Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/974d7f8c-1bff-4931-89fe-ca8878c8be53.roa
File: 974d7f8c-1bff-4931-89fe-ca8878c8be53.roa (raw, json)
Hash identifier: y3bPO1PUI3t8zMDJnvKiG/o7CWiHRtL1/uaev3M3HQk=
Subject key identifier: 9B:80:B6:BE:94:3F:55:06:A3:7D:93:CC:A0:95:DA:15:1A:FF:67:AD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7A49964AC846D5BFE350FA2B63D86CD95FC88181
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/974d7f8c-1bff-4931-89fe-ca8878c8be53.roa
Signing time: Tue 03 Sep 2024 00:00:00 +0000
ROA not before: Tue 03 Sep 2024 00:00:00 +0000
ROA not after: Tue 08 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:49:96:4a:c8:46:d5:bf:e3:50:fa:2b:63:d8:6c:d9:5f:c8:81:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 3 00:00:00 2024 GMT
Not After : Oct 8 23:59:59 2024 GMT
Subject: serialNumber=2a924372e95852259d3e255255ea96295c44723548fac40d93460ca086c71ba2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:b8:95:ba:1c:18:ae:66:55:5a:0b:8f:9d:
0d:0a:75:33:4d:bc:4f:13:cf:ae:06:af:f2:3c:fc:
e4:85:dd:ef:4d:a1:5d:7f:02:ea:41:82:9d:8d:a1:
0e:20:91:de:94:3b:b5:69:be:8d:07:11:dc:af:fd:
31:bd:20:f0:b8:62:45:8a:23:ae:31:00:f7:61:72:
de:4b:31:ed:c3:68:95:62:b6:d9:55:45:f5:ed:dd:
30:5e:e3:67:46:44:1b:7a:10:2d:27:b1:24:1f:52:
ae:a6:d3:d8:1d:85:2b:6d:bb:4f:32:90:cf:10:f4:
2b:9c:c3:f5:35:07:35:dd:b4:78:34:87:e6:82:65:
2f:27:b1:7b:dd:81:2b:c3:49:79:06:31:c2:35:f2:
6b:7b:34:b8:9b:d3:4a:9d:cf:58:bb:bc:96:86:61:
28:25:bc:0c:c4:cd:49:55:22:e5:e9:95:3d:cc:e8:
2c:2e:0d:41:ff:79:bf:7f:da:be:16:09:85:85:6b:
ee:58:a5:3d:37:bf:ce:e7:bb:75:66:09:83:cd:ff:
fe:3d:15:12:e4:8e:91:f2:6d:98:cc:e3:d3:5c:12:
7c:f9:35:84:78:64:28:7b:01:70:a4:cd:18:fa:d1:
a7:30:30:d2:01:29:40:5d:eb:c2:e8:d7:86:a3:5e:
51:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:80:B6:BE:94:3F:55:06:A3:7D:93:CC:A0:95:DA:15:1A:FF:67:AD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/974d7f8c-1bff-4931-89fe-ca8878c8be53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
19:4c:b7:fd:5b:e7:4d:e6:f3:c5:72:fa:f2:43:7a:a2:30:c8:
1d:18:5f:01:20:46:70:33:c9:26:df:fe:97:e9:e6:ba:16:9d:
da:4b:e9:a4:32:ae:1c:ba:91:58:1f:49:55:74:66:cd:9e:3d:
0b:5d:30:44:1e:78:68:a8:8e:ca:c9:5f:ce:6d:50:76:88:a1:
d1:ba:44:59:ca:2c:81:c4:26:ad:47:18:b0:05:aa:78:d6:1b:
fc:5d:0a:73:66:89:9b:e4:64:65:cb:94:c1:3f:69:cb:e3:76:
b5:a8:c3:f5:a9:13:4e:d3:7e:c1:26:7f:21:75:be:a1:8d:90:
de:de:ca:3d:04:67:13:71:f7:42:44:f7:2a:5d:1d:91:f9:83:
08:6a:60:85:25:e4:d6:cf:f5:4c:31:c8:51:72:b2:bc:d3:41:
8c:f8:6c:f1:4a:01:40:30:16:50:2a:b8:2c:38:a1:98:89:dd:
92:25:3c:fe:2e:20:06:4e:1d:a1:45:91:27:5f:73:5d:f8:c0:
85:e3:8c:97:6f:4a:14:32:10:77:2a:5f:37:31:02:91:85:d4:
0c:a1:8a:50:23:f2:f8:55:d9:48:eb:d5:91:02:cd:9b:5d:7f:
77:52:38:08:52:b5:10:ce:72:0a:6a:de:e4:a7:0d:c0:ce:a1:
7f:4d:6a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 04:41:39 2024 by rpki-client on console.sobornost.net