Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/576c86aa-2f19-4795-b46a-6fed97a573a3.roa
File: 576c86aa-2f19-4795-b46a-6fed97a573a3.roa (raw, json)
Hash identifier: 0RtKB1E1iyjAqtmkAG1t/TDW7RcdMlKwQv9LZWtk6k8=
Subject key identifier: 59:F1:0D:1C:8D:F8:4A:B2:86:05:72:3B:E7:7B:66:97:FA:90:B2:85
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7365CE6E0F4F7B69D19759DC36588AFBD9B61D1E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/576c86aa-2f19-4795-b46a-6fed97a573a3.roa
Signing time: Fri 23 Jun 2023 00:00:00 +0000
ROA not before: Fri 23 Jun 2023 00:00:00 +0000
ROA not after: Fri 28 Jul 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:65:ce:6e:0f:4f:7b:69:d1:97:59:dc:36:58:8a:fb:d9:b6:1d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 23 00:00:00 2023 GMT
Not After : Jul 28 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:e9:3e:5f:56:bc:cb:22:be:1a:30:95:ba:
eb:f2:62:30:f7:a3:06:2e:3c:7f:c5:20:fc:ec:6a:
58:f2:77:6d:d8:3d:06:65:eb:1f:e2:9e:a1:4a:94:
6b:79:e3:e0:81:21:fc:6c:b5:81:04:a6:25:04:77:
87:4e:64:33:7b:27:bb:de:72:c6:84:59:74:14:76:
12:aa:b5:4f:3e:ee:bb:17:b7:ea:81:59:8c:c9:fa:
06:38:0a:25:a9:21:ea:9b:10:d7:f9:d1:ae:df:d7:
80:d3:32:95:3a:46:d4:99:e2:60:e5:36:2e:5f:f4:
7f:00:98:47:5e:e1:2b:36:0f:a3:c3:24:44:af:59:
63:0a:5b:e7:ca:d5:e7:36:b6:4d:19:4d:d1:62:dd:
f6:a3:f5:ba:9c:40:31:ac:72:fc:e0:9e:c6:fd:bd:
ab:8b:e9:ec:f2:49:76:8c:5e:2e:fa:30:25:2c:88:
f4:71:26:c9:98:ea:c5:36:aa:ff:8c:b4:ea:01:0e:
a7:7b:52:02:ac:58:6c:9a:b8:6e:dc:b9:34:1b:84:
d7:b9:cb:db:0b:ec:99:fb:ec:c1:b3:db:c7:5d:51:
ce:2b:97:42:70:4c:92:20:04:46:8b:1d:1b:e0:48:
4d:8e:cf:8b:4d:f3:f4:f6:47:66:02:f9:bc:e4:9c:
8e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F1:0D:1C:8D:F8:4A:B2:86:05:72:3B:E7:7B:66:97:FA:90:B2:85
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/576c86aa-2f19-4795-b46a-6fed97a573a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
68:d3:34:d0:a0:b9:d1:22:31:e8:0f:4b:90:20:de:79:2d:70:
11:d1:6a:cc:18:41:53:72:39:e5:f4:b6:91:0b:98:08:d5:0f:
30:3a:49:0e:95:bf:ca:14:7a:ee:4e:fc:87:dd:06:eb:58:be:
27:50:21:3a:4b:d6:a7:2b:9f:31:68:ca:38:f7:9c:aa:66:f3:
53:50:62:d2:1a:df:3c:18:f6:03:67:f3:a7:98:69:0c:14:3e:
dc:06:01:8b:7f:2c:07:92:f4:3f:35:d4:4f:ed:b4:a9:a0:4a:
fb:90:dc:50:65:23:9c:63:9c:ce:7e:44:9e:d6:3c:c2:6a:6f:
c8:b6:30:f7:37:38:ce:66:e9:78:48:1f:3c:44:79:81:f1:f5:
59:86:29:9a:46:97:a4:c8:18:fc:60:fc:ba:9f:be:c9:de:44:
eb:5b:cb:73:60:63:e3:cb:98:67:eb:e7:19:fe:26:1e:4b:56:
93:8c:ac:b4:33:c4:25:dd:fd:13:3e:2a:1d:44:ab:69:2d:ef:
30:3a:8d:b1:2a:54:cc:28:ca:1b:76:07:64:e8:c0:2d:b7:34:
47:a9:0a:07:63:16:78:af:3d:c4:8b:0e:a0:5d:2c:ca:d5:47:
78:f0:65:09:53:5b:94:71:f9:c4:5d:70:59:fa:af:49:65:2f:
74:98:0f:eb
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUc2XObg9Pe2nRl1ncNliK+9m2HR4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNjIzMDAwMDAwWhcNMjMwNzI4MjM1OTU5
WjB6MUkwRwYDVQQFE0A3YjgyNzIzMTNkZTg4ZDI0Yzg4ODhmNWIzZTQ5NmE4OWYz
ZjE2NTcwMzMzZDhkMTM0YjhmM2ZlZThkNWMxYWVjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCyFOk+X1a8yyK+GjCVuuvyYjD3owYuPH/FIPzsaljyd23Y
PQZl6x/inqFKlGt54+CBIfxstYEEpiUEd4dOZDN7J7vecsaEWXQUdhKqtU8+7rsX
t+qBWYzJ+gY4CiWpIeqbENf50a7f14DTMpU6RtSZ4mDlNi5f9H8AmEde4Ss2D6PD
JESvWWMKW+fK1ec2tk0ZTdFi3faj9bqcQDGscvzgnsb9vauL6ezySXaMXi76MCUs
iPRxJsmY6sU2qv+MtOoBDqd7UgKsWGyauG7cuTQbhNe5y9sL7Jn77MGz28ddUc4r
l0JwTJIgBEaLHRvgSE2Oz4tN8/T2R2YC+bzknI5BAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUWfENHI34SrKGBXI753tml/qQsoUwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzU3NmM4NmFhLTJmMTktNDc5NS1iNDZhLTZmZWQ5N2E1NzNhMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGjTNNCgudEiMegPS5Ag3nktcBHR
aswYQVNyOeX0tpELmAjVDzA6SQ6Vv8oUeu5O/IfdButYvidQITpL1qcrnzFoyjj3
nKpm81NQYtIa3zwY9gNn86eYaQwUPtwGAYt/LAeS9D811E/ttKmgSvuQ3FBlI5xj
nM5+RJ7WPMJqb8i2MPc3OM5m6XhIHzxEeYHx9VmGKZpGl6TIGPxg/LqfvsneROtb
y3NgY+PLmGfr5xn+Jh5LVpOMrLQzxCXd/RM+Kh1Eq2kt7zA6jbEqVMwoyht2B2To
wC23NEepCgdjFnivPcSLDqBdLMrVR3jwZQlTW5Rx+cRdcFn6r0llL3SYD+s=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:08:34 2025 by rpki-client