Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/83c46172-ebed-4e4d-b9b2-9982b23fd135.roa
File: 83c46172-ebed-4e4d-b9b2-9982b23fd135.roa (raw, json)
Hash identifier: LIzjiuj+OykJx3H6empkc2392OQgO4aBjGiEJYFKTkY=
Subject key identifier: AF:1D:06:5F:FB:B5:10:56:81:50:12:AE:9C:AD:D4:2B:49:B4:E4:90
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 731CF36CF2EB6898C72DD5B4B10FB6B5C9049ED0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/83c46172-ebed-4e4d-b9b2-9982b23fd135.roa
Signing time: Mon 03 Mar 2025 19:48:20 +0000
ROA not before: Mon 03 Mar 2025 19:48:20 +0000
ROA not after: Mon 07 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:1c:f3:6c:f2:eb:68:98:c7:2d:d5:b4:b1:0f:b6:b5:c9:04:9e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 3 19:48:20 2025 GMT
Not After : Apr 7 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:b3:91:c7:7c:22:14:60:20:20:f1:a2:57:
7a:87:90:3c:fb:62:dd:57:db:0d:0b:16:0a:b8:e5:
cc:b5:e2:7c:18:40:3c:14:e0:93:bb:a5:39:86:f1:
f5:99:6d:a2:a9:c9:39:0a:7f:77:a3:d2:d5:f4:b1:
1f:cc:8d:cf:a7:94:49:3d:18:31:22:a3:27:e4:a1:
75:f5:a4:03:31:a7:41:78:29:53:f4:75:02:df:ac:
0d:24:27:39:48:43:15:62:78:53:49:52:49:64:1d:
65:be:33:54:1d:1d:b1:0e:14:c7:11:01:a5:e5:2f:
20:3e:47:b4:66:23:0a:37:a1:cc:2d:55:8e:2b:08:
61:6a:f3:ab:9b:ad:72:c6:43:35:3c:3d:52:d8:75:
30:b9:ec:4d:de:fd:91:f6:63:4e:a2:1f:bd:4d:10:
83:8d:db:b8:fa:81:7f:54:a3:bf:ca:ab:5a:4b:19:
f4:d6:93:ec:d3:7f:35:4c:c3:a3:20:19:4f:bf:2a:
e0:c4:b9:6c:81:19:25:36:32:1f:fc:21:7d:29:7d:
6b:99:f5:05:c2:af:fc:24:d1:8c:0e:d4:a6:1c:42:
ff:57:19:15:3c:c6:d1:d5:6b:29:b2:b3:6c:5d:1a:
e5:db:30:6d:ab:0b:1a:60:16:2b:55:5f:bd:61:d2:
77:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1D:06:5F:FB:B5:10:56:81:50:12:AE:9C:AD:D4:2B:49:B4:E4:90
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/83c46172-ebed-4e4d-b9b2-9982b23fd135.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
96:be:41:45:2f:f1:7d:c2:7a:7f:7d:bb:2b:bc:48:65:99:55:
3b:4f:57:03:aa:66:0c:69:92:96:31:0f:89:a1:3a:3b:df:5f:
43:be:c6:e8:3e:a6:4b:57:2c:54:40:33:f1:2e:38:66:a0:29:
05:e7:20:37:bf:2b:cf:dc:05:49:f0:f8:6f:12:67:62:8e:3f:
e0:ad:db:e9:65:ae:a5:cb:c4:df:4d:e3:f7:4f:90:9a:c1:02:
5a:b0:16:c2:b3:30:3a:73:2b:49:f0:e0:68:ab:2f:d4:32:94:
ed:77:3f:8e:04:b7:a4:f9:b2:f6:ec:ac:9c:96:8a:47:71:66:
62:2b:01:ce:f0:31:e2:30:a9:ad:6c:5b:fd:a6:04:ba:68:8b:
06:b9:78:d4:98:94:93:ea:3d:c4:0e:aa:cd:ca:69:b9:ea:13:
2b:0c:98:b6:1a:ad:d7:fd:17:b6:47:1e:f2:50:a5:c4:c9:e3:
48:8e:d7:20:f9:4f:44:57:96:de:3e:db:69:cd:8b:a4:10:1a:
f7:f3:02:3e:c0:d4:98:8a:f1:4a:24:6f:92:f1:bc:db:13:0d:
47:f7:82:81:d7:d7:d7:53:5f:b8:54:cf:6d:73:dc:69:a5:56:
95:02:2d:88:e8:52:26:ee:0c:72:a6:d7:64:73:e2:67:54:f8:
1e:b6:f2:db
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUcxzzbPLraJjHLdW0sQ+2tckEntAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMzAzMTk0ODIwWhcNMjUwNDA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BjMjUxZTkzYzNmNzRjMDRiY2Q3NjVhZmNkNzcwN2M2NDRm
YzM5YzExYTU0MGUwMGJhZjJjNWFhZmVhOTllOGM2MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3LrORx3wiFGAgIPGiV3qHkDz7Yt1X2w0LFgq45cy14nwY
QDwU4JO7pTmG8fWZbaKpyTkKf3ej0tX0sR/Mjc+nlEk9GDEioyfkoXX1pAMxp0F4
KVP0dQLfrA0kJzlIQxVieFNJUklkHWW+M1QdHbEOFMcRAaXlLyA+R7RmIwo3ocwt
VY4rCGFq86ubrXLGQzU8PVLYdTC57E3e/ZH2Y06iH71NEION27j6gX9Uo7/Kq1pL
GfTWk+zTfzVMw6MgGU+/KuDEuWyBGSU2Mh/8IX0pfWuZ9QXCr/wk0YwO1KYcQv9X
GRU8xtHVaymys2xdGuXbMG2rCxpgFitVX71h0ndhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUrx0GX/u1EFaBUBKunK3UK0m05JAwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzgzYzQ2MTcyLWViZWQtNGU0ZC1iOWIyLTk5ODJiMjNmZDEzNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJa+QUUv8X3Cen99uyu8SGWZVTtP
VwOqZgxpkpYxD4mhOjvfX0O+xug+pktXLFRAM/EuOGagKQXnIDe/K8/cBUnw+G8S
Z2KOP+Ct2+llrqXLxN9N4/dPkJrBAlqwFsKzMDpzK0nw4GirL9QylO13P44Et6T5
svbsrJyWikdxZmIrAc7wMeIwqa1sW/2mBLpoiwa5eNSYlJPqPcQOqs3KabnqEysM
mLYardf9F7ZHHvJQpcTJ40iO1yD5T0RXlt4+22nNi6QQGvfzAj7A1JiK8Uokb5Lx
vNsTDUf3goHX19dTX7hUz21z3GmlVpUCLYjoUibuDHKm12Rz4mdU+B628ts=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:38 2025 by rpki-client