Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8a7bea52-36cf-4e65-8ac0-57cc3a03d64c.roa
File: 8a7bea52-36cf-4e65-8ac0-57cc3a03d64c.roa (raw, json)
Hash identifier: LyS8maQzEYz2O7XLCiNvBy7aHCdhrnNH/plutyXpiTs=
Subject key identifier: 46:68:FC:D0:F2:DE:19:47:C8:8A:80:EF:AE:9F:4C:D6:D6:55:A9:08
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7AF590B82DD5A5645EA05BC36A2755198ADAFBBF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8a7bea52-36cf-4e65-8ac0-57cc3a03d64c.roa
Signing time: Tue 05 Sep 2023 00:00:00 +0000
ROA not before: Tue 05 Sep 2023 00:00:00 +0000
ROA not after: Tue 10 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:f5:90:b8:2d:d5:a5:64:5e:a0:5b:c3:6a:27:55:19:8a:da:fb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 5 00:00:00 2023 GMT
Not After : Oct 10 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fb:f7:21:89:18:86:38:06:43:bb:61:1b:18:
c3:60:57:32:fa:87:9f:e8:87:99:be:f9:4c:8f:c8:
8e:14:27:d0:5f:4b:fb:03:80:0e:84:df:7b:23:ee:
6c:f3:66:d0:81:e7:b0:0c:ae:4a:07:42:f2:32:33:
14:48:44:af:d4:6f:49:cd:88:35:12:9b:3e:f6:f8:
9b:8c:59:51:e3:ed:b3:56:be:b9:b5:1d:a8:30:08:
e3:7e:42:e1:5d:23:0f:45:f7:c4:59:c2:3d:6a:57:
e0:97:d7:2f:63:57:0d:a2:37:c2:4b:a9:75:ef:84:
73:c4:43:0e:fa:6f:a6:8a:36:94:21:6f:b0:0e:8d:
05:51:be:18:57:5e:f4:a4:66:a4:6a:ab:65:39:9c:
42:fb:d0:9d:aa:b4:8d:a1:1c:47:ba:a0:32:a1:9c:
c7:cf:ff:72:11:6f:90:eb:3a:4a:6d:f0:4a:9d:3b:
55:bc:a8:7f:a6:94:eb:90:46:eb:99:e8:ad:fd:a8:
85:3e:86:2f:2f:cf:8a:9e:38:21:b3:59:df:76:2a:
7d:17:00:f1:ac:d5:ab:43:07:f5:3d:ce:b6:55:75:
23:97:49:f6:26:90:63:2f:73:fa:ac:a0:89:af:0e:
2e:fc:20:3c:65:a6:ce:f0:d7:0d:a4:c3:51:40:ca:
37:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:68:FC:D0:F2:DE:19:47:C8:8A:80:EF:AE:9F:4C:D6:D6:55:A9:08
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8a7bea52-36cf-4e65-8ac0-57cc3a03d64c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:27:3d:53:59:09:93:65:e3:92:a6:dc:7c:6e:85:ab:00:80:
ab:49:39:8c:1f:b1:24:ec:bc:11:de:0c:f6:5d:ed:13:f0:79:
a2:a1:ea:1c:92:fe:ce:d9:49:c1:20:37:88:cb:5b:7f:11:82:
c8:ab:43:d5:6a:a2:5c:20:2c:3a:87:ef:04:5f:16:3c:ad:28:
c0:f8:52:80:15:3b:f6:4a:34:16:95:83:26:b6:e6:f5:23:82:
bf:b7:b4:8f:58:6d:53:61:1a:6c:a2:39:6a:31:94:4e:64:a6:
84:f5:dd:20:78:69:8e:11:66:1e:54:e4:25:3d:5e:fa:20:5a:
29:b6:b3:f2:67:9b:dd:bc:2e:11:c3:2f:b0:e3:38:67:8e:53:
f8:a5:eb:62:be:15:e7:d7:4a:43:26:d6:e7:e5:54:da:b4:e3:
59:5a:49:bc:ab:15:75:8b:06:41:68:d8:08:35:5c:09:ad:2c:
e6:b3:9a:c5:34:ca:19:31:65:67:79:d5:bc:ad:3d:73:e8:86:
97:c2:70:1f:fe:84:9b:65:e9:4c:10:e8:38:62:30:8a:9b:ee:
84:91:ac:fe:f1:1f:a6:2e:76:08:f6:a3:e5:58:67:87:64:59:
73:f6:2d:da:ee:3f:a7:02:54:7f:6b:f4:00:69:75:4d:9b:4f:
07:c1:7a:bc
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUevWQuC3VpWReoFvDaidVGYra+78wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwOTA1MDAwMDAwWhcNMjMxMDEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BkOTI3NWU2ZDYyNTdhZDkzMmNkNjczNWY2NGVjYTc0Yjk4
MzA2MWI5YjU1YTI1YmYzNzQzYTQwODQ2YjBiNzliMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDM+/chiRiGOAZDu2EbGMNgVzL6h5/oh5m++UyPyI4UJ9Bf
S/sDgA6E33sj7mzzZtCB57AMrkoHQvIyMxRIRK/Ub0nNiDUSmz72+JuMWVHj7bNW
vrm1HagwCON+QuFdIw9F98RZwj1qV+CX1y9jVw2iN8JLqXXvhHPEQw76b6aKNpQh
b7AOjQVRvhhXXvSkZqRqq2U5nEL70J2qtI2hHEe6oDKhnMfP/3IRb5DrOkpt8Eqd
O1W8qH+mlOuQRuuZ6K39qIU+hi8vz4qeOCGzWd92Kn0XAPGs1atDB/U9zrZVdSOX
SfYmkGMvc/qsoImvDi78IDxlps7w1w2kw1FAyjdPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQURmj80PLeGUfIioDvrp9M1tZVqQgwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzhhN2JlYTUyLTM2Y2YtNGU2NS04YWMwLTU3Y2MzYTAzZDY0Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIonPVNZCZNl45Km3HxuhasAgKtJ
OYwfsSTsvBHeDPZd7RPweaKh6hyS/s7ZScEgN4jLW38RgsirQ9VqolwgLDqH7wRf
FjytKMD4UoAVO/ZKNBaVgya25vUjgr+3tI9YbVNhGmyiOWoxlE5kpoT13SB4aY4R
Zh5U5CU9XvogWim2s/Jnm928LhHDL7DjOGeOU/il62K+FefXSkMm1uflVNq041la
SbyrFXWLBkFo2Ag1XAmtLOazmsU0yhkxZWd51bytPXPohpfCcB/+hJtl6UwQ6Dhi
MIqb7oSRrP7xH6Yudgj2o+VYZ4dkWXP2LdruP6cCVH9r9ABpdU2bTwfBerw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:55 2025 by rpki-client