Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fe4f1210-5b5b-4385-b0b9-ab3a5110c8dc.roa
File: fe4f1210-5b5b-4385-b0b9-ab3a5110c8dc.roa (raw, json)
Hash identifier: MZnyoXhA8UVvFNKwc8xPIRTBnqYMKCVS8zpZZGACnww=
Subject key identifier: 64:68:7E:56:82:8E:BB:5C:AD:86:4F:16:16:65:93:CA:8B:88:BC:D3
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 580313F7A61F8BA3261B0B3E60557968BEA6B0B5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fe4f1210-5b5b-4385-b0b9-ab3a5110c8dc.roa
Signing time: Thu 14 Sep 2023 00:00:00 +0000
ROA not before: Thu 14 Sep 2023 00:00:00 +0000
ROA not after: Thu 19 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:03:13:f7:a6:1f:8b:a3:26:1b:0b:3e:60:55:79:68:be:a6:b0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 14 00:00:00 2023 GMT
Not After : Oct 19 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:ac:c6:64:8b:af:34:ad:05:77:3d:5d:30:
50:4b:3e:0d:73:09:42:08:e5:5a:d8:d2:6a:81:58:
e1:7a:29:af:6a:1d:a6:ca:a5:e7:7d:77:84:2b:50:
b0:f2:3e:25:73:8f:c3:d3:8c:d2:b1:b7:03:ee:d4:
84:54:14:50:3a:6f:98:0d:38:b6:81:4d:bb:0c:5e:
97:96:d3:a4:54:b6:83:03:9b:b1:99:56:5d:14:b3:
57:ab:a8:23:12:08:6a:53:52:95:e9:df:4b:cf:24:
83:b5:28:33:dd:93:bc:2a:b6:63:09:b2:ef:6c:7c:
39:0d:d4:d0:20:8c:e8:9c:16:b5:0a:bc:47:a7:12:
fc:3d:ae:d6:29:ab:ca:79:05:0e:83:63:5e:cc:06:
2a:c9:f3:39:1f:ff:fc:7d:36:17:13:14:2b:fe:e6:
ef:5e:35:92:f4:15:a6:2c:7d:85:db:02:67:de:7b:
14:d7:8c:39:23:fa:5c:cc:c1:d3:25:9a:fa:38:c0:
0f:07:18:99:95:17:81:09:39:84:5e:1b:66:50:f7:
94:06:46:19:de:37:1b:84:c1:5d:09:e8:95:94:d7:
46:ac:de:ac:34:5b:ed:96:ea:af:75:96:3a:35:e5:
95:47:f2:cb:b6:ca:ef:8a:5b:f9:da:3e:8e:4d:fd:
fd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:68:7E:56:82:8E:BB:5C:AD:86:4F:16:16:65:93:CA:8B:88:BC:D3
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fe4f1210-5b5b-4385-b0b9-ab3a5110c8dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
41:c1:16:fd:d3:f4:8c:b8:41:d4:b6:0a:e4:f0:91:76:17:d1:
25:e6:00:a8:3b:5b:1e:32:bb:4d:dc:c0:3d:b9:3c:d9:c7:11:
d8:21:5c:aa:b7:d5:16:78:a8:61:57:ab:b7:6e:f3:96:70:cc:
8d:f2:7c:3a:29:59:7c:7f:e5:5a:72:c1:44:9f:1e:1e:50:56:
37:7f:ca:5a:e1:73:7b:b2:00:6e:b4:1c:9d:a4:8d:61:7b:16:
f8:39:49:53:62:38:7e:46:96:63:3c:72:7b:ab:23:7d:6a:db:
64:bb:ac:6f:df:9d:b9:a9:8f:a9:d7:ff:da:8b:9b:df:0d:8a:
dd:e5:9c:0d:f6:e2:69:38:3e:1d:df:e5:80:de:5e:34:b7:4d:
ec:d4:e1:d5:da:b5:30:1e:24:dd:52:98:10:ec:73:7a:52:61:
7c:05:b8:24:35:23:05:6d:19:30:d3:d6:02:01:16:8d:84:a2:
b6:78:34:70:e3:b8:b7:ae:e9:a1:05:14:77:9e:4d:d9:f5:dd:
a8:2b:fa:88:cf:65:39:f3:d2:2f:c7:2e:7e:07:2a:4c:bc:b7:
ff:73:c8:c9:a1:1a:88:4b:55:cd:c2:67:b1:47:a1:d8:62:5d:
b5:d3:86:85:54:b8:97:26:14:66:ef:4a:1e:f9:b6:8e:d0:40:
ee:1d:c8:61
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWAMT96Yfi6MmGws+YFV5aL6msLUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwOTE0MDAwMDAwWhcNMjMxMDE5MjM1OTU5
WjB6MUkwRwYDVQQFE0BlNTQxMmEwMmFhMDlhMjIwMTJmMGQyMzkyNWU1MmFmZjFk
NTg1YjE0NDU5MDc4YmYzY2IwNzBjODkxYzU1ZGZkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJGKzGZIuvNK0Fdz1dMFBLPg1zCUII5VrY0mqBWOF6Ka9q
HabKped9d4QrULDyPiVzj8PTjNKxtwPu1IRUFFA6b5gNOLaBTbsMXpeW06RUtoMD
m7GZVl0Us1erqCMSCGpTUpXp30vPJIO1KDPdk7wqtmMJsu9sfDkN1NAgjOicFrUK
vEenEvw9rtYpq8p5BQ6DY17MBirJ8zkf//x9NhcTFCv+5u9eNZL0FaYsfYXbAmfe
exTXjDkj+lzMwdMlmvo4wA8HGJmVF4EJOYReG2ZQ95QGRhneNxuEwV0J6JWU10as
3qw0W+2W6q91ljo15ZVH8su2yu+KW/naPo5N/f1pAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZGh+VoKOu1ythk8WFmWTyouIvNMwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2ZlNGYxMjEwLTViNWItNDM4NS1iMGI5LWFiM2E1MTEwYzhkYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEHBFv3T9Iy4QdS2CuTwkXYX0SXm
AKg7Wx4yu03cwD25PNnHEdghXKq31RZ4qGFXq7du85ZwzI3yfDopWXx/5VpywUSf
Hh5QVjd/ylrhc3uyAG60HJ2kjWF7Fvg5SVNiOH5GlmM8cnurI31q22S7rG/fnbmp
j6nX/9qLm98Nit3lnA324mk4Ph3f5YDeXjS3TezU4dXatTAeJN1SmBDsc3pSYXwF
uCQ1IwVtGTDT1gIBFo2EorZ4NHDjuLeu6aEFFHeeTdn13agr+ojPZTnz0i/HLn4H
Kky8t/9zyMmhGohLVc3CZ7FHodhiXbXThoVUuJcmFGbvSh75to7QQO4dyGE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:45:21 2025 by rpki-client