Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/50f51739-daf5-445d-a728-4ab219e96f25.roa
File:                     50f51739-daf5-445d-a728-4ab219e96f25.roa (raw, json)
Hash identifier:          6g9xCLgcjDl2dEc8iQLpdGT3HZY+9qKCVPrE8NTsnFM=
Subject key identifier:   6F:27:57:AC:81:D2:AB:31:DC:D8:04:F8:9D:72:99:4B:16:DA:3A:D6
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       61E0A6BAE9BCB68F142E85C2843D2B774BCF292A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/50f51739-daf5-445d-a728-4ab219e96f25.roa
Signing time:             Wed 15 May 2024 00:00:00 +0000
ROA not before:           Wed 15 May 2024 00:00:00 +0000
ROA not after:            Wed 19 Jun 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e0:a6:ba:e9:bc:b6:8f:14:2e:85:c2:84:3d:2b:77:4b:cf:29:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: May 15 00:00:00 2024 GMT
            Not After : Jun 19 23:59:59 2024 GMT
        Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:98:be:85:04:45:59:c5:62:ad:bf:fc:7c:f0:
                    b5:a0:8b:18:4d:8c:e4:3b:d6:db:a7:41:8c:62:fd:
                    a5:79:c3:47:d2:f6:6f:7b:eb:f1:98:06:e8:16:7f:
                    93:25:87:75:22:cc:69:22:30:b6:33:8c:a1:fc:8f:
                    02:be:b4:a1:dd:e8:19:25:17:30:cb:69:51:32:10:
                    96:ba:d8:f2:43:cd:1d:81:d0:a9:c6:63:1c:bc:0a:
                    7b:37:3c:76:58:68:94:e2:2d:89:c1:7b:2f:c4:9a:
                    d7:29:17:e0:97:58:1b:0a:a3:d0:a2:28:a6:0e:e6:
                    4d:9b:aa:9d:91:ca:5e:3f:02:ff:f0:80:88:c3:29:
                    51:66:f7:d7:da:b9:47:53:f6:de:cf:87:e5:79:16:
                    11:77:e2:a6:15:90:5a:b9:80:76:a4:d4:60:c5:af:
                    04:42:ce:04:95:9f:c2:12:01:53:35:d6:e4:3b:ea:
                    d3:70:47:00:e5:cc:1c:c5:7d:d6:2d:b6:8b:28:b2:
                    2b:78:25:66:9a:2b:c0:4f:b9:ba:5f:8f:eb:43:d4:
                    21:d5:5e:51:dd:94:7f:d4:fe:3b:b4:47:86:0d:b5:
                    39:52:06:ce:a9:c3:53:a8:0f:8b:d4:e9:13:77:1c:
                    00:b8:8a:f2:78:3b:c5:16:50:ee:56:2c:88:d5:6f:
                    5f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:27:57:AC:81:D2:AB:31:DC:D8:04:F8:9D:72:99:4B:16:DA:3A:D6
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/50f51739-daf5-445d-a728-4ab219e96f25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:38:fa:af:17:19:4a:bd:bd:a7:bf:2e:3b:d9:14:c4:d1:a1:
         8e:ac:2b:b8:49:e2:52:e2:f9:db:e4:cb:da:2f:c2:8b:df:92:
         2d:69:cf:33:82:bf:cd:e2:c4:2f:19:c5:21:0d:86:82:77:6b:
         1d:65:6e:1a:74:7c:22:69:f3:ab:e6:e3:08:9a:bb:e3:8a:41:
         e7:74:ef:48:9e:9a:3c:91:ba:70:aa:03:6c:d6:f7:b4:e7:5a:
         37:35:dd:09:e2:4e:41:9d:8e:b9:8e:ca:9e:86:d5:20:b6:1f:
         fe:07:59:ab:fc:4e:a7:86:3f:be:06:73:a1:2c:71:fb:fd:98:
         ec:ce:a8:b6:50:56:73:25:a8:1b:f8:67:70:0a:72:8e:e2:4d:
         ac:53:fc:aa:83:c5:b6:82:9e:85:ff:c4:54:57:a2:a6:1f:0c:
         f2:ba:4a:87:90:8a:80:41:0b:25:af:68:81:2e:f4:8f:84:aa:
         49:c0:5f:68:70:ed:fc:01:dd:bf:70:31:07:9d:24:8e:97:ed:
         db:57:2c:84:02:cf:b7:eb:25:18:93:de:d9:4d:f3:b0:9d:b0:
         d7:7f:29:94:a6:8b:86:f9:9d:77:da:a5:2a:d5:3a:7a:e9:d7:
         12:a7:3e:54:b4:46:2c:b4:eb:f5:b6:09:3a:91:0d:42:a6:8b:
         da:86:1c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:25:10 2025 by rpki-client