Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fd394ec2-7ecb-4611-b66a-374842e232a1.roa
File: fd394ec2-7ecb-4611-b66a-374842e232a1.roa (raw, json)
Hash identifier: EbxWk7ttHz6maOm9eKsStIoCm6RduqZ0YdMtKRTmEco=
Subject key identifier: 7B:D1:4A:CD:C3:68:2D:04:51:00:82:CE:7C:B5:3D:A7:2F:5B:2A:61
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 06F866456F5559172984BDF4FB9503890181CF3B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fd394ec2-7ecb-4611-b66a-374842e232a1.roa
Signing time: Sun 03 Mar 2024 00:00:00 +0000
ROA not before: Sun 03 Mar 2024 00:00:00 +0000
ROA not after: Sun 07 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:f8:66:45:6f:55:59:17:29:84:bd:f4:fb:95:03:89:01:81:cf:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 3 00:00:00 2024 GMT
Not After : Apr 7 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:27:9e:e5:8f:ff:8c:29:0f:41:21:e4:fe:85:
19:fd:57:52:61:4d:72:35:79:ca:7f:45:54:f1:6b:
c4:5b:32:a0:7b:87:b1:8d:45:31:35:2d:7b:2a:5b:
b6:ef:3d:bf:60:ed:30:e0:00:42:f7:94:39:55:68:
5d:1f:af:3b:64:63:22:89:29:f1:85:85:8b:4e:2a:
bd:7c:26:d7:95:78:57:0f:49:97:ff:1d:7f:75:fe:
b0:68:fd:fa:bc:d7:37:e3:c8:e6:47:06:fd:7f:e6:
92:9a:59:d2:b3:20:35:86:79:3a:18:6f:dc:8e:24:
61:3d:73:d4:61:00:bd:fa:cd:4e:04:b4:f6:5a:fd:
e7:26:83:17:01:f1:80:11:21:37:ac:69:94:6a:20:
84:90:e4:87:06:5e:5c:99:3e:be:e4:ef:70:9d:11:
8b:56:ac:e1:a8:0f:27:78:57:82:88:cd:82:06:37:
10:fd:04:6c:45:cd:9f:13:87:5e:c6:6c:7c:77:cc:
08:fd:80:ef:7d:43:7c:ec:f9:0a:b0:b1:dd:75:5c:
db:d9:6b:09:b3:2b:30:84:85:de:c1:4c:5e:3d:bf:
fe:de:66:07:e0:74:87:cb:c2:81:32:52:51:d1:0a:
08:36:ac:04:60:79:66:03:f3:82:b5:b5:92:c2:d4:
fd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D1:4A:CD:C3:68:2D:04:51:00:82:CE:7C:B5:3D:A7:2F:5B:2A:61
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fd394ec2-7ecb-4611-b66a-374842e232a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
66:1f:13:08:39:4f:9a:9d:82:62:c2:4b:b9:17:3b:5e:ee:1c:
53:73:c1:5d:e7:8f:82:ab:b6:d9:7c:f9:c8:59:3c:d1:3c:82:
bf:e9:18:65:7e:f2:b1:ad:50:86:84:80:02:11:50:7d:10:be:
ee:f9:e9:3a:d7:0c:20:51:92:02:6c:55:45:60:89:6f:8c:a4:
eb:c8:40:90:69:cd:52:b1:35:69:23:a2:f0:dc:98:8a:b4:fd:
af:f7:64:37:ec:3b:d5:df:e8:85:70:e7:66:eb:5f:40:1e:a8:
b0:9c:7e:e4:2c:06:4b:9d:41:e7:64:0a:fd:d5:69:22:8e:8a:
b4:d4:58:7c:09:65:de:27:a1:68:06:79:1b:77:21:8f:0d:18:
ca:ea:1a:9d:8d:dd:56:bc:c8:b5:cb:a1:29:ad:0a:ea:70:44:
e6:be:bd:6f:89:29:07:1a:01:e4:c9:90:61:e0:39:cf:d8:bf:
1a:e1:3c:6b:ad:aa:7b:23:b9:08:97:0b:b8:d9:97:fa:98:7c:
a5:66:ab:7f:51:7d:7a:e0:23:88:35:9f:9a:0f:26:97:37:6c:
f6:e9:77:54:e0:6d:5d:7f:07:a3:8f:45:ef:b6:88:03:02:5b:
f1:78:3d:81:88:8b:10:f2:ad:4e:82:d7:96:d0:d1:97:b7:1a:
de:d7:ac:21
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBvhmRW9VWRcphL30+5UDiQGBzzswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwMzAzMDAwMDAwWhcNMjQwNDA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BjNDJlYWU5OTc5YzkyOGM3MzZhZTQ1ZGVkOWIwYzA2ZDIx
MDY2ODM5MzZjNmM1YjhjYTUyNmU3NmFjMTYzYzEyMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDKJ57lj/+MKQ9BIeT+hRn9V1JhTXI1ecp/RVTxa8RbMqB7
h7GNRTE1LXsqW7bvPb9g7TDgAEL3lDlVaF0frztkYyKJKfGFhYtOKr18JteVeFcP
SZf/HX91/rBo/fq81zfjyOZHBv1/5pKaWdKzIDWGeToYb9yOJGE9c9RhAL36zU4E
tPZa/ecmgxcB8YARITesaZRqIISQ5IcGXlyZPr7k73CdEYtWrOGoDyd4V4KIzYIG
NxD9BGxFzZ8Th17GbHx3zAj9gO99Q3zs+Qqwsd11XNvZawmzKzCEhd7BTF49v/7e
ZgfgdIfLwoEyUlHRCgg2rARgeWYD84K1tZLC1P27AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUe9FKzcNoLQRRAILOfLU9py9bKmEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2ZkMzk0ZWMyLTdlY2ItNDYxMS1iNjZhLTM3NDg0MmUyMzJhMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGYfEwg5T5qdgmLCS7kXO17uHFNz
wV3nj4Krttl8+chZPNE8gr/pGGV+8rGtUIaEgAIRUH0Qvu756TrXDCBRkgJsVUVg
iW+MpOvIQJBpzVKxNWkjovDcmIq0/a/3ZDfsO9Xf6IVw52brX0AeqLCcfuQsBkud
QedkCv3VaSKOirTUWHwJZd4noWgGeRt3IY8NGMrqGp2N3Va8yLXLoSmtCupwROa+
vW+JKQcaAeTJkGHgOc/YvxrhPGutqnsjuQiXC7jZl/qYfKVmq39RfXrgI4g1n5oP
Jpc3bPbpd1TgbV1/B6OPRe+2iAMCW/F4PYGIixDyrU6C15bQ0Ze3Gt7XrCE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:32:35 2025 by rpki-client