Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d1c3eb29-808b-47ee-80e1-a6903221db6d.roa
File: d1c3eb29-808b-47ee-80e1-a6903221db6d.roa (raw, json)
Hash identifier: bzq8pAklT/ONXIGzB/GMv5LLDVJ8vOqnlGVPbDn0Tsk=
Subject key identifier: 22:E9:A5:19:26:06:F1:9B:E2:D8:4B:2B:AB:8D:00:A3:54:98:03:66
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6E855CCF53D0AE26F187070BB62B15C21C7BDD23
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d1c3eb29-808b-47ee-80e1-a6903221db6d.roa
Signing time: Thu 17 Aug 2023 00:00:00 +0000
ROA not before: Thu 17 Aug 2023 00:00:00 +0000
ROA not after: Thu 21 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:85:5c:cf:53:d0:ae:26:f1:87:07:0b:b6:2b:15:c2:1c:7b:dd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 17 00:00:00 2023 GMT
Not After : Sep 21 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:be:1a:89:05:11:fe:7a:90:a0:68:c4:e0:
0a:2b:04:96:5b:d1:8b:01:4d:7d:4a:2a:f8:95:d9:
f1:f5:e0:7a:fd:90:5c:15:26:6a:9a:71:34:4a:f8:
74:65:4c:f9:f6:00:34:f7:27:31:ca:27:e4:b1:8f:
28:74:6b:2b:64:c4:d8:18:34:38:23:68:5e:d9:94:
40:5c:fa:73:b3:d8:a4:d1:07:25:89:93:f6:8e:e7:
54:ba:e8:99:e7:00:fa:8c:2a:b3:50:e2:92:df:3c:
fe:04:7e:63:6e:71:fd:ad:18:ad:6a:b5:1b:13:e5:
35:7f:73:d8:1c:92:f7:e2:71:67:8f:ff:f7:b6:6c:
f8:0c:61:c2:aa:df:62:07:58:10:72:c4:d7:de:99:
ae:e3:56:b0:2f:1f:bc:a1:be:80:a1:80:f1:76:62:
dd:a3:41:70:ce:1a:2d:48:7f:f4:f5:70:e3:4d:df:
fb:8b:a2:d3:41:7f:92:1a:56:35:53:d9:a3:e4:59:
55:c6:fd:4c:7b:47:53:25:8d:95:f4:24:bd:7e:21:
12:bd:95:12:44:c5:c4:53:d4:ff:b5:34:ad:49:4b:
a4:a8:ea:d2:ad:30:c0:52:2c:d4:03:32:cb:76:40:
a8:e3:a8:16:1a:3f:3b:8f:e3:db:a6:9f:01:5b:29:
e3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E9:A5:19:26:06:F1:9B:E2:D8:4B:2B:AB:8D:00:A3:54:98:03:66
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d1c3eb29-808b-47ee-80e1-a6903221db6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
28:25:a9:2a:ae:d2:04:7f:bc:78:37:7f:4f:47:49:dc:f5:3c:
2d:17:97:2c:98:33:a8:a5:6b:4f:c2:a8:3a:6a:80:c5:25:9f:
f1:f9:eb:ba:51:34:51:60:70:65:96:96:4c:1c:79:1e:cc:43:
09:9b:48:3d:a3:b7:75:ad:b6:59:20:b0:88:cc:d3:a6:8e:f4:
28:a7:13:b7:5f:de:1b:0e:80:20:71:7b:62:b5:8e:d4:ab:43:
17:1d:31:ef:1f:a9:89:9d:09:b7:51:e4:a3:8b:71:97:e1:77:
eb:e5:a6:21:a2:2e:63:c1:3f:c2:eb:a3:ea:f7:52:cb:79:f9:
62:fb:67:1b:91:be:6c:7d:9e:d6:24:90:32:7c:db:ce:82:7c:
e8:de:2f:63:af:b2:53:31:5e:c0:48:75:bb:88:dd:4a:f5:61:
db:ff:0c:68:6b:b6:0a:b6:05:bd:c6:48:ce:ab:20:92:8a:c4:
a9:35:90:b8:dc:3d:8e:f4:f0:7e:f1:4c:5d:df:1c:b8:2f:46:
60:3b:49:28:aa:10:9e:5d:cc:a8:69:e0:fd:47:82:ee:3b:7f:
56:24:5d:86:da:2e:bd:17:e3:e4:13:da:4f:34:6c:39:3d:d5:
9b:6b:92:45:1d:7a:42:25:2e:09:d9:b3:4e:3e:13:6c:93:97:
45:af:5c:79
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUboVcz1PQribxhwcLtisVwhx73SMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwODE3MDAwMDAwWhcNMjMwOTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AyY2NmZjUyMGY5M2YyZWFiNjhlMDgxZmQ1N2Y5MDkzMDM0
ZmZiZmJlYWZkNjUxMDYxZDg4Y2QzYmU0ZDMzZGViMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3qr4aiQUR/nqQoGjE4AorBJZb0YsBTX1KKviV2fH14Hr9
kFwVJmqacTRK+HRlTPn2ADT3JzHKJ+Sxjyh0aytkxNgYNDgjaF7ZlEBc+nOz2KTR
ByWJk/aO51S66JnnAPqMKrNQ4pLfPP4EfmNucf2tGK1qtRsT5TV/c9gckvficWeP
//e2bPgMYcKq32IHWBByxNfema7jVrAvH7yhvoChgPF2Yt2jQXDOGi1If/T1cONN
3/uLotNBf5IaVjVT2aPkWVXG/Ux7R1MljZX0JL1+IRK9lRJExcRT1P+1NK1JS6So
6tKtMMBSLNQDMst2QKjjqBYaPzuP49umnwFbKeMhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUIumlGSYG8Zvi2Esrq40Ao1SYA2YwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2QxYzNlYjI5LTgwOGItNDdlZS04MGUxLWE2OTAzMjIxZGI2ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACglqSqu0gR/vHg3f09HSdz1PC0X
lyyYM6ila0/CqDpqgMUln/H567pRNFFgcGWWlkwceR7MQwmbSD2jt3WttlkgsIjM
06aO9CinE7df3hsOgCBxe2K1jtSrQxcdMe8fqYmdCbdR5KOLcZfhd+vlpiGiLmPB
P8Lro+r3Ust5+WL7ZxuRvmx9ntYkkDJ8286CfOjeL2OvslMxXsBIdbuI3Ur1Ydv/
DGhrtgq2Bb3GSM6rIJKKxKk1kLjcPY708H7xTF3fHLgvRmA7SSiqEJ5dzKhp4P1H
gu47f1YkXYbaLr0X4+QT2k80bDk91ZtrkkUdekIlLgnZs04+E2yTl0WvXHk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:12:12 2025 by rpki-client