Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a6537a11-2cbf-41b8-a0ac-2604616b14c2.roa
File: a6537a11-2cbf-41b8-a0ac-2604616b14c2.roa (raw, json)
Hash identifier: dX/FEQMATaLXy+ZWBvNlbtIGj/90xpmAe0WK1w0OCu0=
Subject key identifier: 1E:5E:D5:85:08:4E:5B:9F:CA:BF:AF:3D:70:2A:61:8B:BE:0F:AB:E6
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 2CCC040EA14686E85D67B56B4DC5FACC5B274D48
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a6537a11-2cbf-41b8-a0ac-2604616b14c2.roa
Signing time: Thu 08 Jun 2023 00:00:00 +0000
ROA not before: Thu 08 Jun 2023 00:00:00 +0000
ROA not after: Sun 11 Jun 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:cc:04:0e:a1:46:86:e8:5d:67:b5:6b:4d:c5:fa:cc:5b:27:4d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jun 8 00:00:00 2023 GMT
Not After : Jun 11 23:59:59 2023 GMT
Subject: serialNumber=7c5a9c0c36ab1e68ff721aaf91afd7b4150c381b25933c19d9bbc27020a3f84d, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:30:60:d3:19:d8:28:85:91:39:43:26:dc:81:
0c:40:cf:b6:a1:54:63:ff:0f:ee:85:c1:c2:47:ea:
a7:7d:41:96:64:f1:4a:92:ef:c6:20:34:de:36:20:
c5:2f:fd:cf:6c:ee:db:1f:3e:a2:5d:6d:8d:5b:bc:
74:be:31:3f:07:47:fa:e3:fb:53:fe:df:b3:33:81:
54:4c:dc:fb:7a:7d:42:cd:8a:d9:24:50:b5:e2:e4:
48:ac:44:5c:3e:05:24:18:80:4e:c5:ea:e9:c7:75:
53:1a:a5:66:a8:69:d2:21:ff:9d:89:29:5a:44:1c:
be:34:a6:7e:b4:25:10:13:a1:51:34:1e:76:8d:c0:
58:41:9c:df:40:d4:62:59:8a:c4:6c:88:d6:79:c6:
57:55:d0:09:66:36:e2:44:04:27:8f:1d:bf:d5:85:
52:73:14:99:f1:be:9d:38:ca:79:20:8a:15:1a:e5:
3a:9a:e2:65:85:c8:6e:1e:b8:57:65:96:92:3b:ea:
61:32:c4:5c:3a:fa:79:09:88:a7:71:ea:00:53:dc:
a6:26:fb:b7:fe:fb:e7:59:63:12:75:56:3d:c9:e9:
dd:3e:20:89:2d:69:f6:48:4c:64:45:04:4d:b8:82:
44:63:2d:31:40:3b:74:9a:96:ed:9f:18:a5:03:96:
e8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5E:D5:85:08:4E:5B:9F:CA:BF:AF:3D:70:2A:61:8B:BE:0F:AB:E6
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a6537a11-2cbf-41b8-a0ac-2604616b14c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:ca:59:b3:21:42:7c:03:7f:62:41:8f:9f:9f:4f:b3:8d:29:
0b:29:ab:b0:20:65:70:8a:ac:b3:14:b0:ad:21:62:0c:c0:c0:
46:ec:07:6d:84:56:a3:94:0f:e8:5d:cc:89:77:aa:9b:b9:59:
9c:1c:94:4e:b9:94:ae:8e:fb:ef:41:ee:0e:68:0c:62:8e:a8:
8f:de:00:f8:9b:13:54:42:20:bc:10:bf:91:3a:df:80:af:b7:
75:26:f2:0b:b3:75:14:23:8e:96:d0:97:81:18:f3:42:e8:37:
