Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cc3364cd-0a6a-4b6b-aec1-9a8bc22d6a5a.roa
File: cc3364cd-0a6a-4b6b-aec1-9a8bc22d6a5a.roa (raw, json)
Hash identifier: H42F6+3SkoYm6Db4MItF8MI2cgc6esddbEnf3qv1jRY=
Subject key identifier: 87:48:75:06:60:4B:8E:21:D1:EE:D6:CF:63:41:73:8B:79:32:5D:23
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 67FCEED8E929BF93DA9857D5F9CEBB0036B64AF1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cc3364cd-0a6a-4b6b-aec1-9a8bc22d6a5a.roa
Signing time: Fri 11 Aug 2023 00:00:00 +0000
ROA not before: Fri 11 Aug 2023 00:00:00 +0000
ROA not after: Fri 15 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:fc:ee:d8:e9:29:bf:93:da:98:57:d5:f9:ce:bb:00:36:b6:4a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 11 00:00:00 2023 GMT
Not After : Sep 15 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:fc:2f:34:e2:e5:df:ad:97:29:c4:c2:a2:
c3:75:37:45:87:61:be:28:5a:0e:86:63:4e:61:2d:
ae:25:f6:51:9b:96:e0:cd:fd:17:bb:cf:b3:27:c4:
c6:b2:bb:fb:b9:86:49:82:ff:df:36:8d:4f:a1:09:
25:94:1f:40:a6:a8:b6:95:ec:80:c3:aa:45:80:ee:
57:63:31:d3:d0:a4:5a:ed:8a:75:94:2a:c9:9b:96:
e3:1e:41:f6:85:1e:cc:5b:39:87:90:b7:d7:04:4c:
00:95:56:75:76:92:22:eb:6c:37:e6:5f:0f:95:e4:
fb:3b:1a:d3:a0:2f:fd:1b:72:a3:27:2b:5c:6a:0f:
9d:1d:11:28:ab:cc:1d:f9:76:f4:54:e0:fb:12:be:
62:ec:f7:d4:5d:ba:25:99:bc:fd:22:27:34:f5:f9:
81:7d:ba:63:ce:47:a3:4a:32:f6:30:3a:f2:f1:e1:
a4:b4:a6:ea:d8:ea:e8:94:a1:f9:35:c0:d4:91:b8:
70:db:58:67:4e:e6:d1:f9:65:5d:e8:35:8d:74:74:
06:b1:37:63:3b:21:ba:8f:36:51:d2:0a:4b:20:00:
80:21:55:10:14:43:fa:0b:c9:67:27:22:bf:00:c5:
b5:38:87:68:4b:e2:5b:e1:91:f6:2e:43:36:d0:bf:
5c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:48:75:06:60:4B:8E:21:D1:EE:D6:CF:63:41:73:8B:79:32:5D:23
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cc3364cd-0a6a-4b6b-aec1-9a8bc22d6a5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:4e:c8:1c:ec:a7:dc:b4:c4:40:23:a7:c1:5e:eb:0b:8a:20:
de:5e:48:0d:a9:c3:5b:f8:a9:9a:c0:93:c3:3f:bb:d5:fa:22:
08:54:ba:97:63:95:75:fe:e9:73:eb:1b:74:70:7f:7d:54:1b:
69:6e:80:42:ef:9f:3a:e4:f2:9e:69:e1:45:a5:20:6c:e8:fe:
46:94:30:8e:bf:ff:7b:30:8d:00:4d:0a:fd:03:6a:28:19:b2:
82:82:67:d2:a1:da:ca:0c:7d:a6:23:c8:54:96:88:43:bf:72:
39:d9:5f:7d:52:26:08:9e:d4:66:d0:d9:a2:7a:c9:36:f6:10:
4f:cb:cb:37:e3:20:6c:a6:a9:69:69:bb:20:20:45:c7:ce:dd:
9c:f0:de:3e:8e:10:42:1f:29:96:87:ef:21:d6:22:80:df:c4:
c0:3f:96:63:2d:01:c4:68:ed:d0:8d:2d:8b:a1:d3:ec:fc:e0:
c0:a4:24:61:cb:83:fa:42:a0:0b:57:74:51:07:eb:bf:cd:78:
e8:49:fc:f3:d6:f3:a6:b1:a0:a4:02:e6:b4:28:5a:ac:dc:c5:
12:96:11:62:e9:08:b4:74:b7:dd:6b:e8:29:78:3e:08:52:4a:
42:a2:84:9f:59:b6:b5:bd:73:2c:79:5d:23:51:34:ab:fa:90:
00:c4:f1:55
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZ/zu2Okpv5PamFfV+c67ADa2SvEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwODExMDAwMDAwWhcNMjMwOTE1MjM1OTU5
WjB6MUkwRwYDVQQFE0A3MDdmMTc1NDExMWQwY2MwYjkyMDk1NmFhY2ZiNDEyMDQ0
YTFkZWFkNTViNjhmN2MwZDZhYTdmNjUyMDUyMWJkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6SvwvNOLl362XKcTCosN1N0WHYb4oWg6GY05hLa4l9lGb
luDN/Re7z7MnxMayu/u5hkmC/982jU+hCSWUH0CmqLaV7IDDqkWA7ldjMdPQpFrt
inWUKsmbluMeQfaFHsxbOYeQt9cETACVVnV2kiLrbDfmXw+V5Ps7GtOgL/0bcqMn
K1xqD50dESirzB35dvRU4PsSvmLs99RduiWZvP0iJzT1+YF9umPOR6NKMvYwOvLx
4aS0purY6uiUofk1wNSRuHDbWGdO5tH5ZV3oNY10dAaxN2M7IbqPNlHSCksgAIAh
VRAUQ/oLyWcnIr8AxbU4h2hL4lvhkfYuQzbQv1w7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUh0h1BmBLjiHR7tbPY0Fzi3kyXSMwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2NjMzM2NGNkLTBhNmEtNGI2Yi1hZWMxLTlhOGJjMjJkNmE1YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBALVOyBzsp9y0xEAjp8Fe6wuKIN5e
SA2pw1v4qZrAk8M/u9X6IghUupdjlXX+6XPrG3Rwf31UG2lugELvnzrk8p5p4UWl
IGzo/kaUMI6//3swjQBNCv0DaigZsoKCZ9Kh2soMfaYjyFSWiEO/cjnZX31SJgie
1GbQ2aJ6yTb2EE/LyzfjIGymqWlpuyAgRcfO3Zzw3j6OEEIfKZaH7yHWIoDfxMA/
lmMtAcRo7dCNLYuh0+z84MCkJGHLg/pCoAtXdFEH67/NeOhJ/PPW86axoKQC5rQo
WqzcxRKWEWLpCLR0t91r6Cl4PghSSkKihJ9ZtrW9cyx5XSNRNKv6kADE8VU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:14:30 2025 by rpki-client