Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/11bd533a-6b82-42f4-9ab6-e58d3e89536a.roa
File: 11bd533a-6b82-42f4-9ab6-e58d3e89536a.roa (raw, json)
Hash identifier: RIXWKBMvWDsnoFOBdmzkS9s3D0UZ5y3iY+9h+4DN0vQ=
Subject key identifier: 35:B1:5B:B9:04:8A:79:4C:C8:8F:6C:5E:39:C1:EC:DF:21:4C:B9:13
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7F531ADF51E78D2823394609CDEC26EFBFEFF422
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/11bd533a-6b82-42f4-9ab6-e58d3e89536a.roa
Signing time: Fri 19 Apr 2024 00:00:00 +0000
ROA not before: Fri 19 Apr 2024 00:00:00 +0000
ROA not after: Fri 24 May 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:53:1a:df:51:e7:8d:28:23:39:46:09:cd:ec:26:ef:bf:ef:f4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 19 00:00:00 2024 GMT
Not After : May 24 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ba:3d:f8:65:9d:b4:39:91:65:b1:9a:a3:72:
f4:d7:81:a5:fa:e2:e9:b1:60:42:43:04:51:73:39:
0c:88:9e:15:5a:da:55:49:3b:2f:48:e8:10:64:90:
62:30:c9:83:9a:c4:6c:28:4f:b3:53:c0:33:79:63:
42:6c:8b:a8:b9:c4:ff:66:b4:fd:35:eb:fe:05:0f:
1a:43:33:fc:2e:24:a5:a4:83:cd:b7:b3:df:cf:5a:
aa:c8:0a:02:a5:aa:ad:04:c4:b6:b3:83:fb:6c:c7:
18:cc:35:85:43:23:56:6f:ce:c7:04:3d:c1:f1:94:
b7:48:ae:76:7a:cc:b4:78:06:83:d5:3d:da:e1:1e:
05:57:94:17:bd:a1:4f:94:9d:6d:70:ac:fe:c2:9f:
cc:05:fb:45:b9:12:de:ec:c7:e1:e4:7e:65:a0:8d:
83:df:1d:ac:d4:be:28:b6:9d:83:48:06:ec:5a:67:
1d:6a:a4:07:27:63:3f:26:0e:c2:1c:d9:0e:fa:c0:
0e:d2:fa:19:f1:b8:1e:d8:7a:9b:a8:03:f1:cd:07:
41:68:59:6b:7f:31:6a:67:1d:c6:df:db:b8:60:3e:
82:49:8b:0d:d8:1e:34:ab:35:34:54:c9:f5:eb:b5:
a8:e4:72:a0:dc:83:05:b9:00:70:c0:91:60:1c:a0:
6c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B1:5B:B9:04:8A:79:4C:C8:8F:6C:5E:39:C1:EC:DF:21:4C:B9:13
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/11bd533a-6b82-42f4-9ab6-e58d3e89536a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:9b:83:74:c5:73:90:16:d7:b5:90:a6:39:87:7c:b5:1e:62:
5d:d5:62:25:85:a2:a9:dc:b1:08:ad:41:0a:86:d2:40:1a:5d:
e0:ed:db:30:29:5a:01:78:ce:a8:ed:54:3a:49:cd:61:87:8c:
42:d5:a0:78:10:68:6e:6d:a1:a0:4f:e1:49:3f:3c:04:80:75:
a4:4e:8e:4e:9a:b9:ec:8b:ba:f6:ff:e1:ad:b8:6a:5c:e2:89:
c3:7e:45:23:e4:97:54:d4:b4:54:a9:62:29:90:30:2e:97:a5:
b9:1f:10:99:17:20:d8:50:75:9b:c4:a9:ac:cb:9f:b5:96:e3:
b7:5e:e5:21:ff:53:27:b9:82:92:7e:10:c4:47:bc:90:ee:ae:
6f:18:96:dc:7f:60:93:be:6d:9d:0e:79:26:bd:0c:3d:b5:32:
c4:67:08:e4:a2:d5:ef:c4:2c:b3:6b:7d:60:b5:00:0a:7e:2e:
7b:93:58:2b:e0:06:7e:f0:6f:d4:a7:b6:1c:97:41:f4:b0:86:
a8:8b:78:6d:f3:d7:8b:16:da:e8:c5:ce:03:54:10:f6:84:8c:
85:b8:61:42:74:6d:cb:6f:80:23:c2:e5:6c:d2:6e:ae:65:6e:
7c:09:40:99:2b:bc:48:33:6b:c6:4e:be:47:49:38:12:d6:df:
23:56:fc:65
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUf1Ma31HnjSgjOUYJzewm77/v9CIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNDE5MDAwMDAwWhcNMjQwNTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BiOWJiMTExOGUzN2MzYWU1ODM3YzNhZmM4ZTg4MDI3NzY4
NzMyOGQyNDI1Yzc5OGNmM2EwNzJhNDI5MDIzMDQzMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDEuj34ZZ20OZFlsZqjcvTXgaX64umxYEJDBFFzOQyInhVa
2lVJOy9I6BBkkGIwyYOaxGwoT7NTwDN5Y0Jsi6i5xP9mtP016/4FDxpDM/wuJKWk
g823s9/PWqrICgKlqq0ExLazg/tsxxjMNYVDI1ZvzscEPcHxlLdIrnZ6zLR4BoPV
PdrhHgVXlBe9oU+UnW1wrP7Cn8wF+0W5Et7sx+HkfmWgjYPfHazUvii2nYNIBuxa
Zx1qpAcnYz8mDsIc2Q76wA7S+hnxuB7YepuoA/HNB0FoWWt/MWpnHcbf27hgPoJJ
iw3YHjSrNTRUyfXrtajkcqDcgwW5AHDAkWAcoGwnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUNbFbuQSKeUzIj2xeOcHs3yFMuRMwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzExYmQ1MzNhLTZiODItNDJmNC05YWI2LWU1OGQzZTg5NTM2YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAK2bg3TFc5AW17WQpjmHfLUeYl3V
YiWFoqncsQitQQqG0kAaXeDt2zApWgF4zqjtVDpJzWGHjELVoHgQaG5toaBP4Uk/
PASAdaROjk6aueyLuvb/4a24alziicN+RSPkl1TUtFSpYimQMC6XpbkfEJkXINhQ
dZvEqazLn7WW47de5SH/Uye5gpJ+EMRHvJDurm8Yltx/YJO+bZ0OeSa9DD21MsRn
COSi1e/ELLNrfWC1AAp+LnuTWCvgBn7wb9SnthyXQfSwhqiLeG3z14sW2ujFzgNU
EPaEjIW4YUJ0bctvgCPC5WzSbq5lbnwJQJkrvEgza8ZOvkdJOBLW3yNW/GU=
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:18:58 2025 by rpki-client