Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2fc46642-a71c-40d4-b4db-d0d54728a5b3.roa
File: 2fc46642-a71c-40d4-b4db-d0d54728a5b3.roa (raw, json)
Hash identifier: 95da6FJHtntsj/oA48OxWO8XGXRUFgE0BsQvdmclNB4=
Subject key identifier: 79:F8:F5:58:32:EE:0E:29:C7:34:00:33:FD:28:F0:F3:69:0F:3B:9B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7A9E3254BF260AA87D4ADA125489F63E9E67E2C5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2fc46642-a71c-40d4-b4db-d0d54728a5b3.roa
Signing time: Sun 19 Nov 2023 00:00:00 +0000
ROA not before: Sun 19 Nov 2023 00:00:00 +0000
ROA not after: Sun 24 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:9e:32:54:bf:26:0a:a8:7d:4a:da:12:54:89:f6:3e:9e:67:e2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 19 00:00:00 2023 GMT
Not After : Dec 24 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:fb:85:b1:b8:79:d7:5e:b7:b7:cc:24:ab:
93:2d:f1:9d:04:f6:c6:0f:47:ed:87:ce:35:13:cb:
76:6d:16:3b:6d:65:df:fe:54:44:47:b1:c3:35:5c:
da:f9:f3:1b:73:ca:28:e3:5a:d1:f9:ea:fc:92:af:
ac:dc:c5:66:bf:d8:4f:3a:a3:95:a4:f1:5f:fb:db:
d7:34:66:ea:54:ee:36:cd:f9:a6:a5:4b:19:74:95:
59:e9:3e:8f:2e:64:a7:37:21:5b:e7:81:7f:9b:d7:
ca:de:e7:2a:40:1e:9a:a1:ee:aa:19:68:59:0d:26:
72:ca:a4:f3:cf:38:a0:9a:b5:5c:af:c1:fc:73:41:
c9:fd:81:0d:f0:c3:d9:2c:58:9f:81:9b:8e:6f:62:
f8:4e:79:aa:90:13:d5:a0:10:9d:36:a2:a1:25:20:
d3:50:44:48:3a:7b:84:c7:27:fd:8c:e0:ea:1c:33:
16:b3:a5:d1:15:34:f6:93:89:24:e2:5e:29:ce:b2:
fb:5c:55:da:52:d9:02:68:c6:2f:cf:67:6d:f9:d3:
ac:60:59:d1:d5:b4:b3:68:d0:df:b1:28:8f:76:6c:
35:c4:62:c7:74:37:b5:ed:10:8a:6e:b6:4a:75:82:
7c:ca:97:11:61:c0:db:45:33:b9:0f:07:8a:29:a2:
23:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F8:F5:58:32:EE:0E:29:C7:34:00:33:FD:28:F0:F3:69:0F:3B:9B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2fc46642-a71c-40d4-b4db-d0d54728a5b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:96:4d:1a:cc:15:41:40:20:57:9a:d6:34:d2:12:08:ee:9d:
99:0d:18:14:bb:54:a3:83:fa:1e:3c:55:48:4a:9b:ad:3b:1d:
a7:93:37:f5:c3:e0:d0:6b:d9:98:1d:5f:55:87:ec:31:dd:72:
a0:c7:cc:9c:a4:92:bc:5e:32:81:41:0f:aa:07:7f:7a:9e:8f:
db:07:31:15:b4:ae:96:7d:0c:dd:37:0e:63:26:38:cb:69:58:
7d:72:14:42:cb:75:c8:8f:90:7a:44:52:56:7d:69:be:42:f9:
14:16:40:9a:22:8d:07:ec:a9:a5:ad:8f:fd:40:cd:6e:14:0a:
b0:02:6f:f3:bb:36:9e:ec:36:68:d0:17:72:4d:62:74:59:22:
f1:63:b6:d3:2f:ef:d9:e2:d8:e6:c6:92:9e:82:f4:1d:b3:31:
30:2f:41:bd:15:9f:e6:79:36:38:7e:48:64:e7:b4:d8:77:36:
0f:e0:b4:18:d0:ae:0e:e9:85:75:d3:aa:59:dc:ee:c4:8c:00:
d4:5d:31:96:06:94:fa:a9:31:e5:3f:40:00:db:26:0d:dd:e7:
59:21:3e:db:79:fd:24:1e:33:b8:ca:65:2f:57:44:89:1f:00:
20:8a:f9:06:5f:79:49:20:57:01:0d:6e:db:41:78:30:2d:0e:
ba:b3:55:fa
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUep4yVL8mCqh9StoSVIn2Pp5n4sUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTE5MDAwMDAwWhcNMjMxMjI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A3OTVkNDJlZDE1NWFkYjNjZTBiOTM0MjAwNmY3NDMxNzBh
N2I1ZTQ0ZTJlNzFmMGY3ZDQ1NzA5NTNlMTVmMjJlMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCw6PuFsbh51163t8wkq5Mt8Z0E9sYPR+2HzjUTy3ZtFjtt
Zd/+VERHscM1XNr58xtzyijjWtH56vySr6zcxWa/2E86o5Wk8V/729c0ZupU7jbN
+aalSxl0lVnpPo8uZKc3IVvngX+b18re5ypAHpqh7qoZaFkNJnLKpPPPOKCatVyv
wfxzQcn9gQ3ww9ksWJ+Bm45vYvhOeaqQE9WgEJ02oqElINNQREg6e4THJ/2M4Ooc
MxazpdEVNPaTiSTiXinOsvtcVdpS2QJoxi/PZ23506xgWdHVtLNo0N+xKI92bDXE
Ysd0N7XtEIputkp1gnzKlxFhwNtFM7kPB4opoiNhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUefj1WDLuDinHNAAz/Sjw82kPO5swHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzJmYzQ2NjQyLWE3MWMtNDBkNC1iNGRiLWQwZDU0NzI4YTViMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAH2WTRrMFUFAIFea1jTSEgjunZkN
GBS7VKOD+h48VUhKm607HaeTN/XD4NBr2ZgdX1WH7DHdcqDHzJykkrxeMoFBD6oH
f3qej9sHMRW0rpZ9DN03DmMmOMtpWH1yFELLdciPkHpEUlZ9ab5C+RQWQJoijQfs
qaWtj/1AzW4UCrACb/O7Np7sNmjQF3JNYnRZIvFjttMv79ni2ObGkp6C9B2zMTAv
Qb0Vn+Z5Njh+SGTntNh3Ng/gtBjQrg7phXXTqlnc7sSMANRdMZYGlPqpMeU/QADb
Jg3d51khPtt5/SQeM7jKZS9XRIkfACCK+QZfeUkgVwENbttBeDAtDrqzVfo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:03:00 2025 by rpki-client