Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/56a0d7de-a13e-4e76-aa21-1e7030e43a28.roa
File: 56a0d7de-a13e-4e76-aa21-1e7030e43a28.roa (raw, json)
Hash identifier: QFm9bOn9DWeb2vEF+jYq1h5F4JITm5+/5J0Pi0cl9bM=
Subject key identifier: 4C:C8:9D:8B:B0:B1:61:51:C2:57:76:EB:08:E0:A9:DE:0A:05:89:A6
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 7F3F2609E0A7D11083784BF80B9E7A42D18F4D09
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/56a0d7de-a13e-4e76-aa21-1e7030e43a28.roa
Signing time: Fri 09 Jun 2023 00:00:00 +0000
ROA not before: Fri 09 Jun 2023 00:00:00 +0000
ROA not after: Mon 12 Jun 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:3f:26:09:e0:a7:d1:10:83:78:4b:f8:0b:9e:7a:42:d1:8f:4d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jun 9 00:00:00 2023 GMT
Not After : Jun 12 23:59:59 2023 GMT
Subject: serialNumber=8e87162b6c0b3c51ee1c398b52e732a1193d2a9e457fbbb29fbb0eb505dd45d7, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:92:ef:fa:51:c1:b5:96:94:55:1f:8c:96:72:
7f:26:f1:1b:93:98:eb:75:64:cf:cc:8c:e9:87:03:
47:9b:fc:ee:9a:a1:2f:0b:25:81:85:17:b9:9a:86:
3d:45:b5:ad:fe:da:41:cd:06:fe:d4:34:d1:b2:e9:
63:9b:71:6b:1b:95:b0:8c:8b:c6:53:ae:5e:57:03:
07:79:91:3e:2a:cd:22:09:1d:85:70:de:03:9d:ed:
c0:8e:60:d5:2a:99:15:7f:7b:38:83:08:2c:13:af:
02:83:fe:2f:42:3e:e3:ae:98:81:47:25:1b:2f:66:
a0:22:31:72:d7:3f:45:45:84:99:d1:70:6d:fc:bb:
18:f2:a7:d2:8a:60:af:b1:88:10:6f:e7:ad:fd:5c:
e6:5e:99:b2:d0:78:9d:6e:31:d8:6b:c7:f6:c8:82:
fe:31:51:de:5c:11:ff:91:bc:db:10:e9:fa:7c:c2:
2d:86:1f:42:43:7d:bd:5c:e2:c2:74:10:5d:51:c5:
a6:58:11:6d:f2:8e:89:0d:82:ba:3d:04:f2:6e:c0:
63:56:54:09:f2:a8:57:3a:9b:ce:42:03:11:57:b1:
fd:13:0d:6c:5a:da:73:ee:83:92:11:79:25:a2:5a:
f6:45:e4:2d:d5:8f:66:c1:2d:1b:15:7f:bc:b6:43:
64:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C8:9D:8B:B0:B1:61:51:C2:57:76:EB:08:E0:A9:DE:0A:05:89:A6
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/56a0d7de-a13e-4e76-aa21-1e7030e43a28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
40:fe:41:24:2e:70:08:b1:32:df:53:8a:82:5d:65:47:ac:f8:
d2:49:73:d7:18:09:73:ae:2b:a0:26:cd:1f:40:75:6f:10:6d:
32:6b:26:9e:0f:cc:c0:ce:e5:d1:d1:5f:9a:c7:55:df:59:29:
e7:4f:1c:de:13:ad:f4:b9:0e:fc:91:90:2f:79:06:cd:3a:39:
a6:cc:16:01:a1:05:a2:3c:f8:93:da:48:39:8a:54:67:cc:28:
be:20:a7:53:f7:c4:5c:8f:f5:ec:29:e0:b5:80:31:6d:ae:ef:
d9:55:64:05:1b:07:f7:c8:18:6a:97:22:e7:68:92:c5:7c:ca:
ae:71:c3:42:52:a3:f6:b3:aa:5c:e8:7d:30:d0:ac:1f:81:85:
8e:36:a5:b7:43:85:bd:5d:08:15:39:a9:de:55:39:44:34:74:
a9:66:5a:56:cb:34:f9:70:8c:f9:9b:56:3a:07:d1:61:00:3e:
0e:b5:5a:c2:79:2b:65:c5:65:a9:8a:e7:1c:c5:08:7e:9e:4f:
b9:db:00:a0:c7:62:c7:cf:1d:1f:da:a1:b1:d0:40:b8:ff:78:
02:21:2b:4c:e3:4b:55:cf:b5:c3:7b:ef:39:cd:e1:3a:88:d6:
6a:eb:87:04:64:74:bf:f1:39:56:b0:8d:b5:e5:47:13:9d:34:
ec:34:de:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:27:56 2025 by rpki-client