Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ec82b174-f459-425d-9b1e-c1c356d1d7bc.roa
File: ec82b174-f459-425d-9b1e-c1c356d1d7bc.roa (raw, json)
Hash identifier: eXXlasK12z2Hbq2W66IA+9uobpsp3xbpmyzzxaTRBgY=
Subject key identifier: 78:98:AD:49:B7:CD:CE:97:72:B6:E0:EA:8E:5F:39:27:85:F4:D4:8D
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 592FA83216EDA70433DFBB138D06B0DCBFCE9957
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ec82b174-f459-425d-9b1e-c1c356d1d7bc.roa
Signing time: Wed 07 Jun 2023 00:00:00 +0000
ROA not before: Wed 07 Jun 2023 00:00:00 +0000
ROA not after: Sat 10 Jun 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:2f:a8:32:16:ed:a7:04:33:df:bb:13:8d:06:b0:dc:bf:ce:99:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jun 7 00:00:00 2023 GMT
Not After : Jun 10 23:59:59 2023 GMT
Subject: serialNumber=b25990e49696102172db6e669e369e0b92ae376601a5e73f618f8196af838c5b, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cd:41:2e:3c:cb:03:73:3f:ce:09:f4:9e:0f:
88:1d:c8:7a:79:ee:82:22:de:50:c3:15:82:40:a9:
31:ab:23:a3:b4:89:f5:34:20:59:10:63:09:ce:60:
45:f2:4b:88:c2:e2:13:21:80:0d:0b:c3:5e:fd:d0:
f1:63:73:c2:64:6e:02:45:83:33:f6:a2:a7:de:22:
ef:f8:91:43:ba:27:7b:16:0c:94:7e:e7:c9:01:1d:
92:7f:42:26:b5:f4:dc:2b:1b:59:f9:8d:cc:ae:f6:
45:8b:74:de:13:37:23:e1:4a:50:87:85:ca:f8:cd:
5a:c2:37:0e:01:16:b8:78:f5:a8:b5:53:f9:30:97:
c7:9d:5d:63:cb:63:ac:23:4b:76:02:e4:64:f3:66:
65:31:c3:a5:10:c4:7c:5b:33:0e:1e:41:f1:54:ed:
1d:04:8f:23:90:38:61:09:8a:c6:a1:ea:d3:7c:97:
76:2a:e1:35:38:23:cf:be:b2:94:60:c3:16:32:81:
cb:f5:08:fb:b2:a4:d3:32:a7:d2:c7:b2:4e:ba:ea:
1d:52:5c:1d:6f:3f:08:a7:7e:41:3a:eb:07:ae:86:
6e:5a:97:88:02:94:28:e7:7e:ca:89:59:be:2c:4c:
47:62:51:08:03:81:49:87:be:51:ed:cf:59:f1:82:
b0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:98:AD:49:B7:CD:CE:97:72:B6:E0:EA:8E:5F:39:27:85:F4:D4:8D
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ec82b174-f459-425d-9b1e-c1c356d1d7bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
02:6f:86:7e:af:c3:cb:1a:f2:f3:46:8f:2c:8d:83:3b:6d:df:
b9:bd:b1:2d:8b:0d:52:6a:bc:d1:db:44:e4:e6:a5:56:67:e7:
3d:a5:75:1f:bf:c7:e2:90:dc:73:0a:6b:b2:f2:36:fe:2b:3f:
23:74:ba:6f:b1:0f:cd:ec:e1:cb:24:82:7f:a5:75:24:ce:44:
e0:98:b0:7c:64:87:01:53:0c:60:08:28:c2:6e:18:0a:8a:09:
19:f3:6a:56:1a:fe:50:11:44:9e:29:86:76:7e:1d:b3:0e:94:
81:d6:30:cc:4a:90:50:78:12:62:00:f3:a7:f9:a1:98:68:a7:
e4:4c:f6:51:f8:43:fa:fa:88:0a:3d:d1:64:cf:1b:3d:c4:41:
d8:d3:8b:48:c9:9d:9e:54:55:df:88:eb:52:42:7b:e7:af:c1:
2a:f2:1a:27:cb:9b:7a:58:e1:a0:ec:91:07:ce:e0:04:59:88:
a5:25:f1:e0:93:4b:89:86:80:6d:f4:84:8d:d4:ac:0a:83:c4:
f3:53:90:d5:f8:f4:6a:83:82:54:0f:2e:0f:51:90:96:17:e2:
ed:ab:4a:bb:fe:cb:36:80:44:ec:ec:0e:f8:86:91:f9:50:38:
51:ff:b1:a2:79:14:fd:72:c8:29:1c:1c:a7:3c:ad:40:a7:1e:
31:ae:47:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:02 2024 by rpki-client on console-ams.rpki-client.org