Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e2d99f9d-39ed-470d-b4a6-47dcf1acb541.roa
File: e2d99f9d-39ed-470d-b4a6-47dcf1acb541.roa (raw, json)
Hash identifier: s8roDq4hdDgWbUyJUFlBqkjL+jxPkwJN8KwLsXY3uYc=
Subject key identifier: 89:4A:E8:54:20:D4:82:85:E9:F6:49:03:CF:29:A8:76:F8:CB:22:8D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2D82DF2D57E816CFB0169C31012AD5AAC0C83E78
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e2d99f9d-39ed-470d-b4a6-47dcf1acb541.roa
Signing time: Thu 14 Dec 2023 00:00:00 +0000
ROA not before: Thu 14 Dec 2023 00:00:00 +0000
ROA not after: Thu 18 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:82:df:2d:57:e8:16:cf:b0:16:9c:31:01:2a:d5:aa:c0:c8:3e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 14 00:00:00 2023 GMT
Not After : Jan 18 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:b8:75:70:43:19:94:dd:db:cd:d5:01:43:
71:f8:80:e3:76:4a:32:70:7f:c2:68:a4:25:d4:37:
55:41:67:0c:06:84:6b:e4:a6:69:84:d5:9e:84:61:
b5:59:b7:c0:cc:a3:58:f8:23:e8:de:a6:f5:f9:5d:
38:43:9c:7f:ad:a2:63:3f:57:fe:b6:f1:33:19:83:
65:9c:24:05:03:08:57:45:65:6d:55:f4:47:d4:f4:
9b:49:e1:d1:b6:84:f1:06:04:4b:56:e0:18:d0:ab:
a9:f0:bc:a2:ce:58:ad:f6:da:88:b1:d5:ec:c4:7e:
f9:86:ea:eb:b6:1e:d8:da:07:83:9a:06:f2:d9:ec:
b4:f1:32:14:73:d2:a7:00:54:75:e7:d9:5d:cb:e7:
c5:8a:fe:c2:2a:8c:4b:db:18:cd:cb:bf:5a:e0:3c:
46:73:87:8c:b2:e1:19:16:8e:50:68:1b:7a:dc:88:
76:54:02:e0:9d:ed:f8:d4:f8:b9:06:fa:50:f3:0d:
09:49:92:67:da:bf:47:3f:0a:14:ae:d2:af:e7:8e:
2f:77:70:d0:88:3d:c0:12:e5:01:42:79:60:24:4d:
3b:fc:0f:56:ee:6f:fb:3e:9a:a9:c2:a8:8f:be:57:
2b:10:d6:97:24:1f:d9:c5:70:74:6c:a5:4b:f5:e1:
43:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4A:E8:54:20:D4:82:85:E9:F6:49:03:CF:29:A8:76:F8:CB:22:8D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e2d99f9d-39ed-470d-b4a6-47dcf1acb541.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:92:5d:b7:98:b9:e1:7e:5f:e7:a6:b7:b0:62:18:ef:70:3b:
59:69:c6:a7:7b:0d:27:df:73:5e:50:7f:a7:7d:37:8b:ce:ff:
84:a9:25:e9:0b:a9:7a:b7:cb:1a:14:cd:25:fd:58:4f:ee:33:
da:eb:91:5c:9e:a3:5d:4f:76:84:6d:55:08:17:f7:ad:53:60:
b1:6c:1d:62:5f:3c:bb:5c:f9:1e:00:d9:51:cd:07:3e:f5:a7:
7f:72:6f:62:d2:ac:ff:29:24:9f:a4:ba:ba:d4:87:9b:b7:e8:
e9:96:23:b0:69:8a:76:8e:af:ea:5d:bf:0b:e0:95:79:42:56:
d6:cf:9f:93:d1:85:f3:03:48:79:89:bc:5b:34:0e:5e:48:73:
df:07:54:d5:0e:4c:67:86:73:8a:2d:15:29:dc:f9:01:5b:2b:
38:d7:d7:ff:33:9d:a3:20:01:79:3f:55:83:8f:43:65:9f:43:
65:da:6f:1d:78:cd:10:52:d8:94:74:77:c9:6a:b6:ca:a8:24:
74:8e:f4:36:3c:f6:bb:2b:51:c4:e5:0a:6b:b7:a4:de:d5:aa:
88:54:f8:cf:93:f0:f6:1a:f0:97:8b:64:6a:27:36:af:00:b0:
9e:36:d2:ea:51:78:dd:4c:41:72:1f:46:e7:6a:00:8a:ee:1f:
90:4f:f1:7a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULYLfLVfoFs+wFpwxASrVqsDIPngwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjE0MDAwMDAwWhcNMjQwMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AxZGZhYWIyNTg2MzRiNzRkNGFjZWFkMDE2ZmJlZjJlNWU0
ZGM4MjQ2OGVhOGFlM2RiNTQ4MDQxNTVjN2ExOGU2MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDADLh1cEMZlN3bzdUBQ3H4gON2SjJwf8JopCXUN1VBZwwG
hGvkpmmE1Z6EYbVZt8DMo1j4I+jepvX5XThDnH+tomM/V/628TMZg2WcJAUDCFdF
ZW1V9EfU9JtJ4dG2hPEGBEtW4BjQq6nwvKLOWK322oix1ezEfvmG6uu2HtjaB4Oa
BvLZ7LTxMhRz0qcAVHXn2V3L58WK/sIqjEvbGM3Lv1rgPEZzh4yy4RkWjlBoG3rc
iHZUAuCd7fjU+LkG+lDzDQlJkmfav0c/ChSu0q/nji93cNCIPcAS5QFCeWAkTTv8
D1bub/s+mqnCqI++VysQ1pckH9nFcHRspUv14UNtAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUiUroVCDUgoXp9kkDzymodvjLIo0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2UyZDk5ZjlkLTM5ZWQtNDcwZC1iNGE2LTQ3ZGNmMWFjYjU0MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAK6SXbeYueF+X+emt7BiGO9wO1lp
xqd7DSffc15Qf6d9N4vO/4SpJekLqXq3yxoUzSX9WE/uM9rrkVyeo11PdoRtVQgX
961TYLFsHWJfPLtc+R4A2VHNBz71p39yb2LSrP8pJJ+kurrUh5u36OmWI7BpinaO
r+pdvwvglXlCVtbPn5PRhfMDSHmJvFs0Dl5Ic98HVNUOTGeGc4otFSnc+QFbKzjX
1/8znaMgAXk/VYOPQ2WfQ2Xabx14zRBS2JR0d8lqtsqoJHSO9DY89rsrUcTlCmu3
pN7VqohU+M+T8PYa8JeLZGonNq8AsJ420upReN1MQXIfRudqAIruH5BP8Xo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:42 2025 by rpki-client