Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4009acbd-bdb0-45d7-9a0a-e082c0d8d067.roa
File: 4009acbd-bdb0-45d7-9a0a-e082c0d8d067.roa (raw, json)
Hash identifier: 4OEKXLlrrFq/83l31347QxCI8ykmPZp6sS/ZDRc/hv8=
Subject key identifier: 2A:BE:A1:70:29:D0:B7:75:41:EB:BB:82:7D:C8:60:48:A9:6E:0F:90
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 06F95F36A68CA3732D7EDF71A5057E68C89E27AD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4009acbd-bdb0-45d7-9a0a-e082c0d8d067.roa
Signing time: Sun 17 Dec 2023 00:00:00 +0000
ROA not before: Sun 17 Dec 2023 00:00:00 +0000
ROA not after: Sun 21 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:f9:5f:36:a6:8c:a3:73:2d:7e:df:71:a5:05:7e:68:c8:9e:27:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 17 00:00:00 2023 GMT
Not After : Jan 21 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fa:bd:19:56:c4:90:ad:bc:27:5c:5a:94:63:
8e:e0:ee:d5:35:87:97:78:fc:59:3b:b0:3a:6d:c3:
2d:d6:90:8a:19:8b:e9:c5:54:83:f8:b9:bc:5f:fe:
5d:c6:9d:f7:97:85:5e:41:3d:bf:2c:62:eb:98:24:
58:fe:08:b1:5e:03:16:16:3f:3c:2e:e6:2c:bb:2c:
e7:24:02:bb:a7:16:2d:d7:c7:d1:c2:d9:0d:8a:73:
9a:01:83:f8:1b:c5:3a:de:42:00:d5:6c:cb:88:7c:
44:7f:4b:d2:ff:4b:70:a1:3a:cf:e1:b7:69:6e:48:
ea:ca:96:f4:53:f6:4a:d6:84:6e:38:37:f7:c8:4b:
38:54:a6:f2:c3:5e:3d:72:74:34:23:bf:27:f7:96:
50:82:a0:16:14:96:6a:22:85:0a:c3:ff:8e:fc:4e:
1d:f1:15:03:2c:83:a7:81:19:d5:7c:1d:18:5f:d0:
d8:28:8d:8a:de:7d:3d:c6:8c:c4:36:d1:66:cd:70:
42:d8:05:0b:8b:48:b8:83:11:76:d3:bc:a1:af:a6:
84:5a:46:3b:d0:a9:c7:45:cb:31:d9:d9:a0:83:b6:
47:8e:2a:df:b9:12:bc:68:24:d5:41:9d:6c:36:c6:
28:47:8b:ba:59:de:c4:ae:f4:e5:16:eb:fe:24:aa:
8c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BE:A1:70:29:D0:B7:75:41:EB:BB:82:7D:C8:60:48:A9:6E:0F:90
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4009acbd-bdb0-45d7-9a0a-e082c0d8d067.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:92:36:72:88:f5:d3:fa:db:53:6c:ee:40:b0:9d:5e:1b:47:
ed:16:1e:ac:71:33:40:77:34:71:d1:df:c4:27:b6:c7:47:a6:
06:8b:f8:f2:bd:d1:16:78:85:da:8d:ba:1a:4d:35:0a:5b:45:
e5:07:d1:69:06:50:fc:87:39:4c:ef:65:74:3e:20:5e:66:bc:
2d:91:bb:1f:e3:28:c9:ad:85:da:44:98:96:e5:1f:a0:98:16:
71:82:e2:76:69:04:15:44:04:0d:29:3b:fe:11:81:f8:43:54:
43:3e:26:26:03:46:0c:96:ce:5a:3b:22:2f:8d:6c:e6:3d:5f:
57:20:e8:bd:33:2f:e0:b7:e5:d5:c7:96:29:50:8e:b8:94:e8:
08:28:53:91:40:5b:86:2e:40:57:ad:46:68:64:93:ea:fc:24:
f2:89:6f:99:10:55:05:87:bb:c4:6b:d8:53:56:b7:e5:a0:8e:
2d:98:2e:75:0b:da:64:9b:13:36:bd:48:c2:64:b1:bb:13:19:
87:33:a4:72:8d:38:5f:e0:90:db:d2:51:fc:35:96:3d:21:f2:
e9:03:81:92:f0:7a:f7:54:e1:8a:3e:63:f3:42:55:14:e6:10:
15:34:06:e1:2a:0b:3b:82:14:46:40:5c:b8:7b:ef:6c:4b:29:
48:c8:51:af
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBvlfNqaMo3Mtft9xpQV+aMieJ60wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjE3MDAwMDAwWhcNMjQwMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BlYzljOGU0NzgzYzAyMzU3N2I0MWY3Y2I1NDg3MTg5Nzgz
ZWFjYzdhYzI3M2YyNDRkYTM5NzVmODdiODYwZGVmMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCk+r0ZVsSQrbwnXFqUY47g7tU1h5d4/Fk7sDptwy3WkIoZ
i+nFVIP4ubxf/l3GnfeXhV5BPb8sYuuYJFj+CLFeAxYWPzwu5iy7LOckArunFi3X
x9HC2Q2Kc5oBg/gbxTreQgDVbMuIfER/S9L/S3ChOs/ht2luSOrKlvRT9krWhG44
N/fISzhUpvLDXj1ydDQjvyf3llCCoBYUlmoihQrD/478Th3xFQMsg6eBGdV8HRhf
0NgojYrefT3GjMQ20WbNcELYBQuLSLiDEXbTvKGvpoRaRjvQqcdFyzHZ2aCDtkeO
Kt+5ErxoJNVBnWw2xihHi7pZ3sSu9OUW6/4kqoyvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUKr6hcCnQt3VB67uCfchgSKluD5AwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzQwMDlhY2JkLWJkYjAtNDVkNy05YTBhLWUwODJjMGQ4ZDA2Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAB2SNnKI9dP621Ns7kCwnV4bR+0W
HqxxM0B3NHHR38QntsdHpgaL+PK90RZ4hdqNuhpNNQpbReUH0WkGUPyHOUzvZXQ+
IF5mvC2Rux/jKMmthdpEmJblH6CYFnGC4nZpBBVEBA0pO/4RgfhDVEM+JiYDRgyW
zlo7Ii+NbOY9X1cg6L0zL+C35dXHlilQjriU6AgoU5FAW4YuQFetRmhkk+r8JPKJ
b5kQVQWHu8Rr2FNWt+Wgji2YLnUL2mSbEza9SMJksbsTGYczpHKNOF/gkNvSUfw1
lj0h8ukDgZLwevdU4Yo+Y/NCVRTmEBU0BuEqCzuCFEZAXLh772xLKUjIUa8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:22:32 2025 by rpki-client