Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7b43cf60-d870-46e5-a576-c243dd46625f.roa
File: 7b43cf60-d870-46e5-a576-c243dd46625f.roa (raw, json)
Hash identifier: EioRdPG1NFrrGwdmHClDyygzRx76iAPiWqfzrSd69+0=
Subject key identifier: C1:E3:7B:9B:71:53:1C:8E:5B:73:D4:C6:FE:CB:B9:17:50:27:D8:B7
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 231D147F3599B2E8E8FE375B3CECADE00F9B57D8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7b43cf60-d870-46e5-a576-c243dd46625f.roa
Signing time: Thu 03 Oct 2024 00:00:00 +0000
ROA not before: Thu 03 Oct 2024 00:00:00 +0000
ROA not after: Thu 07 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:1d:14:7f:35:99:b2:e8:e8:fe:37:5b:3c:ec:ad:e0:0f:9b:57:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 3 00:00:00 2024 GMT
Not After : Nov 7 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ae:4a:e7:14:58:9e:fc:51:c1:35:71:3a:46:
6f:5f:15:a6:44:f2:ca:62:d8:72:c8:a6:74:42:1c:
cf:b7:80:31:93:76:6a:25:e1:12:32:69:1f:6e:9f:
ac:a6:8a:98:73:83:52:9d:c4:cf:61:b8:8a:48:c4:
1f:ab:d1:74:b6:2b:8d:7f:82:15:35:13:d5:d7:d7:
be:a1:bd:0c:9d:94:f2:f3:9e:f1:bc:6c:e6:12:63:
f9:a2:f7:5a:e5:10:8b:66:e8:a8:84:f2:58:1d:c9:
ea:8f:5f:82:0d:f8:de:af:7f:dd:ab:de:da:67:55:
fb:5f:9b:36:eb:0b:82:d3:67:39:5d:26:0c:b5:3f:
0a:7a:c1:14:c5:9f:8a:c5:b2:45:26:c6:b2:44:4c:
3d:a7:ae:fd:c4:67:45:3e:2b:df:ee:10:6e:70:12:
1a:2b:8a:f7:aa:77:92:05:21:a0:4a:01:b0:2e:63:
9b:a9:e8:8c:b2:03:bb:25:f1:24:4c:6d:ce:d6:48:
d9:af:fc:4b:6a:ac:d8:1d:31:b8:fc:4c:87:fd:31:
f5:d7:67:5e:31:cf:eb:dc:7a:f0:57:27:ed:84:68:
ac:63:70:4a:f7:17:79:0c:9e:f3:59:0f:b9:47:e1:
b7:ce:05:a1:a1:f2:73:c4:87:43:f2:19:a4:31:d9:
9d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E3:7B:9B:71:53:1C:8E:5B:73:D4:C6:FE:CB:B9:17:50:27:D8:B7
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7b43cf60-d870-46e5-a576-c243dd46625f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:9f:19:38:7c:5b:69:6d:f5:20:6f:d9:f9:11:fa:09:fd:5c:
f8:c0:98:f4:9b:96:a8:3b:02:55:79:9a:2c:9c:b0:cd:4b:bd:
49:5a:c7:11:84:93:c1:62:05:5d:53:da:d5:8e:63:dd:12:b5:
5a:3d:d7:0a:53:95:17:5d:4f:60:b4:83:5c:2c:ff:4f:93:46:
08:a4:9b:e1:ad:b3:1d:a0:65:90:b4:df:dd:42:56:13:f3:56:
47:ab:3a:6f:06:ba:d5:fd:d5:e3:75:b5:30:92:fb:4d:8e:b2:
16:98:d2:0b:32:a7:45:c8:2d:30:41:37:0d:46:f5:ab:fe:27:
85:5e:fa:94:cc:d7:5d:17:72:10:4e:56:ea:4d:d7:ae:8f:56:
ae:0d:f5:12:4c:24:33:d0:8c:d4:3e:4b:e0:48:7a:ea:c4:5b:
ac:a2:59:da:81:5d:10:a6:65:ba:1a:45:f5:23:78:d8:6c:ea:
f2:45:84:7b:c9:c6:d8:42:7e:1f:e2:04:92:d7:a9:f1:3e:c7:
76:d3:08:71:aa:fd:bb:5d:40:77:17:58:e8:f8:8d:31:a7:0d:
86:77:10:04:c7:54:15:1f:f9:ab:6e:3e:8b:a7:2f:0f:8a:0f:
6f:67:03:58:71:26:7e:00:19:be:79:53:00:5f:78:d0:28:f8:
39:8a:d2:8d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIx0UfzWZsujo/jdbPOyt4A+bV9gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMDAzMDAwMDAwWhcNMjQxMTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A3ODJlYTBlZmQ0MzViM2YzNzA3YmVjY2M2MGM4M2E3NWZh
MzQxZTAyZTk2YmVhMTNhN2E3ZDJjZDM1MTA5M2Q4MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCLrkrnFFie/FHBNXE6Rm9fFaZE8spi2HLIpnRCHM+3gDGT
dmol4RIyaR9un6ymiphzg1KdxM9huIpIxB+r0XS2K41/ghU1E9XX176hvQydlPLz
nvG8bOYSY/mi91rlEItm6KiE8lgdyeqPX4IN+N6vf92r3tpnVftfmzbrC4LTZzld
Jgy1Pwp6wRTFn4rFskUmxrJETD2nrv3EZ0U+K9/uEG5wEhoriveqd5IFIaBKAbAu
Y5up6IyyA7sl8SRMbc7WSNmv/EtqrNgdMbj8TIf9MfXXZ14xz+vcevBXJ+2EaKxj
cEr3F3kMnvNZD7lH4bfOBaGh8nPEh0PyGaQx2Z1FAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUweN7m3FTHI5bc9TG/su5F1An2LcwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzdiNDNjZjYwLWQ4NzAtNDZlNS1hNTc2LWMyNDNkZDQ2NjI1Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAI6fGTh8W2lt9SBv2fkR+gn9XPjA
mPSblqg7AlV5miycsM1LvUlaxxGEk8FiBV1T2tWOY90StVo91wpTlRddT2C0g1ws
/0+TRgikm+Gtsx2gZZC0391CVhPzVkerOm8GutX91eN1tTCS+02OshaY0gsyp0XI
LTBBNw1G9av+J4Ve+pTM110XchBOVupN166PVq4N9RJMJDPQjNQ+S+BIeurEW6yi
WdqBXRCmZboaRfUjeNhs6vJFhHvJxthCfh/iBJLXqfE+x3bTCHGq/btdQHcXWOj4
jTGnDYZ3EATHVBUf+atuPounLw+KD29nA1hxJn4AGb55UwBfeNAo+DmK0o0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:08:52 2025 by rpki-client