Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b519e00-49c5-480e-9b2c-8430fde476d4.roa
File: 8b519e00-49c5-480e-9b2c-8430fde476d4.roa (raw, json)
Hash identifier: vdPFl1veyUNZ9kyXBChGGx9kkAjs4Uk4Gl43mVoyaZk=
Subject key identifier: BE:00:7A:13:31:F9:74:56:61:5C:D9:0F:9A:39:78:56:61:36:DA:56
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5C6DC5A54ED521F452628547403E650EEF37025D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b519e00-49c5-480e-9b2c-8430fde476d4.roa
Signing time: Fri 23 Jun 2023 00:00:00 +0000
ROA not before: Fri 23 Jun 2023 00:00:00 +0000
ROA not after: Fri 28 Jul 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:6d:c5:a5:4e:d5:21:f4:52:62:85:47:40:3e:65:0e:ef:37:02:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 23 00:00:00 2023 GMT
Not After : Jul 28 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:63:f6:fd:45:c6:76:8f:9e:13:49:e0:4f:76:
ef:12:d4:cb:c4:94:bd:ab:e5:bb:f4:f0:ff:9d:db:
bd:b9:98:36:82:d1:cb:08:00:a8:7d:62:10:e8:d7:
ea:9b:95:ca:48:e9:74:13:7e:91:e7:5a:78:99:7c:
15:33:9b:d4:a6:f5:56:e1:f1:0e:9d:5e:ae:44:5a:
c9:eb:a4:64:4b:9a:7f:cf:86:ff:a4:a8:77:5c:1c:
da:c0:a4:67:53:0d:4d:1a:13:c1:a4:b7:ea:94:a0:
dc:8e:45:ea:a4:d5:68:62:c9:86:6f:0e:7f:60:35:
a8:a6:16:18:29:5e:d7:aa:f6:99:8f:aa:1b:f7:d3:
e1:e3:06:f9:fd:72:a7:43:97:70:74:cf:50:54:a4:
b0:ed:5c:70:f4:c4:fc:3e:7c:85:69:34:72:e4:3b:
dc:87:05:1f:65:c9:20:fc:22:27:2c:a8:91:70:62:
7b:f1:e1:98:f9:af:fa:e5:1a:67:cd:7d:11:d2:22:
d4:87:6c:d7:ab:77:cd:b9:59:f4:86:88:d8:40:20:
9d:3f:b6:7a:05:5e:25:26:fb:9a:d4:a4:c9:a2:74:
ba:68:2f:3b:49:5f:8b:36:bf:b7:3d:eb:e7:26:be:
e6:1e:0b:1f:f6:25:94:9e:ce:d6:55:2f:13:fc:3d:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:00:7A:13:31:F9:74:56:61:5C:D9:0F:9A:39:78:56:61:36:DA:56
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b519e00-49c5-480e-9b2c-8430fde476d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a7:6c:49:50:be:ca:df:69:0f:1e:ef:c6:b0:04:54:a8:86:
c6:58:c9:7d:a2:62:54:70:68:a8:92:54:d7:8c:86:04:63:94:
b9:f4:d7:49:d7:f5:fd:b2:bd:b3:ee:4f:68:f8:03:7d:7b:21:
8e:fa:7f:96:84:f7:3f:9f:e8:d8:43:ed:e3:03:29:36:3e:09:
8c:0c:b9:1b:4e:24:63:96:81:e0:06:f2:ef:46:15:57:b5:c5:
e3:a7:30:30:c4:74:95:07:4b:da:98:3d:f5:82:b7:83:fd:99:
a8:c0:55:0b:86:0c:4c:6c:fa:ca:ca:6f:96:b2:2c:c9:c8:d4:
d1:25:ca:ff:5c:45:97:8f:95:6d:31:68:cf:4b:bd:d1:8c:74:
d5:b5:77:ff:ac:37:a9:dd:fa:c0:8e:2a:2e:de:14:15:f6:88:
ef:9d:0b:1b:f8:74:1c:e3:3b:4d:8f:93:cb:e7:1c:8f:6c:e3:
db:ca:58:fe:d2:c9:00:b0:fa:42:90:4d:4d:a8:ba:3c:7d:a3:
1d:b1:4d:f4:2e:86:5f:5a:7e:3e:1f:1f:0f:6e:19:53:46:90:
57:01:19:9e:b5:c8:9f:e2:f5:ff:b9:4e:39:cf:a1:81:e2:80:
ca:e2:52:b7:d0:a5:0a:7a:42:ec:51:14:fc:7b:53:59:d3:58:
db:0a:17:c2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXG3FpU7VIfRSYoVHQD5lDu83Al0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNjIzMDAwMDAwWhcNMjMwNzI4MjM1OTU5
WjB6MUkwRwYDVQQFE0BjNDY1YTNjYjBhMGE2ZjEwMTZkODA3OTY0OWQwMzM5MDJl
ZDdiMDIyMTY1YTcyNTk5NzE3MTAzNmJiMWE3MmVmMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCbY/b9RcZ2j54TSeBPdu8S1MvElL2r5bv08P+d2725mDaC
0csIAKh9YhDo1+qblcpI6XQTfpHnWniZfBUzm9Sm9Vbh8Q6dXq5EWsnrpGRLmn/P
hv+kqHdcHNrApGdTDU0aE8Gkt+qUoNyOReqk1WhiyYZvDn9gNaimFhgpXteq9pmP
qhv30+HjBvn9cqdDl3B0z1BUpLDtXHD0xPw+fIVpNHLkO9yHBR9lySD8IicsqJFw
Ynvx4Zj5r/rlGmfNfRHSItSHbNerd825WfSGiNhAIJ0/tnoFXiUm+5rUpMmidLpo
LztJX4s2v7c96+cmvuYeCx/2JZSeztZVLxP8PVVxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUvgB6EzH5dFZhXNkPmjl4VmE22lYwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzhiNTE5ZTAwLTQ5YzUtNDgwZS05YjJjLTg0MzBmZGU0NzZkNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAA6nbElQvsrfaQ8e78awBFSohsZY
yX2iYlRwaKiSVNeMhgRjlLn010nX9f2yvbPuT2j4A317IY76f5aE9z+f6NhD7eMD
KTY+CYwMuRtOJGOWgeAG8u9GFVe1xeOnMDDEdJUHS9qYPfWCt4P9majAVQuGDExs
+srKb5ayLMnI1NElyv9cRZePlW0xaM9LvdGMdNW1d/+sN6nd+sCOKi7eFBX2iO+d
Cxv4dBzjO02Pk8vnHI9s49vKWP7SyQCw+kKQTU2oujx9ox2xTfQuhl9afj4fHw9u
GVNGkFcBGZ61yJ/i9f+5TjnPoYHigMriUrfQpQp6QuxRFPx7U1nTWNsKF8I=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:34:59 2025 by rpki-client