Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/714b2d15-2329-403b-9430-c26e86850875.roa
File: 714b2d15-2329-403b-9430-c26e86850875.roa (raw, json)
Hash identifier: CdW/VocaeNbQ2iUqlyExPdIZTXIq+6wFBPrLLCGQf7c=
Subject key identifier: FE:86:79:72:B8:25:C3:20:82:39:88:1B:21:85:80:C2:61:02:4C:D6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 391B800FEAE357037C0886820FA508ABE190209B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/714b2d15-2329-403b-9430-c26e86850875.roa
Signing time: Fri 16 Feb 2024 00:00:00 +0000
ROA not before: Fri 16 Feb 2024 00:00:00 +0000
ROA not after: Fri 22 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:1b:80:0f:ea:e3:57:03:7c:08:86:82:0f:a5:08:ab:e1:90:20:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 16 00:00:00 2024 GMT
Not After : Mar 22 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:8e:59:21:1e:9d:a6:73:6b:ee:f0:a9:90:
d3:5a:0f:b9:1e:29:5b:19:ee:13:45:8e:c8:2d:21:
c6:3a:b2:65:81:44:c8:44:c9:c4:81:da:65:36:6f:
74:f6:8f:45:ec:3e:b5:34:35:a9:05:e9:ca:e7:75:
61:7f:0f:28:f3:5c:2f:fe:18:48:4e:ad:70:39:a5:
28:fa:e6:c6:83:39:a4:19:b1:7f:b5:76:d3:62:36:
d7:f6:7c:cf:2e:21:00:72:41:c3:71:58:1f:03:42:
17:e0:cd:50:0b:8e:45:a6:c7:58:89:cd:a6:17:81:
98:3d:89:fd:38:2f:e7:bf:98:3a:a4:10:54:01:62:
b8:66:95:62:69:df:55:21:c3:4b:05:92:df:57:be:
94:62:28:8e:56:60:ca:cc:a2:2d:75:ca:e4:55:2b:
ef:d2:93:29:2c:b9:ac:41:45:28:99:05:d7:18:90:
14:2e:69:35:35:ec:59:bb:27:de:31:b9:3c:ee:31:
62:e1:c4:b1:80:a2:9e:da:c6:ad:34:bd:2e:d8:d9:
68:7e:54:eb:3a:bd:d6:31:ce:7f:f9:a1:be:41:aa:
01:95:2f:c4:fd:5b:d1:64:dd:69:00:a5:f0:9f:75:
58:7f:81:b0:c0:7c:95:7e:f4:fd:82:25:e4:f4:0d:
45:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:86:79:72:B8:25:C3:20:82:39:88:1B:21:85:80:C2:61:02:4C:D6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/714b2d15-2329-403b-9430-c26e86850875.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:6c:28:2a:f6:e6:b9:6c:3c:1c:45:30:c2:1b:16:71:77:61:
ac:13:4c:61:ea:4f:3c:f2:ef:fe:86:bf:77:46:5b:c3:14:42:
78:93:ee:eb:1d:f9:d6:59:fc:5b:ce:c5:2f:f4:23:a6:69:3e:
de:7d:e5:a3:c6:7d:f9:be:48:70:8d:a6:86:df:7b:03:6b:03:
45:09:64:69:e8:84:ef:bb:56:ea:cd:ba:a9:b7:35:86:f2:d4:
59:12:c5:b0:ad:d6:ab:00:dc:c8:bf:54:8b:a9:59:bd:6a:e5:
1f:0e:05:eb:00:72:8b:40:61:5c:f7:13:b9:29:14:65:b6:56:
14:4a:de:61:c9:4c:e5:9b:a5:9a:9a:09:61:a8:05:40:a3:bd:
4c:7d:5b:ba:fe:d8:9f:b1:e4:6a:66:6f:8f:d6:e2:03:a8:73:
b7:ab:3f:2d:a9:85:d1:4a:a1:83:5d:4b:42:10:26:10:cf:26:
6c:6b:12:46:b5:f2:00:70:95:ff:43:10:cf:b6:1f:bf:51:5a:
00:f0:e7:05:14:1f:6d:af:d8:5d:77:b8:ea:33:84:ce:70:50:
0e:0a:36:28:eb:87:21:1d:af:fc:7c:1f:a5:3c:b0:ad:6a:8e:
f8:d9:49:1e:7e:b7:bc:9a:3b:f8:c4:73:0d:7c:83:ce:87:8b:
4b:70:83:d8
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUORuAD+rjVwN8CIaCD6UIq+GQIJswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwMjE2MDAwMDAwWhcNMjQwMzIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A4YjU1ZGM1OGI2Y2FkZGZlYjQ2NWUwYjNiYTY4NWI0ODkx
MDQwMDQyNWM3NDRmYmM2ZjE5MTc3ZDBlMGNmNjMxMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3QI5ZIR6dpnNr7vCpkNNaD7keKVsZ7hNFjsgtIcY6smWB
RMhEycSB2mU2b3T2j0XsPrU0NakF6crndWF/DyjzXC/+GEhOrXA5pSj65saDOaQZ
sX+1dtNiNtf2fM8uIQByQcNxWB8DQhfgzVALjkWmx1iJzaYXgZg9if04L+e/mDqk
EFQBYrhmlWJp31Uhw0sFkt9XvpRiKI5WYMrMoi11yuRVK+/SkyksuaxBRSiZBdcY
kBQuaTU17Fm7J94xuTzuMWLhxLGAop7axq00vS7Y2Wh+VOs6vdYxzn/5ob5BqgGV
L8T9W9Fk3WkApfCfdVh/gbDAfJV+9P2CJeT0DUXTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU/oZ5crglwyCCOYgbIYWAwmECTNYwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzcxNGIyZDE1LTIzMjktNDAzYi05NDMwLWMyNmU4Njg1MDg3NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEtsKCr25rlsPBxFMMIbFnF3YawT
TGHqTzzy7/6Gv3dGW8MUQniT7usd+dZZ/FvOxS/0I6ZpPt595aPGffm+SHCNpobf
ewNrA0UJZGnohO+7VurNuqm3NYby1FkSxbCt1qsA3Mi/VIupWb1q5R8OBesAcotA
YVz3E7kpFGW2VhRK3mHJTOWbpZqaCWGoBUCjvUx9W7r+2J+x5Gpmb4/W4gOoc7er
Py2phdFKoYNdS0IQJhDPJmxrEka18gBwlf9DEM+2H79RWgDw5wUUH22v2F13uOoz
hM5wUA4KNijrhyEdr/x8H6U8sK1qjvjZSR5+t7yaO/jEcw18g86Hi0twg9g=
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:25 2025 by rpki-client