Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/36c9493c-a502-4f53-9450-4176a3ae4fc9.roa
File: 36c9493c-a502-4f53-9450-4176a3ae4fc9.roa (raw, json)
Hash identifier: aYVPz3IoFVyR0bFwyPtPsaI284FnFibaTKCBRO1ahoc=
Subject key identifier: C8:E6:1B:F3:CA:88:1E:32:DF:82:3F:6F:B8:D1:4C:EE:C8:CC:9D:D5
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 0E88CC35ED22EA4A87DE16E7F956145B4019D597
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/36c9493c-a502-4f53-9450-4176a3ae4fc9.roa
Signing time: Sun 11 Jun 2023 00:00:00 +0000
ROA not before: Sun 11 Jun 2023 00:00:00 +0000
ROA not after: Wed 14 Jun 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:88:cc:35:ed:22:ea:4a:87:de:16:e7:f9:56:14:5b:40:19:d5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jun 11 00:00:00 2023 GMT
Not After : Jun 14 23:59:59 2023 GMT
Subject: serialNumber=8ea793364c904788ef43be3856386dd866a62ee79486b0eb015b8d8faeae7017, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:ca:fc:32:9f:cf:fb:02:af:fa:15:a6:00:
65:5a:5b:8f:19:55:c0:84:5e:64:42:50:83:51:92:
bc:5c:0e:06:c1:91:e3:f4:38:ad:52:1a:ab:dd:85:
c4:1a:bd:aa:39:34:f4:d9:e5:e0:a6:36:94:9e:d1:
0c:4f:86:a1:d6:d6:89:c9:fb:78:34:a7:47:d4:83:
47:a1:48:90:6c:89:ca:26:5f:f0:67:5c:a4:c3:6a:
c6:26:67:33:3b:ed:5c:af:f6:e4:8c:0e:04:80:1b:
e6:a4:19:8c:c1:ca:7a:6f:df:2b:f0:c6:76:d6:39:
9d:c8:cf:d8:08:ed:5d:a0:d3:dd:f9:39:87:07:5e:
82:e3:9c:3e:30:27:74:dc:3e:be:42:ab:df:33:eb:
3b:76:04:5f:0e:80:3f:3e:f0:fe:ec:be:75:47:16:
b8:0b:ca:4a:b4:76:90:f2:65:c8:bb:04:11:af:80:
4f:2b:12:68:12:2b:e2:01:d8:84:c8:d2:17:23:68:
75:3b:b5:da:aa:2f:a4:e6:98:af:a2:c2:1b:26:16:
2e:f5:73:f6:9d:c2:98:7d:85:fa:57:9b:2f:56:10:
1a:b6:05:e1:6c:32:cc:0d:f2:6f:c0:cd:2d:c1:82:
d6:9f:af:99:6d:a2:a7:ca:29:6c:94:2e:94:99:98:
94:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E6:1B:F3:CA:88:1E:32:DF:82:3F:6F:B8:D1:4C:EE:C8:CC:9D:D5
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/36c9493c-a502-4f53-9450-4176a3ae4fc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
00:5b:72:e4:36:41:df:37:ed:eb:54:55:d8:15:ff:96:38:3d:
d4:3d:9e:4f:9b:99:0a:74:84:52:dd:72:6a:e2:65:93:80:ab:
96:9e:6a:35:5f:35:76:f8:1b:cc:b9:82:0f:af:55:5a:af:74:
f1:37:33:6f:22:a6:a9:08:5b:91:72:bb:52:7d:3a:17:56:d7:
41:c2:33:de:c7:5e:db:83:64:ee:47:42:f6:bd:4a:95:99:ca:
8d:f1:a4:30:cb:ad:77:18:62:b6:dc:85:06:47:a1:64:61:41:
46:52:0c:09:bc:97:cc:0f:3a:85:8a:4c:38:87:16:0b:cf:34:
31:8d:46:13:27:f8:88:a7:6d:1c:62:43:19:54:9d:3f:0a:88:
da:68:51:4a:92:b5:40:a9:c0:0c:9b:07:a0:7c:75:a6:fb:64:
34:34:1b:75:9b:e4:b9:e5:e9:4f:a5:26:c5:9b:c4:c1:18:14:
f0:a1:05:90:60:41:7a:99:13:58:f6:85:da:9c:7b:d1:60:8a:
9a:71:8b:33:ba:16:44:9a:9f:9e:fe:6e:d8:ad:57:76:93:c3:
e3:88:98:47:29:96:13:cd:95:06:46:86:35:86:e4:b6:4d:1b:
1f:46:d9:14:11:ad:da:fb:69:2f:7d:e8:90:42:b5:fd:c5:de:
81:bf:32:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:57:46 2025 by rpki-client