Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/78a92a3d-622a-4b15-a051-4c779d41b89b.roa
File: 78a92a3d-622a-4b15-a051-4c779d41b89b.roa (raw, json)
Hash identifier: 3y6OzAludRuhpBsmueKo42VxIMb1nQyivvCHnh8PlDY=
Subject key identifier: CB:B9:74:27:7D:29:D8:39:CE:19:79:37:32:F1:22:D9:70:D0:63:D4
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0D3A9F0EDD95EFB6ADC4FA3BB5B534A88B2906C3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/78a92a3d-622a-4b15-a051-4c779d41b89b.roa
Signing time: Fri 14 Feb 2025 17:53:25 +0000
ROA not before: Fri 14 Feb 2025 17:53:25 +0000
ROA not after: Fri 21 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:3a:9f:0e:dd:95:ef:b6:ad:c4:fa:3b:b5:b5:34:a8:8b:29:06:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 14 17:53:25 2025 GMT
Not After : Mar 21 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:db:96:4f:9c:86:f9:c4:38:a9:cf:66:91:
b4:fa:77:c4:f1:8d:5d:9a:73:5e:83:c5:ca:ef:85:
08:e6:73:e9:77:2e:80:44:66:b3:ef:a0:40:7e:80:
1b:64:ae:b6:74:b5:eb:58:8b:b9:89:2d:55:a7:67:
65:eb:02:f6:90:d9:5b:59:f9:90:54:24:da:fa:e2:
e5:36:61:4b:4c:0c:ea:af:bb:85:54:0b:65:73:64:
52:2e:df:8f:e3:f3:f4:d8:9f:73:82:30:26:68:dc:
0d:cb:bc:fb:b9:98:20:0c:9b:c2:b2:8c:36:50:0d:
5c:55:f7:02:38:98:b8:dc:72:ac:e9:d3:ba:ed:0f:
cd:0f:87:fa:2b:9f:f4:8e:f1:0d:3f:ad:5d:aa:b5:
9d:9d:42:6a:08:b8:fa:23:82:8e:e5:7c:3e:e9:44:
fd:57:8b:3b:7f:b0:cd:f6:45:0b:92:c7:63:b7:95:
a7:8b:1c:0f:0c:23:25:45:d0:e6:93:ab:b4:20:a0:
37:b1:e2:36:61:4e:c2:a6:e2:c9:32:ee:34:93:79:
1d:40:cf:fd:2f:7f:2b:6a:ed:55:09:3d:5b:26:87:
27:54:46:b9:64:51:f9:de:88:f2:b0:2b:d7:ec:4a:
a4:12:59:b3:7d:0f:63:53:23:8d:1d:4d:d3:81:85:
de:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B9:74:27:7D:29:D8:39:CE:19:79:37:32:F1:22:D9:70:D0:63:D4
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/78a92a3d-622a-4b15-a051-4c779d41b89b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
35:1c:b1:7e:5f:db:90:ae:b6:91:e3:c4:75:df:54:04:41:bb:
7e:d3:a7:27:3e:4e:b1:9d:40:f6:2e:94:8e:a4:2f:3d:8d:3a:
d8:bf:a4:71:f5:eb:8e:b1:2d:2e:bb:a9:dc:fb:28:d0:6c:61:
47:b6:3b:d0:2a:43:98:fb:be:ff:91:5a:17:40:1d:de:5f:62:
92:fd:78:85:53:d9:69:b7:f8:0c:88:33:29:d4:67:03:d2:91:
9f:29:e7:7f:0e:d1:e5:53:98:de:38:e3:66:12:f9:de:6b:00:
e3:53:9d:9d:f6:3f:27:28:01:fa:c0:06:09:a8:a5:d6:40:a9:
0f:3f:77:a7:6f:57:cf:a3:cf:04:c3:6f:7a:bb:71:b3:de:96:
06:b8:16:d6:b2:7c:fc:29:71:91:3f:17:94:8f:61:2a:2f:5e:
24:82:87:87:55:e5:7c:66:f4:6c:16:e9:3c:21:76:a5:e2:a6:
2e:f8:b3:ef:02:42:dc:ae:e8:8b:92:25:75:37:de:bb:a4:6e:
c3:82:f6:5f:84:9d:de:b4:7a:32:dd:ef:3d:f8:e8:eb:e2:0f:
19:18:60:34:89:db:ef:cd:0a:b4:f3:78:f5:f0:ef:82:46:49:
a4:3e:a3:8d:97:84:af:0d:1e:19:db:01:6b:0d:e6:51:69:f2:
7f:31:0a:85
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDTqfDt2V77atxPo7tbU0qIspBsMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMjE0MTc1MzI1WhcNMjUwMzIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A1YmM3ZmRlOWMyZjdmMjFjY2Y5NTViODM3MjRhNzRkMjZh
ZGM1ZTJiNzY3OTI0YjdhOWUxNjIwZGI2MzlhN2M4MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCm0NuWT5yG+cQ4qc9mkbT6d8TxjV2ac16DxcrvhQjmc+l3
LoBEZrPvoEB+gBtkrrZ0tetYi7mJLVWnZ2XrAvaQ2VtZ+ZBUJNr64uU2YUtMDOqv
u4VUC2VzZFIu34/j8/TYn3OCMCZo3A3LvPu5mCAMm8KyjDZQDVxV9wI4mLjccqzp
07rtD80Ph/orn/SO8Q0/rV2qtZ2dQmoIuPojgo7lfD7pRP1Xizt/sM32RQuSx2O3
laeLHA8MIyVF0OaTq7QgoDex4jZhTsKm4sky7jSTeR1Az/0vfytq7VUJPVsmhydU
RrlkUfneiPKwK9fsSqQSWbN9D2NTI40dTdOBhd4dAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUy7l0J30p2DnOGXk3MvEi2XDQY9QwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2Lzc4YTkyYTNkLTYyMmEtNGIxNS1hMDUxLTRjNzc5ZDQxYjg5Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADUcsX5f25CutpHjxHXfVARBu37T
pyc+TrGdQPYulI6kLz2NOti/pHH1646xLS67qdz7KNBsYUe2O9AqQ5j7vv+RWhdA
Hd5fYpL9eIVT2Wm3+AyIMynUZwPSkZ8p538O0eVTmN4442YS+d5rAONTnZ32Pyco
AfrABgmopdZAqQ8/d6dvV8+jzwTDb3q7cbPelga4FtayfPwpcZE/F5SPYSovXiSC
h4dV5Xxm9GwW6TwhdqXipi74s+8CQtyu6IuSJXU33rukbsOC9l+End60ejLd7z34
6OviDxkYYDSJ2+/NCrTzePXw74JGSaQ+o42XhK8NHhnbAWsN5lFp8n8xCoU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:50:02 2025 by rpki-client