Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c76b09f-9aa7-46e1-8332-b28f7f6d6637.roa
File: 1c76b09f-9aa7-46e1-8332-b28f7f6d6637.roa (raw, json)
Hash identifier: /rI/U+/y7I908uIWvxMal21R7txZ5GwWHx5agAHGRSE=
Subject key identifier: 26:72:42:61:16:01:05:7A:0E:23:F3:3B:57:AB:E1:98:77:44:97:1C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 45F48761F62C9DF1691F9190A920E9CBAB9B013B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c76b09f-9aa7-46e1-8332-b28f7f6d6637.roa
Signing time: Wed 22 May 2024 00:00:00 +0000
ROA not before: Wed 22 May 2024 00:00:00 +0000
ROA not after: Wed 26 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:f4:87:61:f6:2c:9d:f1:69:1f:91:90:a9:20:e9:cb:ab:9b:01:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 22 00:00:00 2024 GMT
Not After : Jun 26 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:72:af:ff:66:57:b1:98:a7:46:30:2b:7d:ae:
7d:bf:73:52:e6:a9:d2:d0:6b:9d:46:ae:b6:39:0e:
3c:d6:a0:d3:8c:0b:e3:5b:5f:db:18:66:44:41:f0:
f9:66:be:48:25:e9:31:4c:bb:f3:23:e4:37:4b:f4:
3c:db:91:2d:33:48:91:67:68:53:81:ce:36:0f:9c:
b9:b9:ee:bb:f0:e3:b2:b9:76:3a:b4:9c:65:52:c7:
3d:f0:0a:10:73:68:d1:09:26:a9:e8:e8:59:22:c9:
f8:d4:66:e0:09:e4:7c:bc:6c:a9:5c:3a:68:9a:f0:
36:a9:7d:35:03:60:f2:8d:0c:a7:03:34:c7:f6:ca:
0d:6c:ac:9c:44:61:b3:fc:95:7f:4c:c9:71:e0:78:
e2:fb:33:80:ea:51:0f:f7:20:9c:af:ab:20:9e:49:
24:ce:10:5b:83:8b:7b:48:d4:eb:e3:9d:fe:b4:2d:
b1:1a:29:2c:10:22:4a:de:ce:fb:ee:a8:3d:41:d0:
54:8e:28:28:1f:b8:8a:3c:b1:d7:b4:d5:29:d3:dd:
64:1b:f0:e0:96:68:7a:aa:bb:53:f0:78:27:a3:94:
2b:39:bf:41:14:24:bf:f7:be:be:45:7a:bd:1b:a1:
06:bd:c1:89:77:3c:fe:32:96:15:53:c3:96:68:6b:
79:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:72:42:61:16:01:05:7A:0E:23:F3:3B:57:AB:E1:98:77:44:97:1C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c76b09f-9aa7-46e1-8332-b28f7f6d6637.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
af:00:a2:be:c4:86:bc:a8:4d:38:a8:d2:5d:e3:d9:b7:e8:db:
e1:36:ac:de:6b:cc:22:83:b0:d7:26:91:d5:6e:3d:99:8d:fd:
45:80:f5:fe:fa:74:cb:76:b3:52:97:72:2b:4a:5c:94:be:54:
35:40:eb:36:a0:ee:ab:07:64:91:d2:18:66:96:5d:82:ec:5b:
78:5a:8b:b2:bd:22:50:d9:00:b4:c3:5b:fd:e2:c9:62:d1:1e:
bf:9f:c6:78:1b:1a:19:1e:45:87:52:20:39:82:cf:57:b7:10:
68:93:36:95:9e:3c:c5:58:a7:07:aa:0a:c1:04:c7:ca:65:86:
59:70:ea:23:1c:5a:00:61:eb:04:49:3b:f5:37:fc:65:68:32:
e3:72:93:fb:77:83:3c:d6:2e:94:77:06:cd:c4:f5:ef:61:40:
bc:d1:fb:89:f3:05:01:57:06:b2:78:e3:b4:d4:45:05:c0:ee:
68:92:84:13:c6:c9:aa:a7:f0:37:76:67:f6:2d:6e:82:00:23:
a8:f0:b4:88:c4:dc:05:8b:e1:f8:ff:af:35:7f:c2:d8:18:9d:
ab:bc:40:27:40:13:34:93:72:b5:19:a3:d0:39:38:1d:56:c6:
e2:04:7f:38:3f:a1:86:71:b0:1f:52:23:e8:6b:f0:06:db:3b:
d7:b7:39:f5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURfSHYfYsnfFpH5GQqSDpy6ubATswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNTIyMDAwMDAwWhcNMjQwNjI2MjM1OTU5
WjB6MUkwRwYDVQQFE0BmMmE5OWEwOTZkNWUzNmJmMTgzNTc2ZmJmNDUwNGM1YzMw
MWE5NTY5NWEzMGIxNTNhMWI1MmNiZmVjM2UyMWNiMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCmcq//ZlexmKdGMCt9rn2/c1LmqdLQa51GrrY5DjzWoNOM
C+NbX9sYZkRB8Plmvkgl6TFMu/Mj5DdL9DzbkS0zSJFnaFOBzjYPnLm57rvw47K5
djq0nGVSxz3wChBzaNEJJqno6FkiyfjUZuAJ5Hy8bKlcOmia8DapfTUDYPKNDKcD
NMf2yg1srJxEYbP8lX9MyXHgeOL7M4DqUQ/3IJyvqyCeSSTOEFuDi3tI1Ovjnf60
LbEaKSwQIkrezvvuqD1B0FSOKCgfuIo8sde01SnT3WQb8OCWaHqqu1PweCejlCs5
v0EUJL/3vr5Fer0boQa9wYl3PP4ylhVTw5Zoa3k9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUJnJCYRYBBXoOI/M7V6vhmHdElxwwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzFjNzZiMDlmLTlhYTctNDZlMS04MzMyLWIyOGY3ZjZkNjYzNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAK8Aor7EhryoTTio0l3j2bfo2+E2
rN5rzCKDsNcmkdVuPZmN/UWA9f76dMt2s1KXcitKXJS+VDVA6zag7qsHZJHSGGaW
XYLsW3hai7K9IlDZALTDW/3iyWLRHr+fxngbGhkeRYdSIDmCz1e3EGiTNpWePMVY
pweqCsEEx8plhllw6iMcWgBh6wRJO/U3/GVoMuNyk/t3gzzWLpR3Bs3E9e9hQLzR
+4nzBQFXBrJ447TURQXA7miShBPGyaqn8Dd2Z/YtboIAI6jwtIjE3AWL4fj/rzV/
wtgYnau8QCdAEzSTcrUZo9A5OB1WxuIEfzg/oYZxsB9SI+hr8AbbO9e3OfU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:19:55 2025 by rpki-client