Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d7977199-498f-40be-a6cf-f723198def6e.roa
File: d7977199-498f-40be-a6cf-f723198def6e.roa (raw, json)
Hash identifier: PmGHpdKeccTugA1xSKZ89XsVUDOuT7t+rdnWke+8CfI=
Subject key identifier: B0:1F:33:81:A5:21:71:4B:29:83:3C:D9:09:6E:27:E8:92:66:6D:D1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2324ACBD911DF1A02E78FD0DEC363C05D3192FE5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d7977199-498f-40be-a6cf-f723198def6e.roa
Signing time: Mon 25 Sep 2023 00:00:00 +0000
ROA not before: Mon 25 Sep 2023 00:00:00 +0000
ROA not after: Mon 30 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:24:ac:bd:91:1d:f1:a0:2e:78:fd:0d:ec:36:3c:05:d3:19:2f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 25 00:00:00 2023 GMT
Not After : Oct 30 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fe:cb:78:35:7c:7b:3c:e7:3e:ec:6a:6d:74:
79:b3:b3:7a:e7:41:78:a9:e5:58:1d:ce:43:27:7f:
14:b7:66:40:20:08:4f:d0:de:84:ff:b1:7e:2d:ba:
60:1e:23:e5:55:14:80:96:0e:f1:e7:4b:a8:61:16:
cb:b8:b0:92:61:92:cd:92:3e:ba:2d:c1:23:25:49:
b2:6d:d3:f9:28:8e:91:36:d3:47:01:03:7a:dc:0f:
aa:5e:41:56:1b:57:cf:56:ee:1d:52:ab:42:7d:10:
76:83:6a:a7:16:b4:9e:b6:cf:f6:c4:5e:91:63:99:
74:af:85:4c:07:98:94:31:c0:ee:4a:29:c7:68:2a:
6e:0b:c3:2e:f7:90:42:03:e6:a6:56:e3:b9:12:02:
c3:e3:70:b0:fc:0f:79:c8:89:0a:6b:88:d8:08:55:
fe:93:c5:2b:c7:56:5e:a7:90:04:20:71:4f:8d:74:
b6:fc:11:5f:a4:4d:e1:c2:16:2f:03:46:31:7a:2d:
63:fc:22:5e:fd:e8:71:13:0b:a1:c4:6e:51:d3:67:
8e:82:23:0a:51:13:ab:4d:17:a9:48:bd:a7:90:40:
47:30:e6:b2:7d:7d:c7:95:f3:78:2d:67:39:9f:a0:
2f:e8:58:c1:cd:a4:e8:7e:a5:72:99:d6:18:8c:39:
65:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1F:33:81:A5:21:71:4B:29:83:3C:D9:09:6E:27:E8:92:66:6D:D1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d7977199-498f-40be-a6cf-f723198def6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
21:87:46:b1:31:5d:4c:f9:e9:50:21:42:80:d3:99:4e:1b:af:
8e:76:07:31:ef:98:b1:c2:20:69:52:60:c9:44:15:ea:00:67:
10:52:4a:a5:ce:29:ce:b7:a2:54:0c:b2:69:52:97:aa:28:d3:
a8:15:1a:b2:6e:3b:e2:29:f6:e3:b4:1d:56:b8:0c:20:7c:72:
88:8c:b6:46:49:b1:cb:ab:0c:b8:ce:6f:bc:bf:39:65:c5:24:
87:cf:c7:df:9b:da:33:a9:98:3c:7f:08:3d:a9:4e:71:99:e3:
8d:14:14:2d:bf:97:1e:a0:24:06:72:d9:2c:bd:00:a2:16:bc:
f8:93:79:21:77:77:11:99:7d:4c:0f:79:20:8b:43:9e:65:cd:
95:bf:b6:87:1f:a1:4b:bd:96:32:30:fe:d9:04:8c:6d:89:e8:
94:61:3f:2d:84:4b:b7:3f:ca:b5:20:32:ae:af:d5:f8:71:c9:
c0:35:e9:a0:f1:4a:7a:d3:76:93:2d:e2:9d:30:c7:df:61:71:
15:02:ae:44:55:ca:2a:cb:1c:81:27:92:d3:66:4f:1f:76:c3:
ec:c7:be:02:89:df:01:ee:41:48:02:5a:d9:61:14:33:92:65:
7a:be:9e:a2:d4:68:17:3e:62:ec:3f:32:fb:b9:f3:5f:75:60:
6b:a1:6c:07
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIySsvZEd8aAueP0N7DY8BdMZL+UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwOTI1MDAwMDAwWhcNMjMxMDMwMjM1OTU5
WjB6MUkwRwYDVQQFE0A0ZDdjOTFmNzZhMDhhZTFiNmNhM2UzODgzNWZmNGU5Mzc0
MmRlMzZiZGIwYzM4ZTc3NTRlZTk5OGEwMjRkYWU0MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDX/st4NXx7POc+7GptdHmzs3rnQXip5VgdzkMnfxS3ZkAg
CE/Q3oT/sX4tumAeI+VVFICWDvHnS6hhFsu4sJJhks2SProtwSMlSbJt0/kojpE2
00cBA3rcD6peQVYbV89W7h1Sq0J9EHaDaqcWtJ62z/bEXpFjmXSvhUwHmJQxwO5K
KcdoKm4Lwy73kEID5qZW47kSAsPjcLD8D3nIiQpriNgIVf6TxSvHVl6nkAQgcU+N
dLb8EV+kTeHCFi8DRjF6LWP8Il796HETC6HEblHTZ46CIwpRE6tNF6lIvaeQQEcw
5rJ9fceV83gtZzmfoC/oWMHNpOh+pXKZ1hiMOWVXAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUsB8zgaUhcUspgzzZCW4n6JJmbdEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2Q3OTc3MTk5LTQ5OGYtNDBiZS1hNmNmLWY3MjMxOThkZWY2ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACGHRrExXUz56VAhQoDTmU4br452
BzHvmLHCIGlSYMlEFeoAZxBSSqXOKc63olQMsmlSl6oo06gVGrJuO+Ip9uO0HVa4
DCB8coiMtkZJscurDLjOb7y/OWXFJIfPx9+b2jOpmDx/CD2pTnGZ440UFC2/lx6g
JAZy2Sy9AKIWvPiTeSF3dxGZfUwPeSCLQ55lzZW/tocfoUu9ljIw/tkEjG2J6JRh
Py2ES7c/yrUgMq6v1fhxycA16aDxSnrTdpMt4p0wx99hcRUCrkRVyirLHIEnktNm
Tx92w+zHvgKJ3wHuQUgCWtlhFDOSZXq+nqLUaBc+Yuw/Mvu58191YGuhbAc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:54:12 2025 by rpki-client