Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/265b0be8-f830-4d12-8e06-351bc08ca34a.roa
File: 265b0be8-f830-4d12-8e06-351bc08ca34a.roa (raw, json)
Hash identifier: 5l3PwfUFHkvJtfbZUDSQ3sRc4szkJAyhWpT5em9lqRk=
Subject key identifier: 79:01:7A:8D:68:BB:D8:05:42:72:0F:86:BA:62:97:FD:26:29:7A:89
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4CEFEDB660A2806A292782FB7F7A02ABC6A67352
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/265b0be8-f830-4d12-8e06-351bc08ca34a.roa
Signing time: Thu 27 Feb 2025 23:03:24 +0000
ROA not before: Thu 27 Feb 2025 23:03:24 +0000
ROA not after: Thu 03 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ef:ed:b6:60:a2:80:6a:29:27:82:fb:7f:7a:02:ab:c6:a6:73:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 27 23:03:24 2025 GMT
Not After : Apr 3 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d9:4a:4c:3e:a4:a3:51:42:08:5b:0b:cd:8d:
52:ad:59:d6:ae:52:b3:34:3e:37:fd:4f:71:c2:9f:
8f:6e:d5:16:5d:ed:bf:3c:5c:58:37:23:bb:a5:b5:
39:7c:3c:25:0d:08:0d:7e:87:ea:a2:b5:2e:45:71:
c7:94:88:f5:5c:e6:dd:ed:78:cd:87:a1:4e:24:66:
b7:ee:c4:2a:60:8c:c2:33:e8:82:a4:2a:86:e7:57:
65:01:18:5e:76:2a:3a:56:3a:2f:d2:5c:98:f5:18:
8a:49:ab:3e:b2:84:07:d5:fa:c9:ea:1a:f1:68:0a:
c8:56:51:9b:39:91:41:b6:5d:01:6b:2c:5d:f7:f7:
32:c8:d0:55:a8:d0:7c:27:db:cd:4e:0d:4e:c8:b4:
28:6f:d7:72:23:5e:33:7b:c4:70:e3:df:e2:98:76:
f9:89:07:72:da:3b:62:38:fb:ea:25:a5:dd:4a:1d:
3d:7f:be:98:9c:99:49:70:e5:8e:4f:8f:51:0d:d1:
79:5e:54:a2:05:23:64:a6:ac:7b:63:b8:b3:50:5a:
1b:1c:7b:41:1d:ea:f0:b6:29:d0:63:5d:56:f1:73:
96:db:a7:84:54:23:43:ac:c5:8d:6f:ae:08:b5:80:
dc:b6:25:f3:f3:a7:8b:bc:8d:85:7f:32:8e:a2:e9:
1a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:01:7A:8D:68:BB:D8:05:42:72:0F:86:BA:62:97:FD:26:29:7A:89
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/265b0be8-f830-4d12-8e06-351bc08ca34a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
47:50:eb:ab:1e:80:c8:d0:59:8f:6b:22:71:8c:d7:d9:68:e7:
35:d0:83:8d:a1:61:5c:3b:8f:e0:c4:59:f8:43:91:45:09:9d:
d6:4f:08:e0:98:0d:c6:80:39:84:80:e8:a8:b9:9f:a9:85:ad:
ab:48:db:6d:28:6f:0b:45:f9:27:a8:07:40:43:c7:b0:e4:ab:
22:fc:b4:f7:a6:a1:b6:e2:fa:4d:ba:1f:30:a4:dd:ea:95:31:
53:67:82:36:b0:37:ae:90:38:83:d0:83:08:58:ae:ca:ce:c4:
c5:9d:c5:97:e9:d1:26:9c:dc:3c:6d:2d:fb:e0:6c:f1:20:1d:
87:34:09:42:96:ec:4e:49:44:07:a2:1b:4a:6c:9b:8c:ba:8c:
4e:2c:09:15:dc:b1:18:88:0f:d3:ee:67:8d:60:e2:f5:35:50:
18:74:bf:b6:da:c4:26:66:af:35:a0:a8:7f:28:32:23:d0:91:
da:8a:ea:80:d1:b9:f5:d6:3a:31:7c:31:b6:20:2f:2f:34:98:
35:c8:b4:e5:7d:9e:84:e6:dd:14:66:07:d4:28:f3:40:be:9c:
54:8d:f6:30:ed:2a:bc:bd:af:8a:b0:05:74:71:03:29:da:6c:
fa:34:8e:c2:b7:f1:81:22:14:0b:e5:3c:48:de:39:d7:9b:26:
fe:87:a3:78
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTO/ttmCigGopJ4L7f3oCq8amc1IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMjI3MjMwMzI0WhcNMjUwNDAzMjM1OTU5
WjB6MUkwRwYDVQQFE0BkYTg5NTg1NzYwNWRlMDUxZDQ3NTkzM2FjYTk2MmFlOTYw
MzI3N2FmYWJhNzk2ZTIyYWQ0NTMwNTdhYTNkNTgxMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDY2UpMPqSjUUIIWwvNjVKtWdauUrM0Pjf9T3HCn49u1RZd
7b88XFg3I7ultTl8PCUNCA1+h+qitS5FcceUiPVc5t3teM2HoU4kZrfuxCpgjMIz
6IKkKobnV2UBGF52KjpWOi/SXJj1GIpJqz6yhAfV+snqGvFoCshWUZs5kUG2XQFr
LF339zLI0FWo0Hwn281ODU7ItChv13IjXjN7xHDj3+KYdvmJB3LaO2I4++olpd1K
HT1/vpicmUlw5Y5Pj1EN0XleVKIFI2SmrHtjuLNQWhsce0Ed6vC2KdBjXVbxc5bb
p4RUI0OsxY1vrgi1gNy2JfPzp4u8jYV/Mo6i6RqBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUeQF6jWi72AVCcg+GumKX/SYpeokwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzI2NWIwYmU4LWY4MzAtNGQxMi04ZTA2LTM1MWJjMDhjYTM0YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEdQ66segMjQWY9rInGM19lo5zXQ
g42hYVw7j+DEWfhDkUUJndZPCOCYDcaAOYSA6Ki5n6mFratI220obwtF+SeoB0BD
x7DkqyL8tPemobbi+k26HzCk3eqVMVNngjawN66QOIPQgwhYrsrOxMWdxZfp0Sac
3DxtLfvgbPEgHYc0CUKW7E5JRAeiG0psm4y6jE4sCRXcsRiID9PuZ41g4vU1UBh0
v7baxCZmrzWgqH8oMiPQkdqK6oDRufXWOjF8MbYgLy80mDXItOV9noTm3RRmB9Qo
80C+nFSN9jDtKry9r4qwBXRxAynabPo0jsK38YEiFAvlPEjeOdebJv6Ho3g=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:52 2025 by rpki-client