Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/46a946e6-c6bf-458a-b5b4-9e6e55454449.roa
File: 46a946e6-c6bf-458a-b5b4-9e6e55454449.roa (raw, json)
Hash identifier: wU8MISP+858cyBsZ+1c+sTDUfLJVmB67iP1jy621A+A=
Subject key identifier: 76:09:17:1E:74:28:8D:45:7D:C8:BF:20:A8:EF:8B:30:FE:2C:F7:9B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 276863A6B65E43384E187BB5607710CBC2DB86C2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/46a946e6-c6bf-458a-b5b4-9e6e55454449.roa
Signing time: Tue 07 Nov 2023 00:00:00 +0000
ROA not before: Tue 07 Nov 2023 00:00:00 +0000
ROA not after: Tue 12 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:68:63:a6:b6:5e:43:38:4e:18:7b:b5:60:77:10:cb:c2:db:86:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 7 00:00:00 2023 GMT
Not After : Dec 12 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fb:0a:27:c6:a7:f6:bd:85:4a:66:eb:db:f0:
d3:3c:5b:eb:38:8f:d2:da:c3:0e:10:45:0e:b8:b3:
e3:ef:1b:da:29:4d:6d:d1:26:a6:e3:2a:18:08:db:
89:1c:ad:e4:0d:66:0a:66:7c:95:15:df:20:d3:1f:
e0:32:94:d2:78:c9:8c:3e:e1:4d:ce:27:40:77:05:
22:25:3f:33:38:2f:cc:6c:98:cb:ca:25:1f:ec:c3:
68:68:0b:45:2a:0d:42:40:24:27:08:be:5b:37:99:
2a:1f:8b:9d:cc:bb:96:79:b7:e6:f6:f5:5b:90:7f:
bc:aa:b5:71:80:71:d3:1b:09:68:d1:d3:0c:06:9f:
da:a7:27:4b:65:6d:f7:ea:da:49:2b:4f:a7:1e:47:
37:21:25:c3:b2:71:c9:26:10:ab:5d:6a:12:84:0e:
b5:43:05:a9:50:ec:db:7e:0f:98:0f:fd:df:75:f2:
82:92:fb:2d:6b:3d:61:5a:44:63:ef:70:38:36:ca:
b7:bf:b4:23:82:74:f4:de:db:b1:1f:45:24:84:e7:
a5:ae:11:e2:ce:57:34:36:8e:48:12:7f:cf:2c:3d:
59:75:b3:0f:f0:a9:e9:3d:8f:37:a4:09:40:e5:57:
55:98:fc:e0:0a:4b:8b:f3:6d:4b:23:d0:54:3e:cc:
ad:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:09:17:1E:74:28:8D:45:7D:C8:BF:20:A8:EF:8B:30:FE:2C:F7:9B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/46a946e6-c6bf-458a-b5b4-9e6e55454449.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
96:cd:8c:ef:5d:9b:65:32:82:87:6d:cc:30:2b:57:e2:8c:af:
13:8b:3f:91:8d:22:cc:63:84:c4:0a:d6:ff:d8:0b:c9:b5:e6:
79:2e:2e:cd:f7:7d:18:27:7e:27:aa:08:4d:d8:c8:b2:b2:c3:
dc:eb:f1:a8:de:0a:0e:3d:1d:98:19:af:c6:4d:34:7b:42:58:
76:99:dc:80:08:29:f3:97:06:52:87:43:d1:82:7e:17:04:39:
72:42:e6:0c:29:93:8e:cf:44:be:b2:9a:ca:15:df:17:3b:06:
7a:40:97:f9:22:44:96:fb:ca:4e:df:f0:12:bc:89:d1:d0:88:
ad:30:e7:cd:8e:18:03:50:36:93:b6:bf:ae:4a:8a:9d:eb:24:
c3:1d:19:1c:f7:e0:23:2d:1e:e0:73:31:92:e5:2d:f9:ff:81:
02:12:b0:cb:55:4b:c9:c8:01:2a:ac:ff:f5:bf:34:a1:c5:31:
8a:3c:32:04:24:fa:ee:57:1c:64:69:fb:ec:58:94:1f:04:34:
3f:5f:9a:23:26:10:ef:bf:44:ca:c0:30:1d:ed:57:fe:4c:fc:
2c:41:46:14:5c:46:a4:13:cf:9c:17:8f:f1:a0:8d:f0:4f:2f:
2c:9f:a1:e0:53:c3:7e:22:a2:da:5c:29:18:df:4c:d6:17:36:
94:05:d9:48
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJ2hjprZeQzhOGHu1YHcQy8LbhsIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTA3MDAwMDAwWhcNMjMxMjEyMjM1OTU5
WjB6MUkwRwYDVQQFE0BmYWMxMGJiNjhhZjJiMDQ4NDlkNWNhZjViNmIyYWExMGJh
YzRhZjBjY2I3YTBhNWY0YmY4MjllMDZhNWM3NjNhMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDK+wonxqf2vYVKZuvb8NM8W+s4j9Laww4QRQ64s+PvG9op
TW3RJqbjKhgI24kcreQNZgpmfJUV3yDTH+AylNJ4yYw+4U3OJ0B3BSIlPzM4L8xs
mMvKJR/sw2hoC0UqDUJAJCcIvls3mSofi53Mu5Z5t+b29VuQf7yqtXGAcdMbCWjR
0wwGn9qnJ0tlbffq2kkrT6ceRzchJcOycckmEKtdahKEDrVDBalQ7Nt+D5gP/d91
8oKS+y1rPWFaRGPvcDg2yre/tCOCdPTe27EfRSSE56WuEeLOVzQ2jkgSf88sPVl1
sw/wqek9jzekCUDlV1WY/OAKS4vzbUsj0FQ+zK13AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUdgkXHnQojUV9yL8gqO+LMP4s95swHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzQ2YTk0NmU2LWM2YmYtNDU4YS1iNWI0LTllNmU1NTQ1NDQ0OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJbNjO9dm2UygodtzDArV+KMrxOL
P5GNIsxjhMQK1v/YC8m15nkuLs33fRgnfieqCE3YyLKyw9zr8ajeCg49HZgZr8ZN
NHtCWHaZ3IAIKfOXBlKHQ9GCfhcEOXJC5gwpk47PRL6ymsoV3xc7BnpAl/kiRJb7
yk7f8BK8idHQiK0w582OGANQNpO2v65Kip3rJMMdGRz34CMtHuBzMZLlLfn/gQIS
sMtVS8nIASqs//W/NKHFMYo8MgQk+u5XHGRp++xYlB8END9fmiMmEO+/RMrAMB3t
V/5M/CxBRhRcRqQTz5wXj/GgjfBPLyyfoeBTw34iotpcKRjfTNYXNpQF2Ug=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:54:41 2025 by rpki-client