db:a5:32:53:ef:ed:be:8e:e8:4c:fc:bf:20:c1:7d:ee:b3:1d:
9f:5d:c4:30:78:87:50:25:9d:aa:47:aa:81:db:a9:8d:d2:c1:
43:02:02:bb:ee:2f:53:25:95:34:f1:8f:4e:09:a0:74:b6:dd:
34:30:99:3c:d5:6d:f2:95:cd:4e:d1:00:22:86:3b:a0:d8:6c:
92:5b:78:75:a5:74:be:10:60:d9:95:2c:f0:d9:52:39:40:c2:
19:70:30:9e:b9:88:39:d6:d3:62:4f:ee:84:ac:db:e9:fd:db:
58:30:68:26:53:cb:fe:15:44:c1:83:ad:88:a4:01:6b:f7:69:
be:9a:a3:e5:30:55:f8:3b:15:70:95:fc:eb:2f:c8:8c:fa:11:
0d:51:5a:64
-----BEGIN CERTIFICATE-----
MIIGBTCCBO2gAwIBAgIULMwEDqFGhuhdZ7VrTcX6zFsnTUgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNjA4MDAwMDAwWhcNMjMwNjExMjM1OTU5
WjB6MUkwRwYDVQQFE0A3YzVhOWMwYzM2YWIxZTY4ZmY3MjFhYWY5MWFmZDdiNDE1
MGMzODFiMjU5MzNjMTlkOWJiYzI3MDIwYTNmODRkMS0wKwYDVQQDEyQ2YWU0ZTU2
Ny02MzQ4LTRjNGYtOThhOC0wNDIyYzRjNTJmZjMwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCuMGDTGdgohZE5QybcgQxAz7ahVGP/D+6FwcJH6qd9QZZk
8UqS78YgNN42IMUv/c9s7tsfPqJdbY1bvHS+MT8HR/rj+1P+37MzgVRM3Pt6fULN
itkkULXi5EisRFw+BSQYgE7F6unHdVMapWaoadIh/52JKVpEHL40pn60JRAToVE0
HnaNwFhBnN9A1GJZisRsiNZ5xldV0AlmNuJEBCePHb/VhVJzFJnxvp04ynkgihUa
5Tqa4mWFyG4euFdllpI76mEyxFw6+nkJiKdx6gBT3KYm+7f+++dZYxJ1Vj3J6d0+
IIktafZITGRFBE24gkRjLTFAO3Salu2fGKUDluh3AgMBAAGjggK+MIICujAdBgNV
HQ4EFgQUHl7VhQhOW5/Kv689cCphi74Pq+YwHwYDVR0jBBgwFoAUkUTtx6QO6ZC3
+jZv9uF9ea3Eg5cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83M2YyMWMyYi04
ODIzLTRjMjQtYjI1Yi00M2M4MGNiNmQxYmIvMjc4YWFiODc4ZjI4MzFiYjE4MjNi
NTg3OTRiMDkyZDg2ZmIxZDdhMGY3NGUyODE2MTEuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjY4YTMyZWUtNDU1ZC00ODNhLTk0M2QtMWE1
YmU3NDhiZmVhL2E2NTM3YTExLTJjYmYtNDFiOC1hMGFjLTI2MDQ2MTZiMTRjMi5y
b2EwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVz
LWVhc3QtMi5hbWF6b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2Et
OTQzZC0xYTViZTc0OGJmZWEvNGJiOGFlNWMtMTI0Yy00MmYzLTg3ZmItNGYzNGU3
NGUzZGEyLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAxyR4MA0GCSqGSIb3DQEBCwUAA4IBAQC4ylmzIUJ8
A39iQY+fn0+zjSkLKauwIGVwiqyzFLCtIWIMwMBG7AdthFajlA/oXcyJd6qbuVmc
HJROuZSujvvvQe4OaAxijqiP3gD4mxNUQiC8EL+ROt+Ar7d1JvILs3UUI46W0JeB
GPNC6DfbpTJT7+2+juhM/L8gwX3usx2fXcQweIdQJZ2qR6qB26mN0sFDAgK77i9T
JZU08Y9OCaB0tt00MJk81W3ylc1O0QAihjug2GySW3h1pXS+EGDZlSzw2VI5QMIZ
cDCeuYg51tNiT+6ErNvp/dtYMGgmU8v+FUTBg62IpAFr92m+mqPlMFX4OxVwlfzr
L8iM+hENUVpk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:55 2024 by rpki-client on console-ams.rpki-client.org