:59:0b:54:39:c2:cc:17:4b:30:96:72:1f:
6c:30:3f:26:0d:35:fd:a5:b9:cd:f9:f1:c7:c0:12:55:2f:98:
7c:11:a8:64:64:7b:22:3a:0e:9b:4c:c1:f8:8b:8c:3b:10:63:
8f:ce:90:aa:83:a5:21:77:eb:aa:f7:4b:e1:ab:7c:86:fd:5f:
c3:43:2d:9b:dc:5b:66:c4:a3:6e:ca:7a:cc:53:ef:c6:f6:ea:
0a:6f:9b:73:03:cb:83:59:a3:ec:8a:12:8d:88:f4:d9:71:1d:
64:0d:6f:43:69:25:79:f2:15:be:4f:7f:31:fb:ca:48:8a:03:
ea:4c:aa:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:53 2024 by rpki-client on console-ams.rpki-client.org