Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2cdd87d1-9140-413a-b8b5-02575577ebe6.roa
File: 2cdd87d1-9140-413a-b8b5-02575577ebe6.roa (raw, json)
Hash identifier: N0snjCxoRKvW7dUFUyvzIuzVKyCHezyVFRbxGOTYuP8=
Subject key identifier: 7D:20:5F:49:76:92:0A:78:57:19:3F:B5:03:32:3E:F8:0F:3F:17:4A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 564F8423C28B17698BD48010284CA331C98C197F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2cdd87d1-9140-413a-b8b5-02575577ebe6.roa
Signing time: Mon 08 Apr 2024 00:00:00 +0000
ROA not before: Mon 08 Apr 2024 00:00:00 +0000
ROA not after: Mon 13 May 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:4f:84:23:c2:8b:17:69:8b:d4:80:10:28:4c:a3:31:c9:8c:19:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 8 00:00:00 2024 GMT
Not After : May 13 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:88:42:fe:01:c2:ea:15:fd:d8:ae:44:3c:f5:
12:3d:8e:90:cd:0e:e6:c1:66:3b:3b:dd:42:06:a4:
81:bc:de:27:05:b2:58:8a:1a:09:20:73:72:eb:5a:
8a:ac:50:79:69:e5:bb:29:0f:3d:46:dc:e1:55:12:
26:e0:ca:47:21:1e:ef:6c:bd:04:6b:89:28:8c:89:
bc:49:f4:03:a3:25:bf:c5:17:41:57:30:9c:5b:7d:
d1:14:bd:ee:36:0a:a3:be:54:29:5a:7a:0f:aa:d8:
31:59:88:1d:c6:73:f4:e9:89:38:a6:d5:97:d3:75:
05:b1:5c:93:50:58:cd:21:9d:5c:77:c5:9e:6f:e4:
93:2e:e9:da:0e:82:6b:3f:7d:b7:ed:c6:21:f1:f8:
58:47:6b:6d:f3:6d:e4:f8:ae:3f:76:74:e1:73:f5:
91:ea:d8:1b:db:f3:11:3b:a7:70:3b:5b:4f:a4:65:
6d:15:52:b8:be:aa:2d:dc:9f:4d:e3:9d:38:b5:62:
89:16:f9:35:05:f4:2d:e1:82:86:a7:60:e8:41:1e:
0f:39:14:18:98:1f:e3:c5:aa:6c:92:8d:85:dc:4e:
c3:bd:87:c1:55:d5:bf:c2:33:5b:ad:22:54:8d:75:
44:79:13:c7:2c:0d:86:53:ea:72:3d:9f:b9:b4:80:
a1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:20:5F:49:76:92:0A:78:57:19:3F:B5:03:32:3E:F8:0F:3F:17:4A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2cdd87d1-9140-413a-b8b5-02575577ebe6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
44:6e:e2:9d:db:e4:04:45:fa:30:63:09:da:44:c9:59:c6:fd:
1b:e2:20:21:56:20:92:21:95:93:5c:5c:61:35:b5:e9:bc:6b:
cd:65:93:f1:92:aa:78:6d:21:50:89:57:23:46:98:bc:61:e3:
e0:dd:9b:ed:ef:f6:9b:90:0d:39:52:06:0d:fb:6d:2f:c4:16:
c2:82:df:20:bc:7d:e5:db:e7:6a:35:94:86:2a:50:f9:57:b6:
81:77:1f:ea:bc:ee:6e:da:b7:1a:3e:cc:85:9e:50:a3:f4:d8:
3a:2b:55:a3:2e:42:8d:88:d5:1b:02:dc:71:91:e0:2b:ed:51:
61:df:a0:1e:5b:ec:28:15:87:03:fd:3f:27:bc:00:b6:01:3b:
77:db:5c:28:f0:44:71:1f:08:41:51:8d:0a:9d:ab:a6:f3:2f:
25:95:f2:2c:19:51:f8:f8:36:b5:b4:c0:67:60:9c:4b:56:ea:
df:20:c0:1c:a1:54:12:5a:d2:37:32:06:b8:22:7e:d9:32:83:
35:bd:e2:2b:6f:70:f8:70:c5:30:33:c2:7a:d7:32:18:ba:40:
06:0b:65:2c:f8:26:19:b6:a3:b6:30:a0:87:19:16:08:13:67:
3c:84:55:d6:16:08:df:72:9a:e4:ff:11:b0:07:81:68:23:7e:
8d:b0:29:1a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVk+EI8KLF2mL1IAQKEyjMcmMGX8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A5NWYxYTFkZjdkYWNhMWUwYmM5NDVhMDg2MjU0MWE2MTQ2
NjBjYTZjOTkyZjJkMmYxOWZmMzE0ODQzNGI4NmYwMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDKiEL+AcLqFf3YrkQ89RI9jpDNDubBZjs73UIGpIG83icF
sliKGgkgc3LrWoqsUHlp5bspDz1G3OFVEibgykchHu9svQRriSiMibxJ9AOjJb/F
F0FXMJxbfdEUve42CqO+VClaeg+q2DFZiB3Gc/TpiTim1ZfTdQWxXJNQWM0hnVx3
xZ5v5JMu6doOgms/fbftxiHx+FhHa23zbeT4rj92dOFz9ZHq2Bvb8xE7p3A7W0+k
ZW0VUri+qi3cn03jnTi1YokW+TUF9C3hgoanYOhBHg85FBiYH+PFqmySjYXcTsO9
h8FV1b/CM1utIlSNdUR5E8csDYZT6nI9n7m0gKEJAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUfSBfSXaSCnhXGT+1AzI++A8/F0owHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzJjZGQ4N2QxLTkxNDAtNDEzYS1iOGI1LTAyNTc1NTc3ZWJlNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAERu4p3b5ARF+jBjCdpEyVnG/Rvi
ICFWIJIhlZNcXGE1tem8a81lk/GSqnhtIVCJVyNGmLxh4+Ddm+3v9puQDTlSBg37
bS/EFsKC3yC8feXb52o1lIYqUPlXtoF3H+q87m7atxo+zIWeUKP02DorVaMuQo2I
1RsC3HGR4CvtUWHfoB5b7CgVhwP9Pye8ALYBO3fbXCjwRHEfCEFRjQqdq6bzLyWV
8iwZUfj4NrW0wGdgnEtW6t8gwByhVBJa0jcyBrgiftkygzW94itvcPhwxTAzwnrX
Mhi6QAYLZSz4Jhm2o7YwoIcZFggTZzyEVdYWCN9ymuT/EbAHgWgjfo2wKRo=
-----END CERTIFICATE-----
Generated at Wed Apr 9 22:26:31 2025 by rpki-client