Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d3698187-49b0-4c89-b14b-30b52516d75b.roa
File: d3698187-49b0-4c89-b14b-30b52516d75b.roa (raw, json)
Hash identifier: S/jjpi7EWSoTndeGRKOPOfv9UnPVbUM6ui+2YxoYpks=
Subject key identifier: 0A:51:78:6B:75:2D:25:0F:9A:13:E4:A3:14:23:38:91:21:AC:44:12
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 45F77A4B8D0ECE433CA6F56E3BDD40993485C576
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d3698187-49b0-4c89-b14b-30b52516d75b.roa
Signing time: Fri 09 Jun 2023 00:00:00 +0000
ROA not before: Fri 09 Jun 2023 00:00:00 +0000
ROA not after: Mon 12 Jun 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:f7:7a:4b:8d:0e:ce:43:3c:a6:f5:6e:3b:dd:40:99:34:85:c5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jun 9 00:00:00 2023 GMT
Not After : Jun 12 23:59:59 2023 GMT
Subject: serialNumber=45153314ccdfa645f298edcfbfbe87e6b3340dc7d6470143c8c2eac9b61f8731, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d7:fd:61:ad:2b:0c:5a:95:a0:65:67:63:da:
ce:44:fe:cd:fe:56:ab:3a:06:99:4b:fb:c2:3d:62:
e6:4c:8b:a1:e4:df:e4:98:2c:31:33:f7:c3:98:1b:
61:01:d4:86:89:ae:75:02:4d:fc:1f:26:c9:69:60:
80:88:c9:7c:78:18:6b:52:ae:47:f7:68:c8:4b:4a:
84:0f:fe:a0:b2:6b:17:f2:7d:6e:6a:b4:1e:47:51:
c6:67:f6:b3:e1:2c:71:01:b5:b3:db:eb:9e:eb:f6:
d8:6c:1c:6a:50:20:b3:ae:ec:77:4c:13:8c:7e:60:
2c:28:48:dc:a0:a9:09:10:93:5e:cc:79:c8:4c:c0:
0d:90:9d:43:bd:25:02:c4:4f:c1:43:f2:50:d5:9d:
b6:00:1e:e9:16:1b:88:a5:ff:28:a9:41:2d:f4:83:
da:f0:ab:c0:fe:7a:c0:59:cb:83:2f:28:ff:ca:1d:
59:26:35:f1:36:5a:97:b8:04:9d:e0:9b:53:84:a9:
3a:c2:65:0c:44:c3:36:a9:54:7c:50:fd:ba:7b:1c:
07:62:b7:b6:7a:cf:d2:e3:3c:58:a2:9c:12:0e:b6:
60:bc:39:4d:de:fe:46:db:7c:c5:67:3a:75:66:b4:
25:1c:8e:96:db:7f:f6:a7:75:7c:90:82:e8:6a:f5:
dd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:51:78:6B:75:2D:25:0F:9A:13:E4:A3:14:23:38:91:21:AC:44:12
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d3698187-49b0-4c89-b14b-30b52516d75b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:55:74:7a:ce:8f:f1:f0:55:52:66:5c:c5:3f:c2:06:36:a2:
f6:06:50:14:04:e5:e0:46:7b:b4:35:13:a0:58:13:f9:ea:95:
c9:1a:0b:ab:b0:ff:64:36:48:78:3b:bf:81:91:bf:8f:78:61:
0a:9c:2d:48:6b:18:51:f7:cc:1c:06:26:32:bd:aa:17:ee:6f:
80:70:82:17:3c:fd:3b:f4:db:2b:33:39:e2:68:cb:a6:d2:f9:
be:56:66:0c:47:f0:8e:5b:0b:af:c6:8a:51:6b:ab:7a:0c:cd:
de:6b:4f:11:79:82:53:69:5b:90:c8:82:3a:af:40:eb:a8:07:
f8:c5:7c:af:6e:36:36:98:1e:21:6d:0f:75:e5:cd:ea:b3:6b:
ae:bc:b8:35:15:eb:0b:cb:c5:58:da:53:a1:86:a4:54:90:de:
f7:83:c8:c0:dd:d1:cf:07:54:3e:25:99:ba:8f:61:42:fe:e9:
41:bc:fb:f6:f3:7c:e3:eb:cd:61:1f:32:c0:a2:de:d6:2d:6e:
f4:93:47:16:36:16:df:d4:be:b7:7a:82:41:8d:81:39:7c:8f:
38:9e:5f:24:14:42:68:6b:8e:0e:fa:21:f1:05:e5:92:ed:18:
76:da:6d:1c:13:c4:78:0c:f9:1b:82:d1:44:df:f0:18:6d:6d:
f4:35:94:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:02 2024 by rpki-client on console-ams.rpki-client.org