Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/624f0571-bbfb-4099-bb0a-1c7ba15e6b10.roa
File: 624f0571-bbfb-4099-bb0a-1c7ba15e6b10.roa (raw, json)
Hash identifier: vepCLRGOnieoSAGIZIvKEFK4ibD5LbwE20gl2T+2Zf0=
Subject key identifier: F4:C8:79:74:AC:40:43:D7:BA:EC:E7:3A:B8:73:EF:9E:87:8E:BC:C7
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 9865FD42CA193F128FF4B32B45368723000431
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/624f0571-bbfb-4099-bb0a-1c7ba15e6b10.roa
Signing time: Mon 12 Jun 2023 00:00:00 +0000
ROA not before: Mon 12 Jun 2023 00:00:00 +0000
ROA not after: Thu 15 Jun 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
98:65:fd:42:ca:19:3f:12:8f:f4:b3:2b:45:36:87:23:00:04:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jun 12 00:00:00 2023 GMT
Not After : Jun 15 23:59:59 2023 GMT
Subject: serialNumber=0a8817feb47d6406428d2f87138a7a69ddef4d77f014fb4c617cbb105c9be72e, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:7a:8a:8e:5c:4b:7a:3c:53:b4:4a:a7:5c:
7f:4c:23:9b:50:bb:6d:3a:76:61:fa:50:6e:00:23:
08:73:ac:26:56:c3:e8:c4:ec:98:71:fa:16:aa:d3:
b3:a8:42:ed:cb:b2:78:95:1a:81:35:fb:17:84:65:
a8:31:c6:a7:a6:a3:9a:16:b8:d9:0e:9f:63:66:a7:
e3:88:a7:7c:7c:3c:a6:4c:0c:3b:28:03:2d:53:99:
53:2f:6d:71:3d:69:96:57:1a:2f:90:9f:55:9f:04:
25:85:24:36:c8:94:da:6e:7d:0f:a9:0e:ef:67:67:
15:59:74:41:63:7c:45:05:a3:fb:75:d4:81:8a:f9:
3f:41:98:ea:75:60:a1:5a:5c:b9:97:da:26:2b:f7:
cb:aa:ce:19:37:47:3c:c7:02:4f:8f:cb:9e:26:a7:
17:79:b0:75:0a:06:b2:5e:bb:55:50:26:10:d4:e7:
67:43:e3:d8:94:06:26:0c:4c:6a:a7:88:9f:b0:7f:
6e:86:bb:02:18:4f:bd:cb:fe:cf:eb:ca:dd:bc:8d:
7c:41:ff:14:48:46:9f:8f:b8:8e:be:8e:13:85:b5:
c3:51:cc:64:2d:37:ab:f4:35:0d:a2:92:ea:e8:52:
f6:c9:01:62:92:ab:fd:41:e0:ab:af:b8:33:6b:6e:
5c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C8:79:74:AC:40:43:D7:BA:EC:E7:3A:B8:73:EF:9E:87:8E:BC:C7
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/624f0571-bbfb-4099-bb0a-1c7ba15e6b10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
32:dd:48:40:4a:a5:ca:2e:e8:4b:f0:4b:6e:be:c0:19:bd:59:
6b:96:cc:11:b4:d2:36:fa:db:28:ec:92:ad:5a:3b:8a:9d:1f:
f0:e6:3f:c8:f8:0a:74:0b:d7:b4:41:8a:ce:cb:ef:c9:cf:fc:
25:ae:4a:f0:fb:ad:e0:80:d5:f1:00:d5:cd:70:ff:9f:39:8e:
a6:14:d7:00:70:5d:c2:5d:9d:ec:31:59:ac:2f:f2:49:15:d0:
9b:f4:c9:a8:87:a6:b7:fc:0e:33:aa:46:18:ae:1b:47:ae:e6:
0c:44:df:6e:e3:13:cd:c1:b7:f1:14:af:07:1f:5d:dd:01:e0:
bc:07:e2:8a:fa:90:8b:a7:5f:2e:e3:24:16:f5:b8:2d:d6:29:
ee:d5:2b:07:f8:7d:cb:a7:f3:88:de:aa:91:b6:a8:8f:44:68:
a1:40:94:42:6c:7c:0c:8c:ca:1c:85:36:17:f5:d9:39:c6:69:
34:46:c9:28:84:b8:63:8c:69:0f:22:41:2d:1e:40:55:ef:aa:
be:3e:a4:f7:a4:f9:e6:96:77:86:e9:37:fd:02:df:3d:05:94:
45:8b:e3:04:a1:aa:0f:54:1d:ec:53:06:d8:15:0e:4d:c7:04:
75:c3:e5:0a:10:67:79:f6:dd:81:28:7e:2b:7f:a5:ef:ee:dd:
c7:2b:1f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:51:05 2025 by rpki-client