Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a7b364d6-25ee-4535-8a5c-4763fc61969c.roa
File: a7b364d6-25ee-4535-8a5c-4763fc61969c.roa (raw, json)
Hash identifier: PEKvCVkbKvxCerFlzbEEwDnJJM065u9x9rAa4I27a8c=
Subject key identifier: 16:65:F8:AB:AF:9C:27:D4:E3:89:09:FB:74:E7:80:5D:8A:10:5C:92
Certificate issuer: /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial: 379718C42A26DEA4BCAB0C73291CD09BE972F24A
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a7b364d6-25ee-4535-8a5c-4763fc61969c.roa
Signing time: Fri 09 Jun 2023 00:00:00 +0000
ROA not before: Fri 09 Jun 2023 00:00:00 +0000
ROA not after: Mon 12 Jun 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:97:18:c4:2a:26:de:a4:bc:ab:0c:73:29:1c:d0:9b:e9:72:f2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Validity
Not Before: Jun 9 00:00:00 2023 GMT
Not After : Jun 12 23:59:59 2023 GMT
Subject: serialNumber=0406b390eb3e1f6272aa5aa0089ff23695474f20c79fe542d92c2b99c594fc40, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:76:7b:de:44:8e:0f:b1:16:33:97:c1:86:
a6:a9:73:49:82:89:a7:31:1b:ad:23:79:5f:49:30:
91:da:0f:74:7c:29:46:4c:b8:64:93:b4:ee:a1:5f:
d4:9d:42:7d:1f:6d:60:d9:a5:20:58:63:31:74:a9:
23:d9:31:77:db:c1:5a:09:4f:5d:70:fe:f5:75:ce:
f5:f4:92:e6:29:ed:f0:76:c4:a2:34:3a:01:11:2c:
ed:b5:78:be:da:1a:ec:1b:2b:10:bf:0d:09:82:a3:
36:a9:98:58:f2:0a:12:25:3e:57:3d:a5:42:4e:5d:
a3:fe:aa:37:4b:ed:a1:39:7d:6d:8a:ea:77:74:19:
04:ed:49:7a:26:50:e3:0e:90:94:d9:de:97:fa:5d:
04:1d:1c:d8:77:fd:61:08:20:e6:59:3c:c0:50:97:
03:29:a3:66:25:4f:ad:c5:ff:96:e6:95:3a:15:68:
69:f9:8e:a5:26:5d:ea:17:49:36:97:ee:3b:68:01:
9d:15:e3:fe:16:12:fd:3d:56:71:d8:80:cd:8a:f9:
8c:0e:5d:1d:5b:b6:19:d3:86:43:4e:ea:c3:cf:7f:
c9:26:30:b6:4b:d2:98:0f:91:73:cd:26:3a:fe:ca:
82:5b:15:7b:4c:07:8c:dc:f9:24:ec:0c:55:a4:68:
62:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:65:F8:AB:AF:9C:27:D4:E3:89:09:FB:74:E7:80:5D:8A:10:5C:92
X509v3 Authority Key Identifier:
keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/a7b364d6-25ee-4535-8a5c-4763fc61969c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
27:47:37:42:17:a7:51:0c:35:a5:1d:1f:0e:f5:31:14:32:c0:
ce:b4:56:cb:ac:e3:6e:e6:2f:f8:66:77:bd:c5:a8:e0:5f:0b:
44:31:b6:0e:19:e3:6b:f3:e4:00:01:19:1f:87:5d:5a:c0:03:
28:57:20:03:ef:79:56:5b:3d:45:b7:c3:c3:6d:3d:72:1f:44:
ed:fa:c4:be:05:24:d2:63:8f:2c:ed:d2:1a:26:06:8c:e0:ac:
