Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1cc03f5e-71da-4e95-a149-37af6755fd24.roa
File: 1cc03f5e-71da-4e95-a149-37af6755fd24.roa (raw, json)
Hash identifier: lOAGW/3Qa4JldTgu33ZHvVsXnl3X+7cH339bsBuv2LE=
Subject key identifier: 0D:B8:AF:6C:A9:F8:F0:E1:89:D3:BC:FB:F6:E2:F9:BE:B8:90:6E:62
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 49E7D77049F59F157A2E738AB62D87B4071EB60A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1cc03f5e-71da-4e95-a149-37af6755fd24.roa
Signing time: Fri 25 Oct 2024 00:00:00 +0000
ROA not before: Fri 25 Oct 2024 00:00:00 +0000
ROA not after: Fri 29 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:e7:d7:70:49:f5:9f:15:7a:2e:73:8a:b6:2d:87:b4:07:1e:b6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 25 00:00:00 2024 GMT
Not After : Nov 29 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7e:c4:a4:cb:e1:f6:6c:15:60:e0:11:4c:29:
4d:07:2a:bc:3c:46:b7:41:21:e5:28:54:53:f3:40:
a5:ce:41:0a:f6:41:2e:1f:7f:19:05:ec:61:f8:c4:
0d:4f:93:f7:51:80:47:fa:57:95:4b:27:2e:c5:f0:
73:89:99:c3:7e:64:17:4b:9d:ee:f7:7b:65:5a:97:
65:31:43:b2:f1:64:b8:2e:01:74:fe:7e:87:02:ee:
73:28:8b:53:f6:2f:f1:04:bf:83:4c:86:f3:a6:7e:
d6:82:89:dd:b8:eb:29:15:2e:a6:d0:c2:8d:a7:3c:
aa:cb:9e:9d:d3:63:df:cf:0e:ff:31:53:7c:ee:47:
03:70:fd:f6:9e:68:1f:56:f5:73:7b:14:39:33:48:
32:54:44:88:69:19:d4:f3:63:31:35:a5:af:aa:42:
f4:40:b5:18:3e:f4:1b:5e:41:b8:55:e7:62:47:28:
d1:f2:72:64:05:6f:a1:00:ef:d2:e6:b3:b2:91:a6:
24:e0:a2:0c:c1:5c:d5:c0:8b:8e:43:d9:8d:5f:01:
2a:bd:a2:10:84:f4:3f:cd:ef:b4:77:9e:16:55:05:
49:32:3e:3c:e0:96:41:3c:fc:75:c6:8f:bb:80:91:
8e:01:22:15:ed:55:35:15:07:70:3c:a5:34:90:9d:
2b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B8:AF:6C:A9:F8:F0:E1:89:D3:BC:FB:F6:E2:F9:BE:B8:90:6E:62
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1cc03f5e-71da-4e95-a149-37af6755fd24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:c2:fe:71:17:2c:13:0e:04:92:4b:c3:d6:eb:32:20:14:25:
4e:4c:ea:ba:d8:c8:a1:19:3d:3c:eb:7b:f3:ee:01:7d:f3:6f:
f3:ce:47:af:bd:28:df:4f:5d:1b:87:b0:45:54:fb:17:24:23:
a7:76:f7:c7:02:c7:72:9a:94:5d:25:71:8d:1e:80:d3:9f:4c:
3c:0b:33:eb:85:cc:6f:ef:bd:49:37:a0:49:7e:fa:d5:a8:5f:
de:58:01:16:08:33:37:37:12:28:fa:9d:64:be:4b:f2:1a:ba:
e3:a6:6e:46:c8:f5:9f:af:d9:08:3a:95:d2:a6:09:32:6d:79:
ab:9e:77:20:05:08:50:ba:77:25:d2:74:3b:73:71:ce:51:e8:
2b:36:b3:fa:8f:34:38:fc:58:8b:f4:8e:e4:50:32:a4:02:b8:
99:b5:72:c7:c3:72:23:a5:99:0d:5b:96:57:71:8c:79:65:05:
c8:c3:5b:f8:74:88:09:54:2f:3d:a6:1e:b4:94:34:85:59:20:
1c:33:fa:8c:ce:58:a3:4a:9c:28:16:f9:38:88:80:45:b5:08:
bd:19:c1:11:3a:29:de:aa:66:65:71:fd:af:e7:69:49:88:be:
a5:8c:da:f1:61:ed:39:58:3d:f2:cb:40:b8:f5:f9:46:eb:2c:
90:09:b1:be
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSefXcEn1nxV6LnOKti2HtAcetgowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMDI1MDAwMDAwWhcNMjQxMTI5MjM1OTU5
WjB6MUkwRwYDVQQFE0BiMDdmMzFiMmJjNTc0ZWE0YTNiMzg3YWU0NzdkYjFjNWE4
ZGM5MTU0MzM4NjcxYTBiNWI5N2NmZWE5MDE4NjI2MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDlfsSky+H2bBVg4BFMKU0HKrw8RrdBIeUoVFPzQKXOQQr2
QS4ffxkF7GH4xA1Pk/dRgEf6V5VLJy7F8HOJmcN+ZBdLne73e2Val2UxQ7LxZLgu
AXT+focC7nMoi1P2L/EEv4NMhvOmftaCid246ykVLqbQwo2nPKrLnp3TY9/PDv8x
U3zuRwNw/faeaB9W9XN7FDkzSDJURIhpGdTzYzE1pa+qQvRAtRg+9BteQbhV52JH
KNHycmQFb6EA79Lms7KRpiTgogzBXNXAi45D2Y1fASq9ohCE9D/N77R3nhZVBUky
PjzglkE8/HXGj7uAkY4BIhXtVTUVB3A8pTSQnStnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUDbivbKn48OGJ07z79uL5vriQbmIwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzFjYzAzZjVlLTcxZGEtNGU5NS1hMTQ5LTM3YWY2NzU1ZmQyNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACzC/nEXLBMOBJJLw9brMiAUJU5M
6rrYyKEZPTzre/PuAX3zb/POR6+9KN9PXRuHsEVU+xckI6d298cCx3KalF0lcY0e
gNOfTDwLM+uFzG/vvUk3oEl++tWoX95YARYIMzc3Eij6nWS+S/IauuOmbkbI9Z+v
2Qg6ldKmCTJteauedyAFCFC6dyXSdDtzcc5R6Cs2s/qPNDj8WIv0juRQMqQCuJm1
csfDciOlmQ1blldxjHllBcjDW/h0iAlULz2mHrSUNIVZIBwz+ozOWKNKnCgW+TiI
gEW1CL0ZwRE6Kd6qZmVx/a/naUmIvqWM2vFh7TlYPfLLQLj1+UbrLJAJsb4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:09:10 2025 by rpki-client