Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4229d1c5-fb19-48e7-9b7d-c64bb28679ca.roa
File: 4229d1c5-fb19-48e7-9b7d-c64bb28679ca.roa (raw, json)
Hash identifier: nzwzU2bK+dwEUx8vt7m3gBPiSjslCvdMxgSY4qcqSE4=
Subject key identifier: 80:E8:AB:2F:DD:74:C1:18:09:EF:19:96:F0:A3:AA:1D:B0:55:2A:B5
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6BD105752556657847A44240CA3D0AAB6917AAE2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4229d1c5-fb19-48e7-9b7d-c64bb28679ca.roa
Signing time: Thu 06 Feb 2025 00:00:00 +0000
ROA not before: Thu 06 Feb 2025 00:00:00 +0000
ROA not after: Thu 13 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:d1:05:75:25:56:65:78:47:a4:42:40:ca:3d:0a:ab:69:17:aa:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 6 00:00:00 2025 GMT
Not After : Mar 13 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:07:66:f6:ad:55:28:9c:76:4c:e8:45:02:80:
ce:bf:d1:28:9c:bd:fb:06:03:1f:ff:a2:6b:12:1a:
62:b5:ed:05:c0:3d:51:b5:f3:5f:40:c9:31:47:67:
d8:54:af:c7:f6:9a:6e:34:ec:d9:c1:84:9f:ee:04:
66:3c:46:4f:2c:32:05:ac:78:df:10:b3:eb:4c:6e:
52:45:f7:fd:be:5e:4b:85:03:54:a4:34:48:61:ec:
6e:5f:3a:fd:4c:c4:0d:3c:50:88:5b:5f:9f:1f:f5:
92:9d:46:01:ee:5e:23:5b:18:37:b3:a1:fe:12:dc:
b6:ba:14:49:ba:ea:67:5e:e0:7f:75:d1:fe:be:65:
10:c5:8f:6d:52:cb:81:8b:49:e9:a8:7f:1c:7d:ee:
b3:15:e3:64:b0:29:5e:81:d4:df:e0:a2:7c:11:fe:
2a:cb:30:62:9d:ac:43:3b:63:12:b4:8d:ab:27:4f:
ef:39:58:fc:ae:66:5f:4a:81:38:72:9b:94:31:a1:
2d:84:c6:e6:8a:9d:c7:93:1f:a0:30:84:32:3c:c3:
66:d7:4a:74:76:c9:2a:cd:d4:65:d7:00:a5:0e:e0:
b6:b3:aa:84:34:62:57:21:7b:33:2d:92:6c:2b:da:
39:b4:32:8f:2d:60:ec:f6:a5:96:69:14:c5:53:44:
81:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E8:AB:2F:DD:74:C1:18:09:EF:19:96:F0:A3:AA:1D:B0:55:2A:B5
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4229d1c5-fb19-48e7-9b7d-c64bb28679ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:95:df:28:fe:49:87:23:8f:4b:e5:eb:35:24:e6:0c:50:66:
61:dc:25:32:ce:fa:c6:59:f3:dd:55:18:16:73:1a:06:46:28:
9b:fa:47:4b:be:3a:67:4b:d5:01:cf:4e:6c:09:63:ab:25:81:
bd:98:24:e1:a9:32:d0:29:2e:12:84:5d:5d:68:7f:be:92:66:
e0:d2:13:5a:36:93:0d:91:30:48:3b:33:87:4a:43:4e:5e:7d:
4c:df:92:62:ea:8e:0f:ae:e0:d9:8a:e2:fb:4f:cf:61:b0:dc:
48:ab:85:c7:af:00:be:3a:01:85:1b:e6:23:e5:a2:df:e1:d3:
c2:66:4c:c6:fb:ba:75:6b:a4:65:a9:69:79:aa:a2:58:8c:6c:
f4:3c:4a:ec:8c:2a:4c:30:e3:94:7d:03:e0:cc:52:8f:ac:65:
2b:6e:5f:15:51:f4:e2:2c:1c:82:87:6a:e8:ef:d2:ce:f5:f1:
0b:c3:31:40:48:05:e9:ff:d4:22:17:32:d7:6d:cf:38:06:a5:
52:b8:64:17:28:2c:95:6c:3a:da:16:0d:6d:4c:ad:2f:e4:5f:
30:38:b1:ed:09:12:e0:0c:30:03:22:36:4f:9c:7b:16:ab:db:
bb:9f:bd:bf:4e:fb:d9:14:0b:0b:20:3b:e3:6c:86:b2:57:1b:
7e:23:e5:d8
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUa9EFdSVWZXhHpEJAyj0Kq2kXquIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMjA2MDAwMDAwWhcNMjUwMzEzMjM1OTU5
WjB6MUkwRwYDVQQFE0BkNWUyMmJhMDA4ZmYzM2RkYzNlYmUyMDkxMDllNzA4MzRm
OGJjOTVlODQ2MGI4MGIxOTA4YzJjZTNkOGE2YTA0MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDlB2b2rVUonHZM6EUCgM6/0SicvfsGAx//omsSGmK17QXA
PVG1819AyTFHZ9hUr8f2mm407NnBhJ/uBGY8Rk8sMgWseN8Qs+tMblJF9/2+XkuF
A1SkNEhh7G5fOv1MxA08UIhbX58f9ZKdRgHuXiNbGDezof4S3La6FEm66mde4H91
0f6+ZRDFj21Sy4GLSemofxx97rMV42SwKV6B1N/gonwR/irLMGKdrEM7YxK0jasn
T+85WPyuZl9KgThym5QxoS2ExuaKnceTH6AwhDI8w2bXSnR2ySrN1GXXAKUO4Laz
qoQ0YlchezMtkmwr2jm0Mo8tYOz2pZZpFMVTRIF/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUgOirL910wRgJ7xmW8KOqHbBVKrUwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzQyMjlkMWM1LWZiMTktNDhlNy05YjdkLWM2NGJiMjg2NzljYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAH+V3yj+SYcjj0vl6zUk5gxQZmHc
JTLO+sZZ891VGBZzGgZGKJv6R0u+OmdL1QHPTmwJY6slgb2YJOGpMtApLhKEXV1o
f76SZuDSE1o2kw2RMEg7M4dKQ05efUzfkmLqjg+u4NmK4vtPz2Gw3EirhcevAL46
AYUb5iPlot/h08JmTMb7unVrpGWpaXmqoliMbPQ8SuyMKkww45R9A+DMUo+sZStu
XxVR9OIsHIKHaujv0s718QvDMUBIBen/1CIXMtdtzzgGpVK4ZBcoLJVsOtoWDW1M
rS/kXzA4se0JEuAMMAMiNk+cexar27ufvb9O+9kUCwsgO+NshrJXG34j5dg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:17:01 2025 by rpki-client