Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bb207758-e5b4-438b-ad52-7eb4134bc28f.roa
File: bb207758-e5b4-438b-ad52-7eb4134bc28f.roa (raw, json)
Hash identifier: nl/1DoeLTvt5f+U1auCZk4xOutxD+HdExXxG8LFhPOg=
Subject key identifier: 82:73:2D:8F:45:51:C0:A1:91:4A:09:1D:D2:82:97:91:4E:68:8E:88
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 7BD8B517D8FD1AAA2EA80B557909BC169442B47C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bb207758-e5b4-438b-ad52-7eb4134bc28f.roa
Signing time: Fri 09 Jun 2023 00:00:00 +0000
ROA not before: Fri 09 Jun 2023 00:00:00 +0000
ROA not after: Mon 12 Jun 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:d8:b5:17:d8:fd:1a:aa:2e:a8:0b:55:79:09:bc:16:94:42:b4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jun 9 00:00:00 2023 GMT
Not After : Jun 12 23:59:59 2023 GMT
Subject: serialNumber=e225ff2bbfaf5a1a610aeadb52a9e5309b59eddebc87e1cc2530808ecbafbd63, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:16:d1:28:b0:15:2e:1d:77:c0:23:66:2d:
96:e2:74:a1:f2:77:92:86:1a:5c:75:40:23:71:2a:
b0:ec:21:78:d6:56:47:87:05:16:af:51:4f:cc:7a:
7b:46:9b:92:8d:0d:c4:b4:94:45:83:90:4c:52:ac:
fa:a3:19:27:82:32:70:72:fc:c4:a8:c5:bf:b4:5f:
f2:3f:61:8d:69:ca:18:a9:3a:8d:ce:35:db:39:7a:
90:5b:d4:e3:35:03:92:80:32:98:17:1f:f6:1a:c6:
88:1c:35:f8:ec:aa:82:cd:17:2a:af:54:c0:85:8a:
5f:16:b3:85:c4:d2:d7:6d:e8:9c:b8:ba:e7:99:82:
48:b9:08:5a:19:b8:cd:47:07:35:33:b2:d3:69:d0:
58:7b:51:f0:2d:ec:0f:9f:06:05:03:75:7e:37:b3:
66:be:e0:97:5c:7e:0b:6c:d3:d1:ff:ea:79:bd:f2:
f8:bb:72:4b:21:4d:fd:9d:b6:58:16:88:ac:46:ff:
dd:aa:7b:c8:70:cf:9a:31:6a:25:36:70:bb:fd:32:
99:bd:0b:cb:7c:96:79:03:e9:3d:8e:bd:6e:c4:81:
ef:55:47:da:66:cb:74:5b:4e:01:a9:59:89:a6:ab:
63:fa:68:f8:d3:dd:a5:88:f0:5b:9c:e3:a5:05:66:
57:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:73:2D:8F:45:51:C0:A1:91:4A:09:1D:D2:82:97:91:4E:68:8E:88
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/bb207758-e5b4-438b-ad52-7eb4134bc28f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
33:b6:71:ac:8e:d3:33:c8:49:a2:6b:9e:83:dd:9e:cb:ea:53:
28:d1:6d:c6:91:62:5f:e9:43:4c:6e:e0:39:bd:3a:d0:fd:38:
84:1a:e1:9d:65:d6:35:af:f1:a7:74:90:86:8f:3a:47:a1:c1:
cd:e5:35:73:81:39:cd:83:e0:29:16:1d:e4:e5:e9:36:31:cc:
ae:57:f2:22:71:e7:e1:a8:ef:00:79:69:c0:11:f7:9e:6b:25:
89:5a:c7:9b:6b:c3:16:f1:d6:84:7b:20:41:86:44:b1:fb:d6:
c7:45:a2:79:d7:87:72:77:94:21:36:a1:bd:d3:cd:c3:01:91:
9d:ab:fa:40:72:e4:e0:74:c3:f8:c9:51:f2:8e:ac:0c:d4:b0:
b6:7b:79:31:45:3f:fb:f1:6c:18:0f:df:04:78:45:5e:31:a1:
08:4b:75:57:08:08:67:01:bf:47:f0:de:57:bc:57:ff:c7:a5:
ea:83:68:ad:29:f1:23:58:47:84:40:08:10:2f:76:a9:8d:66:
a5:35:52:fd:d4:e7:80:85:49:b8:3d:ff:82:b5:4c:f5:bd:5c:
c7:77:a1:87:2a:28:4f:06:16:ff:0e:f9:66:63:16:6c:69:04:
56:ff:d5:a1:e1:8d:8a:56:83:f7:a5:91:50:6d:7b:92:1c:0c:
8e:04:a6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:55 2024 by rpki-client on console-ams.rpki-client.org