Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/68ea1f3b-4f63-40fc-a6db-67c79d7cd454.roa
File: 68ea1f3b-4f63-40fc-a6db-67c79d7cd454.roa (raw, json)
Hash identifier: Sdscms6j0r+IMz0TxqgFwKz4bbv3YM0Y4FcxVp0DaYw=
Subject key identifier: 46:B7:F8:41:AC:ED:B1:A1:0E:41:F3:8C:E4:96:5E:DB:40:98:F8:4D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 18732223E98A8EB964AD3F285E087FC640C4309E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/68ea1f3b-4f63-40fc-a6db-67c79d7cd454.roa
Signing time: Mon 05 Feb 2024 00:00:00 +0000
ROA not before: Mon 05 Feb 2024 00:00:00 +0000
ROA not after: Mon 11 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:73:22:23:e9:8a:8e:b9:64:ad:3f:28:5e:08:7f:c6:40:c4:30:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 5 00:00:00 2024 GMT
Not After : Mar 11 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:81:92:02:f3:fb:63:63:73:e5:22:80:13:36:
c8:b9:01:b9:a2:48:fe:94:37:4f:0d:be:d0:b9:2d:
f6:3f:5d:b4:81:1b:e6:ef:d0:b7:1e:d4:bb:39:9e:
a6:39:51:0b:54:f5:43:63:fa:1a:40:25:ab:38:50:
16:30:1d:b1:14:9a:36:2e:99:06:8a:14:60:bc:80:
98:4d:a2:35:31:09:5a:84:27:65:48:6d:44:ff:d5:
ae:ba:d0:01:3e:d0:19:ab:34:90:19:7e:2e:bc:94:
3c:aa:cd:e1:73:d0:2a:8d:26:21:1d:bd:cc:43:bb:
e7:0a:23:02:bf:c6:59:5b:7c:8f:66:a9:c0:87:81:
2b:cd:96:f2:6b:9d:26:57:b0:b5:19:e1:38:71:87:
0c:81:09:bc:52:80:01:17:1f:48:ee:f6:ed:ed:24:
de:cd:38:f2:bb:ed:f8:f5:50:d5:22:07:22:39:d5:
e9:bf:fd:15:11:50:33:9c:0d:e6:3e:61:76:31:26:
c0:c1:68:bf:3e:a6:ab:77:d2:5e:45:33:eb:9c:e0:
cd:a0:26:c4:76:56:64:46:ca:7f:21:07:3d:fb:06:
93:90:21:cd:61:28:21:bf:7a:61:57:85:bb:af:20:
a8:91:d7:0b:c9:32:41:83:14:30:5e:24:b9:5d:3a:
63:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B7:F8:41:AC:ED:B1:A1:0E:41:F3:8C:E4:96:5E:DB:40:98:F8:4D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/68ea1f3b-4f63-40fc-a6db-67c79d7cd454.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:d2:70:8e:cb:84:b4:78:84:2e:10:53:9b:5e:77:58:5a:e7:
1f:bb:b2:cf:2a:d7:ce:6d:b3:7a:eb:12:a5:c7:2d:ba:66:8d:
ea:bf:cd:cf:54:a6:d3:e3:ae:7a:dc:90:fe:1c:cf:41:37:c8:
04:b7:f0:96:4b:08:8a:b8:a4:38:96:a9:bb:f7:bf:8b:60:1e:
41:f0:6c:50:94:de:ac:38:40:01:83:c2:64:70:59:ab:58:28:
47:66:c5:2d:23:63:35:5e:fd:4c:a4:e5:1d:9e:37:e7:f1:0a:
3c:c1:8e:df:35:5c:dc:18:d6:6e:d0:ea:5d:7d:d7:6b:50:e9:
e4:aa:ad:4b:23:a5:65:03:f6:46:62:00:db:d2:df:d3:7e:e1:
6b:1e:7c:0b:44:5d:dd:ea:86:24:d2:d8:d1:12:ab:fb:f4:c5:
38:03:a8:3d:17:79:b9:a9:92:f9:df:87:0b:c9:ca:5a:6f:a7:
a4:65:a7:70:b7:ed:48:02:63:cf:88:80:00:44:c2:c0:36:03:
1b:d4:c6:81:f6:3f:63:e0:e4:59:eb:4e:be:c3:73:af:2a:1a:
20:c1:b9:92:e4:e3:0d:d3:d3:28:12:63:47:1b:86:bb:a7:f0:
31:c5:62:ba:3d:a2:d0:bb:29:31:dd:cb:c1:d6:8e:23:3f:17:
56:67:52:f9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGHMiI+mKjrlkrT8oXgh/xkDEMJ4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwMjA1MDAwMDAwWhcNMjQwMzExMjM1OTU5
WjB6MUkwRwYDVQQFE0A0MmIxNTk2Nzg2N2QxYzk0YzM4MzJkZTFiNDIxZmEzZjJm
YmU1MGNiZTUwYWUyMGMzNTRkNjM4ZDMxMjU2OThjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDVgZIC8/tjY3PlIoATNsi5AbmiSP6UN08NvtC5LfY/XbSB
G+bv0Lce1Ls5nqY5UQtU9UNj+hpAJas4UBYwHbEUmjYumQaKFGC8gJhNojUxCVqE
J2VIbUT/1a660AE+0BmrNJAZfi68lDyqzeFz0CqNJiEdvcxDu+cKIwK/xllbfI9m
qcCHgSvNlvJrnSZXsLUZ4ThxhwyBCbxSgAEXH0ju9u3tJN7NOPK77fj1UNUiByI5
1em//RURUDOcDeY+YXYxJsDBaL8+pqt30l5FM+uc4M2gJsR2VmRGyn8hBz37BpOQ
Ic1hKCG/emFXhbuvIKiR1wvJMkGDFDBeJLldOmOPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQURrf4QaztsaEOQfOM5JZe20CY+E0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzY4ZWExZjNiLTRmNjMtNDBmYy1hNmRiLTY3Yzc5ZDdjZDQ1NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKPScI7LhLR4hC4QU5ted1ha5x+7
ss8q185ts3rrEqXHLbpmjeq/zc9UptPjrnrckP4cz0E3yAS38JZLCIq4pDiWqbv3
v4tgHkHwbFCU3qw4QAGDwmRwWatYKEdmxS0jYzVe/Uyk5R2eN+fxCjzBjt81XNwY
1m7Q6l1912tQ6eSqrUsjpWUD9kZiANvS39N+4WsefAtEXd3qhiTS2NESq/v0xTgD
qD0XebmpkvnfhwvJylpvp6Rlp3C37UgCY8+IgABEwsA2AxvUxoH2P2Pg5FnrTr7D
c68qGiDBuZLk4w3T0ygSY0cbhrun8DHFYro9otC7KTHdy8HWjiM/F1ZnUvk=
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:41:08 2025 by rpki-client