Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/52692e5c-4d56-4360-b2f6-75933acbf751.roa
File: 52692e5c-4d56-4360-b2f6-75933acbf751.roa (raw, json)
Hash identifier: zIOXxkwN+SdPdaqBXvEpc3fqFTWuRQ1koQMkWFBJ41k=
Subject key identifier: CE:50:F4:1C:64:A2:39:4D:4E:90:E7:46:0E:1A:D0:F9:20:50:A8:0C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5D796517DED3653D40716614DBD39AC28A7B6D2C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/52692e5c-4d56-4360-b2f6-75933acbf751.roa
Signing time: Mon 18 Sep 2023 00:00:00 +0000
ROA not before: Mon 18 Sep 2023 00:00:00 +0000
ROA not after: Mon 23 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:79:65:17:de:d3:65:3d:40:71:66:14:db:d3:9a:c2:8a:7b:6d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 18 00:00:00 2023 GMT
Not After : Oct 23 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:35:41:f3:3d:14:7e:61:40:9b:1c:43:ce:9d:
ce:9f:48:f8:a0:85:05:62:5e:fb:2a:8a:ce:53:85:
78:a9:e6:02:1e:3e:f0:14:60:ce:ce:ba:46:da:3f:
c0:16:04:95:29:06:43:c3:6f:a4:d6:d7:cd:e6:32:
4b:3d:77:1a:2a:ba:96:83:54:0c:3b:ea:98:8b:2e:
f1:5b:66:12:9e:41:d3:86:b5:03:2e:78:06:d9:41:
93:1c:da:0d:f2:d1:5e:c0:72:bd:b2:95:dd:31:72:
dc:85:92:2a:27:27:ee:3a:49:f8:0d:1d:c6:92:b7:
5c:80:26:0f:47:54:e1:ab:7b:67:e4:a3:ea:5f:43:
cc:3b:6d:b6:1b:51:e1:1e:b4:b6:c9:91:1a:d2:9c:
34:c3:4b:95:ec:b0:20:ba:66:7b:30:3e:f7:5f:78:
5f:fd:96:21:64:71:b7:ab:d7:a3:a7:ac:37:08:c6:
0c:4c:44:bd:4c:14:c6:d4:53:56:4c:b2:a5:a8:62:
20:dd:50:4a:ed:0f:90:30:e3:d7:89:0e:8e:32:73:
dc:36:e5:ab:46:b9:7d:8c:44:18:79:41:43:02:24:
60:1b:f3:d5:41:b1:bd:02:ac:c4:98:b4:63:20:60:
98:d0:d0:d6:0f:6e:fe:69:74:d5:b8:33:04:bc:74:
74:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:50:F4:1C:64:A2:39:4D:4E:90:E7:46:0E:1A:D0:F9:20:50:A8:0C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/52692e5c-4d56-4360-b2f6-75933acbf751.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
05:93:5c:d7:20:01:9e:56:57:fd:f9:fa:fe:73:4f:97:8d:d2:
ab:df:6d:6a:07:5a:fe:31:23:f2:40:49:97:3d:db:e4:d1:c3:
33:df:77:1c:8f:db:d0:9a:32:e4:68:c9:ac:c4:9f:dd:20:b4:
29:20:ca:32:27:8f:39:14:b0:92:ae:d3:fe:84:89:88:1e:9c:
4f:d6:8d:64:79:52:c3:bc:95:92:45:7c:d9:e0:6e:5b:03:59:
b6:c4:75:f9:e7:cc:29:92:77:94:b4:a9:01:2d:38:02:9b:63:
74:73:2d:27:fe:65:f7:e2:93:ae:85:ab:35:3d:da:b0:b8:16:
a4:99:ed:64:b1:fc:36:f8:8b:aa:fe:fb:1e:56:89:88:72:45:
79:b4:82:89:40:74:d2:d6:8b:c4:6e:71:81:65:4c:3e:65:f9:
32:03:30:2b:97:4f:b3:ac:2a:27:ac:af:98:83:44:04:59:12:
05:47:92:21:f8:30:38:9e:a1:a6:23:5c:e2:67:3f:78:23:df:
bf:8b:8e:5e:fa:61:ad:17:a7:c7:e8:e0:8d:4f:33:bb:d7:4a:
64:c4:61:5b:e2:dc:0b:61:49:89:e6:59:18:c1:0b:8d:30:a5:
85:4c:6c:37:03:40:4d:42:bd:b9:1d:87:a9:c8:39:45:20:b0:
63:a2:e4:1e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXXllF97TZT1AcWYU29Oawop7bSwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwOTE4MDAwMDAwWhcNMjMxMDIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BhNGY0ZDhkYjMzY2FmZDc0ZTVlNmMyNjRiYTUwOTJkZTA3
NWYxMDRhYjVmZmQ2YjgxNDI2NjA1MDlmZDNjOTA4MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCdNUHzPRR+YUCbHEPOnc6fSPighQViXvsqis5ThXip5gIe
PvAUYM7OukbaP8AWBJUpBkPDb6TW183mMks9dxoqupaDVAw76piLLvFbZhKeQdOG
tQMueAbZQZMc2g3y0V7Acr2yld0xctyFkionJ+46SfgNHcaSt1yAJg9HVOGre2fk
o+pfQ8w7bbYbUeEetLbJkRrSnDTDS5XssCC6ZnswPvdfeF/9liFkcber16OnrDcI
xgxMRL1MFMbUU1ZMsqWoYiDdUErtD5Aw49eJDo4yc9w25atGuX2MRBh5QUMCJGAb
89VBsb0CrMSYtGMgYJjQ0NYPbv5pdNW4MwS8dHSpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUzlD0HGSiOU1OkOdGDhrQ+SBQqAwwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzUyNjkyZTVjLTRkNTYtNDM2MC1iMmY2LTc1OTMzYWNiZjc1MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAWTXNcgAZ5WV/35+v5zT5eN0qvf
bWoHWv4xI/JASZc92+TRwzPfdxyP29CaMuRoyazEn90gtCkgyjInjzkUsJKu0/6E
iYgenE/WjWR5UsO8lZJFfNngblsDWbbEdfnnzCmSd5S0qQEtOAKbY3RzLSf+Zffi
k66FqzU92rC4FqSZ7WSx/Db4i6r++x5WiYhyRXm0golAdNLWi8RucYFlTD5l+TID
MCuXT7OsKiesr5iDRARZEgVHkiH4MDieoaYjXOJnP3gj37+Ljl76Ya0Xp8fo4I1P
M7vXSmTEYVvi3AthSYnmWRjBC40wpYVMbDcDQE1Cvbkdh6nIOUUgsGOi5B4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:13:35 2025 by rpki-client