Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d87ae6e4-4f86-465b-a986-4b0cd5a264d3.roa
File: d87ae6e4-4f86-465b-a986-4b0cd5a264d3.roa (raw, json)
Hash identifier: 6O0jkdS5D0Q4jRvu/LGPGlcKnNsiXEpQP5fZOf7FlCg=
Subject key identifier: 56:1D:E6:D0:B1:0C:F8:87:FE:84:8D:95:78:30:9D:CC:F0:C5:4C:57
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 7E4C9C357E7C3B020E5A99FAD6D6B74781A438A8
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d87ae6e4-4f86-465b-a986-4b0cd5a264d3.roa
Signing time: Mon 12 Jun 2023 00:00:00 +0000
ROA not before: Mon 12 Jun 2023 00:00:00 +0000
ROA not after: Thu 15 Jun 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:4c:9c:35:7e:7c:3b:02:0e:5a:99:fa:d6:d6:b7:47:81:a4:38:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jun 12 00:00:00 2023 GMT
Not After : Jun 15 23:59:59 2023 GMT
Subject: serialNumber=71c15c14e2755f45c56c66d99696f44a3f1b39ea93a3d794068b3c4e7ed75faa, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fe:17:4d:83:6e:85:56:4a:bf:f2:0b:ac:fb:
00:52:ed:cc:5d:ad:ff:6b:38:a7:8d:4f:cb:0f:24:
62:d1:85:3c:98:c1:5d:53:7e:b3:51:78:fd:d1:76:
92:bd:ee:12:1a:5c:de:56:29:c5:04:ba:9c:d3:ee:
25:80:e3:2f:ef:f9:ad:71:f8:04:5a:f3:4c:38:01:
38:52:31:dc:cf:f1:2d:b2:4a:8f:60:96:30:b7:58:
de:e5:b1:15:b0:93:53:40:bf:72:71:80:09:71:30:
c7:46:0e:55:a9:32:3f:41:21:c6:a1:53:23:6c:fe:
f6:df:1c:66:6f:da:4a:a2:d4:61:58:dd:33:6e:6c:
d7:1d:ed:15:3d:96:4d:9d:1e:d7:fb:36:97:6a:c8:
0a:85:fe:5a:2a:4f:09:10:b0:9c:72:d0:d4:53:87:
94:29:44:d3:44:f6:7a:a0:98:95:d9:00:8e:8e:26:
d9:6b:2d:86:52:30:28:16:c0:8f:ec:db:db:9f:6f:
eb:84:17:0d:75:8c:17:90:82:de:74:c1:2c:7c:3b:
bb:16:70:c8:cf:64:1b:9b:35:4d:df:68:01:ae:b9:
f7:a8:09:26:d5:78:d5:11:0b:0a:e4:2e:bc:fe:08:
d6:55:ce:c8:b9:90:f2:b7:f3:c2:eb:27:b4:8f:0e:
f8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1D:E6:D0:B1:0C:F8:87:FE:84:8D:95:78:30:9D:CC:F0:C5:4C:57
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/d87ae6e4-4f86-465b-a986-4b0cd5a264d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
26:44:73:dc:c4:fb:b0:cb:93:9a:3f:3f:a8:38:42:25:61:57:
f5:c6:fa:15:be:c3:3e:c6:bb:a1:57:dc:1e:ed:9f:23:70:82:
fa:9c:1c:9a:0f:e7:28:38:83:a8:92:99:f6:ed:fa:d6:e3:42:
17:f3:47:f2:e1:5f:aa:c5:f4:91:77:cc:e4:d1:2b:e6:22:5e:
84:a3:da:82:4e:46:d9:7b:6f:0f:90:da:d5:ea:3e:17:45:db:
d6:62:04:1a:03:35:2a:13:fe:c8:21:5f:75:5c:0e:0e:37:22:
bc:b4:d7:ac:2a:33:79:80:21:06:52:2d:3c:c3:c9:71:ae:2a:
21:cb:95:67:c0:dd:e8:fc:a7:4e:39:dc:f1:f6:a0:41:e6:15:
2d:03:e7:eb:28:b5:dd:06:08:0c:24:ec:4a:ef:a0:e8:09:e4:
31:b7:26:5a:bb:f5:15:ab:c3:76:d7:e1:48:57:79:29:45:f0:
25:e5:cc:47:00:cf:64:41:3a:fe:9e:f4:4c:1c:c6:de:41:46:
1c:f8:36:29:04:5c:16:6a:c7:66:7b:7a:1b:58:80:5b:7e:3c:
ba:af:10:d6:88:c0:80:6a:1d:00:d3:95:ee:c8:50:2d:0a:4e:
40:27:39:99:4a:ea:4d:9b:e3:26:4f:59:f6:ed:da:7f:90:0f:
07:a6:90:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:33:57 2025 by rpki-client