47:08:75:8d:d0:33:46:ea:38:b6:16:8e:54:06:11:ed:4d:2b:
8a:3f:9c:9c:3a:4f:e1:f4:d9:66:09:81:90:99:dd:4e:82:64:
69:10:cc:2b:96:ed:2e:74:94:eb:4a:f2:4a:00:ab:cd:b3:b3:
1a:60:97:7c:df:4d:41:e5:59:25:c4:3c:31:b7:88:5d:7b:ba:
a9:22:31:0b:b3:63:59:10:b9:05:1b:0b:86:0a:11:33:a4:8b:
65:62:05:5a:ec:41:53:1c:8e:eb:8a:6a:2e:8d:3a:2c:a1:db:
c6:48:58:43:73:62:5b:b6:e7:d1:8e:bd:6d:75:ad:bc:02:97:
36:24:cf:d7:43:38:f9:d4:b3:cf:b8:8f:51:ae:dd:8b:ed:77:
3e:a1:07:cf:ac:86:05:b4:2e:f1:f2:41:ff:2c:18:c3:7c:b5:
5e:68:a4:56
-----BEGIN CERTIFICATE-----
MIIGBTCCBO2gAwIBAgIUN5cYxCom3qS8qwxzKRzQm+ly8kowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNjA5MDAwMDAwWhcNMjMwNjEyMjM1OTU5
WjB6MUkwRwYDVQQFE0AwNDA2YjM5MGViM2UxZjYyNzJhYTVhYTAwODlmZjIzNjk1
NDc0ZjIwYzc5ZmU1NDJkOTJjMmI5OWM1OTRmYzQwMS0wKwYDVQQDEyQ2YWU0ZTU2
Ny02MzQ4LTRjNGYtOThhOC0wNDIyYzRjNTJmZjMwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDG2nZ73kSOD7EWM5fBhqapc0mCiacxG60jeV9JMJHaD3R8
KUZMuGSTtO6hX9SdQn0fbWDZpSBYYzF0qSPZMXfbwVoJT11w/vV1zvX0kuYp7fB2
xKI0OgERLO21eL7aGuwbKxC/DQmCozapmFjyChIlPlc9pUJOXaP+qjdL7aE5fW2K
6nd0GQTtSXomUOMOkJTZ3pf6XQQdHNh3/WEIIOZZPMBQlwMpo2YlT63F/5bmlToV
aGn5jqUmXeoXSTaX7jtoAZ0V4/4WEv09VnHYgM2K+YwOXR1bthnThkNO6sPPf8km
MLZL0pgPkXPNJjr+yoJbFXtMB4zc+STsDFWkaGLrAgMBAAGjggK+MIICujAdBgNV
HQ4EFgQUFmX4q6+cJ9TjiQn7dOeAXYoQXJIwHwYDVR0jBBgwFoAUkUTtx6QO6ZC3
+jZv9uF9ea3Eg5cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83M2YyMWMyYi04
ODIzLTRjMjQtYjI1Yi00M2M4MGNiNmQxYmIvMjc4YWFiODc4ZjI4MzFiYjE4MjNi
NTg3OTRiMDkyZDg2ZmIxZDdhMGY3NGUyODE2MTEuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjY4YTMyZWUtNDU1ZC00ODNhLTk0M2QtMWE1
YmU3NDhiZmVhL2E3YjM2NGQ2LTI1ZWUtNDUzNS04YTVjLTQ3NjNmYzYxOTY5Yy5y
b2EwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVz
LWVhc3QtMi5hbWF6b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2Et
OTQzZC0xYTViZTc0OGJmZWEvNGJiOGFlNWMtMTI0Yy00MmYzLTg3ZmItNGYzNGU3
NGUzZGEyLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAxyR4MA0GCSqGSIb3DQEBCwUAA4IBAQAnRzdCF6dR
DDWlHR8O9TEUMsDOtFbLrONu5i/4Zne9xajgXwtEMbYOGeNr8+QAARkfh11awAMo
VyAD73lWWz1Ft8PDbT1yH0Tt+sS+BSTSY48s7dIaJgaM4KxHCHWN0DNG6ji2Fo5U
BhHtTSuKP5ycOk/h9NlmCYGQmd1OgmRpEMwrlu0udJTrSvJKAKvNs7MaYJd8301B
5VklxDwxt4hde7qpIjELs2NZELkFGwuGChEzpItlYgVa7EFTHI7rimoujTosodvG
SFhDc2JbtufRjr1tda28Apc2JM/XQzj51LPPuI9Rrt2L7Xc+oQfPrIYFtC7x8kH/
LBjDfLVeaKRW
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:47:25 2025 by rpki-client