Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c42b6b44-1133-4ed2-aec4-e025291ffec6.roa
File: c42b6b44-1133-4ed2-aec4-e025291ffec6.roa (raw, json)
Hash identifier: yyebNWm3Bbx2YWKPWmP/SVnjyRuwm02dbEi4RaGmEBc=
Subject key identifier: A6:59:05:9B:32:9D:00:6B:6A:D4:D9:A2:D9:FA:81:C9:23:F4:8B:72
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 2DADCE303E946B33EB6CF2703C45FEA301C9EB60
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c42b6b44-1133-4ed2-aec4-e025291ffec6.roa
Signing time: Fri 09 Jun 2023 00:00:00 +0000
ROA not before: Fri 09 Jun 2023 00:00:00 +0000
ROA not after: Mon 12 Jun 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:ad:ce:30:3e:94:6b:33:eb:6c:f2:70:3c:45:fe:a3:01:c9:eb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jun 9 00:00:00 2023 GMT
Not After : Jun 12 23:59:59 2023 GMT
Subject: serialNumber=911b4f16e42acf76d9ebd24d1c08620584f5c6c71eee85084fb11f65339d5661, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d2:b8:69:c6:e8:9e:96:67:70:5c:23:55:52:
0e:19:96:d0:65:33:ea:0a:41:28:df:02:6f:7b:65:
fa:ab:5e:cd:c7:0e:5d:51:2d:1a:6a:88:9e:b3:fb:
cb:49:f1:cd:1c:90:f5:27:90:92:ac:b2:c1:a7:2a:
4a:05:97:9d:49:af:31:88:d2:66:79:39:b3:a2:b0:
9c:db:bd:79:a1:c6:97:fd:25:b9:34:84:7d:24:07:
53:d4:c4:82:24:1e:b5:11:06:26:2d:59:9a:e6:16:
62:ce:65:83:55:e5:ad:e3:9d:71:ef:12:70:10:e0:
0b:96:65:3b:bf:d7:90:07:93:3c:f1:d4:6e:af:ef:
e3:8d:f1:2b:5a:f1:04:1e:0d:3a:60:3e:7a:34:69:
0f:33:8a:7b:43:df:31:ee:f6:3b:7f:7f:90:61:96:
3a:82:59:5c:0a:fd:7c:e0:7f:2a:13:07:1d:a6:6a:
51:c6:2e:6b:0e:2a:ef:18:de:92:27:8a:4e:be:c1:
94:7a:ba:55:25:4e:11:02:f0:7b:af:c4:50:27:db:
22:2c:41:00:cc:f8:57:4a:5a:7e:fc:e9:36:34:87:
35:17:1c:08:86:6d:cf:6a:bb:e8:b7:96:a3:c6:2e:
8c:94:bb:17:af:05:13:bd:d4:cd:6d:73:18:c1:f2:
ed:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:59:05:9B:32:9D:00:6B:6A:D4:D9:A2:D9:FA:81:C9:23:F4:8B:72
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/c42b6b44-1133-4ed2-aec4-e025291ffec6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
23:9b:95:c8:9c:06:d9:84:2e:0c:03:97:46:37:a9:b7:97:a8:
2d:fd:70:35:7a:0e:be:75:9d:ba:f3:52:93:12:c4:54:45:e0:
05:9f:d1:2d:cc:0d:4c:f0:8e:0a:71:c1:34:e9:52:56:1e:2a:
b9:ec:32:81:25:68:2f:95:79:5a:f4:a0:be:d9:4e:bb:48:2e:
94:37:60:fb:c4:9f:cf:9b:87:16:cf:17:35:b9:c6:8e:7c:61:
9e:ea:6c:ec:95:e4:55:8f:90:b5:df:1d:d0:e7:63:0d:cc:3c:
41:9f:52:54:69:d3:ba:00:35:e5:c5:0f:17:e9:76:c9:e5:73:
70:e8:7f:ce:59:e4:fb:83:25:a1:f8:b4:a5:94:3b:b3:15:d3:
aa:c4:02:60:c6:16:52:4d:45:0d:ec:8d:95:b8:7c:0a:ed:63:
1e:da:34:1c:14:48:b4:28:51:e5:69:2e:cb:4f:48:a5:0c:76:
c0:23:2b:28:e3:e9:83:24:c8:10:21:f0:7e:9b:26:1c:4f:f1:
29:69:74:9b:24:a2:c7:4d:63:ab:03:50:05:cb:6e:03:43:64:
1b:6d:a6:d1:38:a7:c4:06:6b:a9:b1:c7:cd:bf:33:6b:57:fd:
4d:14:2a:40:c9:aa:6a:47:ab:0e:72:46:86:c0:1b:7b:92:43:
d4:d4:18:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:52 2023 by rpki-client on console-fra.rpki-client.org