Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/84b6df4a-1fa1-4418-a599-48d9d4620db2.roa
File: 84b6df4a-1fa1-4418-a599-48d9d4620db2.roa (raw, json)
Hash identifier: i116CadOGGAdTdjquPM4n/ndXG/qxx9ytdooxJxslGQ=
Subject key identifier: AE:71:16:12:B5:5B:B4:43:4E:40:B3:FF:6A:E3:45:29:B8:F6:56:3E
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 472CA4CBFFC3ABCCFBC8659C7AA973E9D904FB74
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/84b6df4a-1fa1-4418-a599-48d9d4620db2.roa
Signing time: Wed 14 Jun 2023 00:00:00 +0000
ROA not before: Wed 14 Jun 2023 00:00:00 +0000
ROA not after: Sat 17 Jun 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:2c:a4:cb:ff:c3:ab:cc:fb:c8:65:9c:7a:a9:73:e9:d9:04:fb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jun 14 00:00:00 2023 GMT
Not After : Jun 17 23:59:59 2023 GMT
Subject: serialNumber=dbd0bf630e4caf143fe95ab6b981fc2f2b2bdc4e8f6cdf7f97cdcd1c84db6bba, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b5:28:9d:87:98:90:ff:89:50:cb:9e:a8:5e:
17:9c:46:c0:27:a2:3e:75:2b:46:9f:6a:d1:d8:fd:
16:e1:0d:bc:66:0e:6d:f7:f2:9f:90:7d:6c:07:10:
0b:a2:4e:3b:0b:aa:ee:87:11:8c:bb:3e:71:47:f0:
f0:94:2c:c8:55:3b:f5:69:09:68:6c:4d:aa:79:50:
15:4b:e3:8d:45:ac:ad:fd:b4:87:da:24:48:64:01:
97:11:5a:e7:f9:15:5e:82:e0:2e:a6:e8:e1:79:7e:
b5:08:8f:77:9b:a7:a6:25:8e:5b:76:20:d5:14:58:
52:52:51:74:52:7d:77:27:58:65:5c:0c:1b:49:5a:
72:2e:f0:c7:1e:14:f9:43:dd:9e:b0:25:57:ec:5e:
81:7a:db:57:b1:08:d3:94:30:33:96:50:f6:a1:2b:
22:6f:e4:68:85:64:61:51:bb:73:ed:ed:34:48:a3:
bb:2f:f4:12:be:b4:97:9b:d7:8d:3b:7c:ea:96:5f:
a5:56:19:26:fc:1d:7b:89:6b:2a:ee:2a:ed:fb:c4:
92:9a:fd:91:f3:54:ad:f0:78:bb:83:8f:3c:a5:5d:
b4:77:40:ae:7c:2d:4b:ac:d8:96:2d:b8:5a:08:86:
7a:e0:9b:71:55:a4:54:76:38:53:00:4b:cd:1a:a0:
16:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:71:16:12:B5:5B:B4:43:4E:40:B3:FF:6A:E3:45:29:B8:F6:56:3E
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/84b6df4a-1fa1-4418-a599-48d9d4620db2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
44:6c:f0:02:b4:11:3b:7f:31:63:f9:2f:42:50:bc:c0:ec:f8:
3a:bd:3d:14:6f:34:e5:f8:31:8b:07:03:13:3f:89:11:32:99:
f0:7b:ec:14:2e:79:e2:b6:5d:09:70:41:3c:ae:4c:d7:13:cf:
7a:be:54:3a:41:ea:61:67:c5:84:83:02:ad:c6:06:c9:8a:a5:
85:29:61:dd:e7:7c:38:b0:b0:7a:d5:e6:a7:ef:52:c4:56:1a:
df:2e:55:03:20:4b:aa:02:bf:f5:9d:9d:b3:80:06:7c:fe:11:
09:6a:0b:72:85:fd:8b:e1:3d:8b:f6:91:37:59:48:3b:42:07:
d8:c8:fd:69:49:fc:ee:c2:4e:d8:1a:32:86:81:46:96:85:51:
1d:63:5d:82:41:31:69:43:cc:08:98:d2:e1:a9:a3:d6:f9:75:
9a:43:a4:b9:fe:62:b4:59:36:4f:72:4b:67:69:55:74:7f:10:
cc:09:76:6f:b9:3e:9c:8e:c9:6b:32:9c:80:fc:45:c2:a3:d3:
17:d2:e0:41:34:f8:c9:82:34:48:23:02:3e:d2:fa:60:81:fb:
0a:74:e9:e4:2a:65:4a:c4:0e:2c:42:8c:07:34:4d:34:a5:ab:
53:9b:6f:a8:fe:97:e4:a8:aa:7e:e1:db:02:be:d4:6e:d5:91:
1b:96:b1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:43:30 2025 by rpki-client