Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/be995d9e-3fd2-4fdc-b9a9-e0b1de2db632.roa
File: be995d9e-3fd2-4fdc-b9a9-e0b1de2db632.roa (raw, json)
Hash identifier: rRfwBkf1JUtN5K28w5brPOAXMyi6UK/iGORDNsnqSVY=
Subject key identifier: EB:3F:EC:18:C0:A0:0C:D1:D4:C2:FE:7B:C0:37:B2:ED:8D:03:7A:39
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 06CEB190DD6F9A7EF91FE6A2509590A49A37902F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/be995d9e-3fd2-4fdc-b9a9-e0b1de2db632.roa
Signing time: Thu 08 Jun 2023 00:00:00 +0000
ROA not before: Thu 08 Jun 2023 00:00:00 +0000
ROA not after: Sun 11 Jun 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:ce:b1:90:dd:6f:9a:7e:f9:1f:e6:a2:50:95:90:a4:9a:37:90:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jun 8 00:00:00 2023 GMT
Not After : Jun 11 23:59:59 2023 GMT
Subject: serialNumber=0a1f4d212173ce011a199040352ad3d103c22770e8ffc371e4438b870f52f022, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:a2:79:3e:07:94:e8:77:ed:36:fb:60:ab:
a8:8a:a6:e9:39:a1:1a:f9:5f:29:88:a5:ac:27:f0:
25:f5:a0:49:ff:30:84:5a:6f:52:7a:d6:dd:24:2d:
c0:62:a2:d9:72:96:5c:81:06:bd:41:53:5b:d1:1d:
c2:2f:a0:cf:56:17:26:3f:75:88:43:9a:c0:e8:b3:
cd:04:67:56:a7:7e:d7:2c:97:e2:77:f8:20:f4:f4:
28:a6:45:31:cc:56:b2:5b:21:bd:17:96:61:3d:6e:
3b:81:37:ec:c0:7c:d3:e6:d7:a5:31:0b:c7:80:7d:
2c:27:5c:70:ff:dd:6d:bf:0f:64:b5:ab:90:a3:6b:
be:b7:b7:85:92:ff:74:ea:3a:d1:bc:59:ab:39:e6:
3f:c5:4b:9c:59:7b:ce:44:6c:ea:81:c9:db:58:78:
e9:60:13:58:ce:23:76:c5:4a:f6:c6:37:82:6e:79:
5e:e6:0a:63:9b:3c:b1:51:b6:af:ae:40:06:94:7b:
13:65:8d:e1:aa:36:c1:6d:78:21:cb:57:c7:61:27:
74:47:26:3d:ba:b9:dd:67:1b:8d:4b:07:af:f9:b0:
65:e0:a3:bc:34:b0:05:be:76:5d:1a:51:11:ed:23:
61:22:21:ab:e4:cf:b9:4d:4c:1b:4a:c7:c1:87:59:
e0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3F:EC:18:C0:A0:0C:D1:D4:C2:FE:7B:C0:37:B2:ED:8D:03:7A:39
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/be995d9e-3fd2-4fdc-b9a9-e0b1de2db632.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
51:b4:30:a1:2a:07:e5:99:96:b5:af:6c:53:a4:d2:ec:a7:3e:
92:34:f6:4c:23:c7:31:d6:e2:86:fe:9b:4a:56:cd:62:39:e9:
8f:8c:2c:8d:02:12:09:5c:5f:34:0b:c5:fc:e7:13:9d:b4:ce:
a4:dc:5d:7f:26:50:ef:1b:12:43:b0:51:57:a8:ad:7f:b3:48:
3a:97:3a:60:de:30:ab:0b:ca:38:3a:fa:80:7c:68:22:d5:68:
e0:9c:cc:b3:ee:2f:47:0a:74:0d:21:7c:5f:96:6a:ec:d5:72:
40:ad:17:4c:08:be:02:d3:7b:ec:78:24:16:c6:2e:c9:f0:ec:
ce:7e:27:8c:38:a9:03:9c:f5:e0:e7:bd:ce:b4:84:12:a1:cd:
18:a2:f8:87:cf:6e:a1:29:bb:30:76:3d:4a:ca:91:1c:8f:3d:
5e:3f:57:2a:37:76:39:15:6f:76:c3:f7:98:19:c5:07:36:08:
60:d4:e3:18:98:13:d9:88:33:90:b5:ea:b8:60:85:7c:f0:53:
97:28:12:d5:83:c0:8b:c6:90:28:6e:d0:a2:52:e1:f5:48:66:
3a:23:36:ab:04:19:90:4f:8f:6b:a9:d2:73:47:5a:16:97:49:
84:3e:97:49:07:b6:bf:59:e4:9a:7f:a6:ff:ba:ae:4f:34:d2:
ba:33:c2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:50 2023 by rpki-client on console-ams.rpki-client.org