Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/294adf50-a20c-40f4-9942-8a30723fb82d.roa
File: 294adf50-a20c-40f4-9942-8a30723fb82d.roa (raw, json)
Hash identifier: h9NXdhA0hQ99rA0ncQoyASB2hJ1BC7XVpnGT4S6mG1o=
Subject key identifier: E6:74:86:CD:0C:C5:E1:37:C3:16:EB:F4:F5:82:26:DE:CA:D8:9F:7F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 71D171284113FD7300E6D6082B48088E5727892C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/294adf50-a20c-40f4-9942-8a30723fb82d.roa
Signing time: Sat 01 Jul 2023 00:00:00 +0000
ROA not before: Sat 01 Jul 2023 00:00:00 +0000
ROA not after: Sat 05 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:d1:71:28:41:13:fd:73:00:e6:d6:08:2b:48:08:8e:57:27:89:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 1 00:00:00 2023 GMT
Not After : Aug 5 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:98:ce:67:a5:b5:05:60:5f:9d:81:97:07:bd:
ce:e3:64:5e:14:8c:9c:fb:40:a8:9c:cb:22:0f:ad:
22:c8:dc:dc:3b:09:24:50:aa:ac:39:1e:a0:ce:78:
33:6e:7d:a7:2c:85:6a:bc:ad:39:f8:de:69:64:06:
49:b7:da:0a:c6:71:dd:07:a9:1e:60:bf:87:a6:e6:
1e:ab:e4:97:a6:1d:b7:e7:57:2f:ca:e8:4d:1a:ce:
40:fd:8a:09:bf:61:cb:ae:2b:ff:30:3e:cd:47:35:
ce:95:91:e1:17:bf:5e:e8:c2:8b:bc:75:02:11:84:
94:80:e1:2b:5b:1f:ee:27:09:7c:52:92:73:8f:b6:
31:3a:14:a7:fd:bd:9d:62:a1:4f:d3:96:85:81:5b:
d2:52:54:35:85:09:10:e7:63:c9:5d:5f:4a:b8:b7:
46:7d:a5:d1:26:aa:04:08:dd:3c:dd:ae:20:64:4f:
c3:37:32:79:f5:e5:06:21:84:15:51:f4:25:aa:81:
22:60:11:20:7a:90:31:ee:13:da:3a:c0:3d:8d:32:
f2:ec:f6:a9:5f:9f:18:56:e5:00:d3:d8:5c:2b:df:
61:60:3a:6c:0d:07:4f:c5:c7:a0:1a:3e:29:75:de:
05:ed:e9:1c:09:74:2e:70:98:7c:c7:fe:5b:c1:97:
8c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:74:86:CD:0C:C5:E1:37:C3:16:EB:F4:F5:82:26:DE:CA:D8:9F:7F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/294adf50-a20c-40f4-9942-8a30723fb82d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a0:76:5b:eb:05:8a:45:ad:99:bc:b0:3d:d5:61:f1:dc:f3:
3d:fb:d0:38:aa:f2:61:71:16:ce:43:1d:80:cd:01:d8:b8:3d:
e4:4b:bc:d2:6b:95:04:00:30:36:e8:3d:fb:6d:5a:28:81:da:
ca:ee:13:ac:1a:2c:4f:1e:0d:a6:b5:ae:fd:fd:63:a3:8d:62:
98:f4:b6:8a:71:5d:86:5b:d4:b5:d3:a8:e8:b0:e0:10:70:7d:
76:0a:19:bb:02:52:81:b2:92:7d:c5:47:fa:05:95:6c:95:f0:
fe:ed:42:63:3b:54:b3:ee:95:bc:93:1a:92:bd:6c:77:59:80:
f3:7c:5a:65:22:5e:97:78:0c:1e:04:80:fc:27:b2:d4:a1:94:
0a:24:e1:a3:d6:28:21:81:42:c3:5c:68:9d:71:29:98:83:1c:
b0:43:72:0f:fc:01:0d:26:d3:c9:b6:27:ae:74:82:17:c5:8c:
3f:0f:45:2c:98:fe:2a:53:1c:e5:69:a8:5d:72:67:cc:a0:b6:
80:81:db:47:05:42:70:0b:9c:68:8c:df:30:64:d5:f6:67:70:
3a:9f:c0:da:36:ed:b2:21:25:5a:3b:6c:c1:c3:bb:ef:24:c2:
d8:fd:6b:a3:b4:17:e1:41:52:bd:6e:a8:15:8e:3e:4e:d0:f9:
88:ee:ee:6a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUcdFxKEET/XMA5tYIK0gIjlcniSwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNzAxMDAwMDAwWhcNMjMwODA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BmNDQ2MDY5ZGEyOTZkMDE4NzlhNmEzMmEyZDJjZjJhNWZi
OWU2ODRlYjZhMGNmYTFkMmE3NDE4MjMxNDEyYjVlMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCWmM5npbUFYF+dgZcHvc7jZF4UjJz7QKicyyIPrSLI3Nw7
CSRQqqw5HqDOeDNufacshWq8rTn43mlkBkm32grGcd0HqR5gv4em5h6r5JemHbfn
Vy/K6E0azkD9igm/YcuuK/8wPs1HNc6VkeEXv17owou8dQIRhJSA4StbH+4nCXxS
knOPtjE6FKf9vZ1ioU/TloWBW9JSVDWFCRDnY8ldX0q4t0Z9pdEmqgQI3TzdriBk
T8M3Mnn15QYhhBVR9CWqgSJgESB6kDHuE9o6wD2NMvLs9qlfnxhW5QDT2Fwr32Fg
OmwNB0/Fx6AaPil13gXt6RwJdC5wmHzH/lvBl4wPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU5nSGzQzF4TfDFuv09YIm3srYn38wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzI5NGFkZjUwLWEyMGMtNDBmNC05OTQyLThhMzA3MjNmYjgyZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGqgdlvrBYpFrZm8sD3VYfHc8z37
0Diq8mFxFs5DHYDNAdi4PeRLvNJrlQQAMDboPfttWiiB2sruE6waLE8eDaa1rv39
Y6ONYpj0topxXYZb1LXTqOiw4BBwfXYKGbsCUoGykn3FR/oFlWyV8P7tQmM7VLPu
lbyTGpK9bHdZgPN8WmUiXpd4DB4EgPwnstShlAok4aPWKCGBQsNcaJ1xKZiDHLBD
cg/8AQ0m08m2J650ghfFjD8PRSyY/ipTHOVpqF1yZ8ygtoCB20cFQnALnGiM3zBk
1fZncDqfwNo27bIhJVo7bMHDu+8kwtj9a6O0F+FBUr1uqBWOPk7Q+Yju7mo=
-----END CERTIFICATE-----
Generated at Wed Apr 9 08:09:49 2025 by rpki-client