Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f94d753-4c8d-47b9-806b-b6e18bddc0f2.roa
File: 7f94d753-4c8d-47b9-806b-b6e18bddc0f2.roa (raw, json)
Hash identifier: +5DW1tsDV4Qgnh1dsEDxJ8Mngc089sS5MHD9KHTnfFw=
Subject key identifier: 34:9A:4A:7B:DC:AE:6A:0C:0E:ED:3B:D4:45:FF:60:45:54:96:CB:A3
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 43D013C980C171A5E612D56A0A423D958644B0ED
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f94d753-4c8d-47b9-806b-b6e18bddc0f2.roa
Signing time: Mon 02 Sep 2024 00:00:00 +0000
ROA not before: Mon 02 Sep 2024 00:00:00 +0000
ROA not after: Mon 07 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:d0:13:c9:80:c1:71:a5:e6:12:d5:6a:0a:42:3d:95:86:44:b0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 2 00:00:00 2024 GMT
Not After : Oct 7 23:59:59 2024 GMT
Subject: serialNumber=3d9c036b77dedc014e76cc167911f12494fdd310db470a090bdf63374b6ddbbd, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:54:bf:78:58:e9:82:8d:5c:1a:f8:9f:64:
5d:3a:19:dd:f9:dd:e3:06:0d:e2:87:21:e6:a5:51:
7d:60:04:85:f4:2d:5c:8d:fc:37:0b:48:c7:f9:07:
db:52:e6:bf:4f:40:d1:98:89:c4:0a:49:04:89:f5:
a4:c8:85:59:01:56:ad:bb:79:3d:8a:51:c2:f6:a0:
4c:47:7b:d6:6f:9c:4f:0d:f0:7d:0d:9c:f5:e9:4a:
d2:d4:31:f6:d3:11:08:ce:93:32:bf:d3:56:eb:c6:
07:d2:39:8d:15:dc:ca:8d:39:27:c0:aa:3c:65:31:
a2:55:76:d1:fa:ee:1c:1b:03:47:8b:6f:e4:fb:31:
0b:9d:18:50:95:67:20:b6:21:79:a3:3b:33:90:97:
79:ed:46:8c:8f:02:04:d7:4e:8b:1f:04:50:3e:b7:
37:30:5d:37:30:0b:97:c9:a4:6d:96:9a:15:e1:75:
ab:45:6e:f8:aa:99:cd:22:49:37:94:a3:ba:0c:6d:
03:34:d6:b4:f5:6e:e6:dc:a2:7e:fe:d9:14:bc:2a:
94:51:35:bf:ab:5f:51:ae:97:ab:34:c5:41:0c:8d:
09:48:7e:e3:a9:9b:f0:eb:ed:ad:32:a7:20:c3:97:
95:9e:94:58:f7:b2:2b:aa:8b:20:7a:bc:53:8a:77:
1c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9A:4A:7B:DC:AE:6A:0C:0E:ED:3B:D4:45:FF:60:45:54:96:CB:A3
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f94d753-4c8d-47b9-806b-b6e18bddc0f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
01:e5:83:1b:30:51:6d:d1:e4:bd:1b:48:3f:34:81:4f:fe:36:
c8:a5:d8:d7:16:95:29:d5:44:cd:8a:e3:48:5d:50:56:cb:69:
bc:bc:07:ac:1e:9f:d9:a0:f4:1a:e3:55:dd:3c:56:ed:fb:65:
ac:1b:88:fa:c4:04:55:55:67:dc:d2:77:b1:de:8c:dc:26:da:
4b:98:8c:af:16:73:df:1d:1c:b6:a9:a7:61:94:ef:6e:f3:c9:
1c:7f:d7:b6:80:c3:39:74:7f:43:fd:89:84:68:aa:0e:ac:9f:
f7:e1:75:e7:27:ac:26:48:2d:f3:89:d3:35:db:ad:e3:2a:b7:
37:7a:35:72:1e:88:98:7b:61:6b:25:6f:4c:6a:15:48:6a:5a:
b6:92:ef:79:b7:86:9e:8f:fa:02:5e:47:67:3e:1a:02:52:5b:
c8:2f:42:fe:59:b8:bf:f2:1e:04:ee:9a:11:9e:8a:78:22:c2:
7e:50:87:f5:5f:85:9d:b9:32:2c:16:9c:d7:0a:08:cb:8a:70:
3f:a5:be:d3:fe:f8:f0:9d:a3:07:29:e3:07:5e:c3:74:77:6f:
4a:48:c4:b6:b5:9f:0f:0e:79:ef:f1:cf:3b:ac:0b:13:d5:3b:
28:57:6f:9b:19:7f:b9:9d:2a:ba:ca:04:cd:90:69:7b:a8:14:
ed:c5:df:6c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQ9ATyYDBcaXmEtVqCkI9lYZEsO0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwOTAyMDAwMDAwWhcNMjQxMDA3MjM1OTU5
WjB6MUkwRwYDVQQFE0AzZDljMDM2Yjc3ZGVkYzAxNGU3NmNjMTY3OTExZjEyNDk0
ZmRkMzEwZGI0NzBhMDkwYmRmNjMzNzRiNmRkYmJkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvJ1S/eFjpgo1cGvifZF06Gd353eMGDeKHIealUX1gBIX0
LVyN/DcLSMf5B9tS5r9PQNGYicQKSQSJ9aTIhVkBVq27eT2KUcL2oExHe9ZvnE8N
8H0NnPXpStLUMfbTEQjOkzK/01brxgfSOY0V3MqNOSfAqjxlMaJVdtH67hwbA0eL
b+T7MQudGFCVZyC2IXmjOzOQl3ntRoyPAgTXTosfBFA+tzcwXTcwC5fJpG2WmhXh
datFbviqmc0iSTeUo7oMbQM01rT1bubcon7+2RS8KpRRNb+rX1Gul6s0xUEMjQlI
fuOpm/Dr7a0ypyDDl5WelFj3siuqiyB6vFOKdxx9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUNJpKe9yuagwO7TvURf9gRVSWy6MwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzdmOTRkNzUzLTRjOGQtNDdiOS04MDZiLWI2ZTE4YmRkYzBmMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAHlgxswUW3R5L0bSD80gU/+Nsil
2NcWlSnVRM2K40hdUFbLaby8B6wen9mg9BrjVd08Vu37ZawbiPrEBFVVZ9zSd7He
jNwm2kuYjK8Wc98dHLapp2GU727zyRx/17aAwzl0f0P9iYRoqg6sn/fhdecnrCZI
LfOJ0zXbreMqtzd6NXIeiJh7YWslb0xqFUhqWraS73m3hp6P+gJeR2c+GgJSW8gv
Qv5ZuL/yHgTumhGeingiwn5Qh/VfhZ25MiwWnNcKCMuKcD+lvtP++PCdowcp4wde
w3R3b0pIxLa1nw8Oee/xzzusCxPVOyhXb5sZf7mdKrrKBM2QaXuoFO3F32w=
-----END CERTIFICATE-----
Generated at Wed Sep 11 04:41:39 2024 by rpki-client on console.sobornost.net