Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/941b0b09-ff43-4bae-a755-3eba41812cb4.roa
File: 941b0b09-ff43-4bae-a755-3eba41812cb4.roa (raw, json)
Hash identifier: 0RbYY20P8+OJNTrHuQ4iV5IXBfYEaNjBIcZmnrcdaaU=
Subject key identifier: 01:24:92:FD:E8:0D:6D:AB:C6:39:3C:EB:E8:7E:F2:1D:7F:91:C7:4A
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 36F77E84B4FD578BB7B0A8CE2C0D992A42AB5D8D
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/941b0b09-ff43-4bae-a755-3eba41812cb4.roa
Signing time: Fri 09 Jun 2023 00:00:00 +0000
ROA not before: Fri 09 Jun 2023 00:00:00 +0000
ROA not after: Mon 12 Jun 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:f7:7e:84:b4:fd:57:8b:b7:b0:a8:ce:2c:0d:99:2a:42:ab:5d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jun 9 00:00:00 2023 GMT
Not After : Jun 12 23:59:59 2023 GMT
Subject: serialNumber=9e747a5925e787090a336eb281bb828357e45959bd40d8f4d9cf8cc9334cdb84, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f7:17:c5:15:7c:f7:54:96:46:fb:06:df:67:
ee:7e:30:05:55:5f:40:25:87:5e:fa:1c:c7:ad:c4:
56:1d:dc:1c:71:82:1c:25:83:9c:f6:85:ac:15:33:
df:79:13:7e:17:73:76:3f:62:04:8a:69:d9:c7:53:
93:f9:bf:7b:8a:75:92:3c:99:03:f6:c9:34:fb:92:
c4:c5:4c:25:d0:b8:bb:aa:71:ae:12:64:b3:91:6e:
85:14:da:2c:9f:ec:40:66:f5:d5:5c:6b:66:f8:9a:
94:f4:9c:4e:a8:c1:b8:55:29:e1:5a:3d:dd:15:3a:
8a:97:5b:26:7d:41:cb:06:28:51:25:a4:e6:4f:90:
b5:a9:fe:b3:52:8c:22:e6:bd:9a:98:1d:f0:19:c7:
db:2d:59:59:24:e3:7e:9e:69:30:c3:cd:11:b9:9c:
04:d7:e5:db:5d:a4:10:12:fb:85:a1:5e:86:d6:4b:
b1:13:bf:29:08:7d:63:39:5c:52:d6:ea:a1:5b:f6:
30:3f:cb:cb:ab:4f:7f:31:7f:9e:3b:a8:9f:aa:7d:
64:dd:fd:ef:e9:15:a0:95:df:47:90:28:2e:bd:58:
e8:b8:1a:bd:58:a0:58:d9:2c:30:53:7c:61:52:df:
e8:85:ad:86:24:aa:9d:31:f7:f1:d5:79:f2:c1:65:
e2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:24:92:FD:E8:0D:6D:AB:C6:39:3C:EB:E8:7E:F2:1D:7F:91:C7:4A
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/941b0b09-ff43-4bae-a755-3eba41812cb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:49:d4:07:d2:51:fa:4f:cf:ab:b3:09:6f:79:81:2e:e2:a3:
db:25:d3:dc:d1:7f:64:3c:72:4e:4c:8c:04:48:18:80:58:6a:
06:06:4b:e5:fa:ee:cf:f5:d6:85:18:99:42:59:4f:07:9c:c3:
a4:1f:bb:3e:40:bd:04:3a:a8:8b:d9:e2:ce:c7:89:8d:d6:46:
98:2a:c6:f5:0b:6b:98:22:c7:c2:f0:2c:6d:9a:3f:fc:a2:62:
e6:64:05:f9:07:4e:d0:25:58:77:d4:42:db:de:ef:0c:f0:45:
15:f2:ac:4f:b7:c1:87:73:2f:53:e0:0c:b4:16:a0:69:c9:5e:
06:18:0d:7b:da:1d:5f:7d:51:19:d0:fd:57:e2:33:50:70:13:
13:17:26:d2:d7:bf:f0:58:99:06:1c:70:11:ae:e2:01:0f:7c:
e1:ce:b8:75:9a:41:95:bf:97:35:8f:8a:49:00:82:95:04:54:
bb:64:40:8e:16:dc:a9:21:84:00:3b:3a:dc:59:63:03:9d:dd:
a7:10:81:62:53:71:0a:23:5b:9a:3c:c6:65:29:fc:53:80:36:
e4:2f:60:27:30:5b:48:99:34:f6:c5:13:8e:bc:f0:4e:8b:e1:
7c:36:95:5c:a1:94:db:8d:56:21:76:e7:b2:7d:8f:ed:13:13:
6b:d1:9e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:38:57 2025 by rpki-client