Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6d5631cc-fa81-4559-9967-f6af497c8b7e.roa
File: 6d5631cc-fa81-4559-9967-f6af497c8b7e.roa (raw, json)
Hash identifier: d7pR3JBfOz/X2QHtO9h4H0h89ZDaZ2euJcALNK5dMAU=
Subject key identifier: 48:86:78:F7:33:63:1D:20:5A:CB:69:1E:09:11:E5:E5:69:E5:51:8F
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 730F4801AA17C7018D943A3C273652AC0CAF3D24
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6d5631cc-fa81-4559-9967-f6af497c8b7e.roa
Signing time: Wed 07 Jun 2023 00:00:00 +0000
ROA not before: Wed 07 Jun 2023 00:00:00 +0000
ROA not after: Sat 10 Jun 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:0f:48:01:aa:17:c7:01:8d:94:3a:3c:27:36:52:ac:0c:af:3d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jun 7 00:00:00 2023 GMT
Not After : Jun 10 23:59:59 2023 GMT
Subject: serialNumber=3a717d93be6afdab78fdbccc49f13372079928e56b55ceb0ba8d0bc0b5f5898f, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b1:3c:69:69:09:f3:f5:15:94:3f:89:03:df:
25:4b:d5:3d:0d:8d:26:18:05:64:15:00:1d:e9:b3:
f5:ed:4a:aa:62:a7:86:72:36:41:d0:88:d8:e3:37:
50:8c:00:92:46:5b:94:5b:c9:ea:7d:fc:f2:b7:42:
e3:86:ae:f1:21:d7:5e:76:82:51:fa:b1:87:e6:fe:
6a:f8:14:04:b5:a1:5c:bb:9c:00:4b:93:9a:81:42:
65:40:fa:46:6c:57:78:25:a6:e5:0e:d4:ee:e8:82:
df:df:78:a5:20:64:20:3e:26:1b:28:87:2e:ac:70:
fd:96:fc:07:6b:9e:18:2c:e8:20:c8:fa:2c:6b:8f:
40:fd:a5:d1:02:01:20:62:74:84:c2:6e:36:1d:f3:
15:0d:19:30:77:b6:a1:74:82:13:21:4c:ac:11:02:
85:33:e3:8d:23:ac:eb:2a:19:66:f1:01:86:3b:e4:
90:a4:be:fb:4f:55:81:88:64:50:bc:de:88:b2:6b:
43:f4:cc:10:48:fe:dd:02:0c:ac:35:96:70:4f:a7:
81:be:25:a0:da:fe:30:af:35:e0:5d:b9:71:f0:cd:
5d:98:d9:f9:c9:c6:68:97:b0:f5:c1:ce:14:1b:88:
7f:86:d7:33:dc:8e:68:7f:af:9a:55:d6:5c:9d:b9:
cb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:86:78:F7:33:63:1D:20:5A:CB:69:1E:09:11:E5:E5:69:E5:51:8F
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6d5631cc-fa81-4559-9967-f6af497c8b7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:6b:79:e6:45:51:2a:6e:e2:3e:e6:e5:0d:54:f6:9e:07:c6:
6c:a9:67:6e:12:2f:2b:b4:de:a2:cc:31:b5:2d:04:f1:5c:b8:
eb:1b:f7:db:fb:af:c3:40:ec:4a:a7:fb:e0:1c:ec:8f:3e:bf:
21:3d:08:cd:32:a2:39:99:ed:2a:0e:4e:bb:e7:41:cf:ba:6b:
1b:3a:52:d6:68:1b:7f:10:d9:ca:da:3d:64:c5:e7:b6:de:a6:
8f:75:fb:54:12:4e:c4:af:3f:aa:89:7c:2e:37:54:64:07:16:
f3:c6:d6:11:67:1b:4c:d7:39:16:d4:d8:c5:8e:04:f2:b7:63:
67:ec:47:41:99:5c:e8:f0:0b:ec:0c:92:d2:46:4e:e1:33:c6:
62:ef:56:d8:2b:fb:9b:eb:94:66:f4:55:69:60:4f:ee:84:61:
1f:11:c2:29:38:7a:b9:09:ad:5c:13:65:25:bc:18:73:44:88:
ce:ec:12:fe:1e:fc:67:60:2f:c1:88:45:6a:be:25:6e:78:1a:
79:41:6f:e8:83:f2:fb:81:a8:30:d8:d2:4a:ad:38:46:4c:71:
f1:99:56:c2:5c:93:be:e2:cb:0d:70:f4:09:a7:49:11:25:af:
de:43:b1:29:6f:41:05:2c:ed:1b:63:82:3b:46:62:ed:dc:87:
d3:e8:4c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:53 2024 by rpki-client on console-ams.rpki-client.org