Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3d2d2a0a-a10b-4236-8d62-eb99d6af1bdb.roa
File: 3d2d2a0a-a10b-4236-8d62-eb99d6af1bdb.roa (raw, json)
Hash identifier: OEazITLA3BSsZRDMWaKB0ZUSBzxc9By1Wz3FrOKfZoc=
Subject key identifier: C8:02:D1:84:B6:DA:31:CF:AF:58:06:19:E3:4D:58:F5:D8:DE:BC:2A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 31BD746E048FE90C1D20286028387824678FEE34
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3d2d2a0a-a10b-4236-8d62-eb99d6af1bdb.roa
Signing time: Fri 17 Nov 2023 00:00:00 +0000
ROA not before: Fri 17 Nov 2023 00:00:00 +0000
ROA not after: Fri 22 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:bd:74:6e:04:8f:e9:0c:1d:20:28:60:28:38:78:24:67:8f:ee:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 17 00:00:00 2023 GMT
Not After : Dec 22 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:3b:d0:85:57:f6:95:fb:46:29:53:a8:89:
88:45:ea:29:f9:76:70:68:b5:8c:43:9d:d6:9b:91:
8b:4e:74:88:0e:ca:ce:e5:73:29:44:ee:67:8c:13:
04:ec:7d:86:a8:4f:bb:d0:62:82:16:46:14:b7:fb:
84:4a:fa:b0:a5:3f:fe:f8:43:61:58:79:60:66:ba:
a9:28:7e:f3:90:06:29:bc:3c:a4:0e:dc:96:3e:51:
ab:2c:cd:92:30:38:30:1c:ac:44:f0:5d:f6:a7:a5:
b4:b7:26:02:89:51:40:c3:82:e7:28:0f:62:fc:e7:
ab:4e:1a:ba:a9:1f:61:8a:72:53:b9:5c:27:fe:29:
e5:20:9e:b7:3a:b5:c5:88:7b:09:a3:39:6b:44:47:
4d:6b:c2:ff:14:d9:ab:29:6b:ac:cd:4f:ff:c4:7b:
b6:a9:e2:e9:06:22:2d:a3:d8:d4:7d:46:30:19:30:
0c:3a:88:f0:51:c7:74:20:f8:00:13:20:dc:e1:99:
c8:16:c1:00:85:54:e5:f7:21:70:b7:d8:cd:e8:70:
04:3e:52:a1:df:45:64:02:22:95:20:fc:19:7f:d3:
55:64:0e:65:44:e7:0e:6a:0a:18:bd:b2:84:18:7b:
83:ed:c6:fd:c2:d1:53:70:1d:9b:9a:e3:9c:df:b6:
ed:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:02:D1:84:B6:DA:31:CF:AF:58:06:19:E3:4D:58:F5:D8:DE:BC:2A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3d2d2a0a-a10b-4236-8d62-eb99d6af1bdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
35:4e:0f:7e:45:fa:c1:87:0f:c8:54:50:a3:f0:69:e0:73:11:
7f:fb:59:a3:0a:bd:90:38:af:b8:93:63:4c:42:44:2b:bf:f9:
c2:7e:ca:22:45:98:6f:7d:4e:d1:c4:01:80:44:9b:ea:12:09:
d1:92:63:ee:1e:7a:26:96:80:28:b0:1e:e0:c7:fe:42:06:78:
13:ab:8b:aa:3f:fa:24:a8:0a:56:c6:50:68:07:9a:21:f2:c3:
b2:db:19:8f:f2:56:14:54:cb:c0:8e:aa:16:4d:57:52:ae:9b:
33:5e:1c:59:c7:60:64:98:7c:b1:48:3c:66:24:14:d4:07:d7:
b0:09:93:b9:4f:eb:3a:f9:8d:67:dc:de:5a:6b:c1:1c:3c:1f:
00:c5:3e:68:95:98:af:82:66:a6:1d:ad:f0:db:6d:75:fd:22:
eb:5d:c1:36:60:bc:cd:02:71:5b:93:f9:bf:a0:64:79:62:d2:
cc:e4:ab:d6:b9:91:96:3b:c6:9a:91:b4:c6:68:ad:81:69:2f:
f1:64:39:01:a6:f1:ea:a0:55:1e:f0:dd:07:a8:7f:b3:c3:ac:
c0:29:bf:19:5e:5c:aa:f3:02:e0:de:30:92:19:42:1b:b8:ce:
62:6d:79:98:11:01:3e:91:2a:c0:dd:69:0c:0b:9b:d9:5d:76:
fd:e3:40:00
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUMb10bgSP6QwdIChgKDh4JGeP7jQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTE3MDAwMDAwWhcNMjMxMjIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BlZTYxYTVkMTkxMGIyNjQ4Y2VmOTc0NDllMjZkZDU1YzYz
ZWY4NDdiZWVlYzllNjc0NWE0YzE5ZTE3ZTdkMzE1MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCucTvQhVf2lftGKVOoiYhF6in5dnBotYxDndabkYtOdIgO
ys7lcylE7meMEwTsfYaoT7vQYoIWRhS3+4RK+rClP/74Q2FYeWBmuqkofvOQBim8
PKQO3JY+UasszZIwODAcrETwXfanpbS3JgKJUUDDgucoD2L856tOGrqpH2GKclO5
XCf+KeUgnrc6tcWIewmjOWtER01rwv8U2aspa6zNT//Ee7ap4ukGIi2j2NR9RjAZ
MAw6iPBRx3Qg+AATINzhmcgWwQCFVOX3IXC32M3ocAQ+UqHfRWQCIpUg/Bl/01Vk
DmVE5w5qChi9soQYe4Ptxv3C0VNwHZua45zftu3tAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUyALRhLbaMc+vWAYZ401Y9djevCowHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzNkMmQyYTBhLWExMGItNDIzNi04ZDYyLWViOTlkNmFmMWJkYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADVOD35F+sGHD8hUUKPwaeBzEX/7
WaMKvZA4r7iTY0xCRCu/+cJ+yiJFmG99TtHEAYBEm+oSCdGSY+4eeiaWgCiwHuDH
/kIGeBOri6o/+iSoClbGUGgHmiHyw7LbGY/yVhRUy8COqhZNV1KumzNeHFnHYGSY
fLFIPGYkFNQH17AJk7lP6zr5jWfc3lprwRw8HwDFPmiVmK+CZqYdrfDbbXX9Iutd
wTZgvM0CcVuT+b+gZHli0szkq9a5kZY7xpqRtMZorYFpL/FkOQGm8eqgVR7w3Qeo
f7PDrMApvxleXKrzAuDeMJIZQhu4zmJteZgRAT6RKsDdaQwLm9lddv3jQAA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:16:30 2025 by rpki-client