Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/627bd991-a77b-4e57-9d73-60e4a9644ecd.roa
File: 627bd991-a77b-4e57-9d73-60e4a9644ecd.roa (raw, json)
Hash identifier: f8iW1xD8aCUr2cq8WyPRmt1pV50fAYYdiP/0BQ8XkqI=
Subject key identifier: B8:FF:D5:35:7B:70:AD:7F:59:9A:D4:EF:EF:93:BE:61:8A:E9:80:ED
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3F426A07213DB636DC177AB578322A28452EF74E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/627bd991-a77b-4e57-9d73-60e4a9644ecd.roa
Signing time: Wed 22 Nov 2023 00:00:00 +0000
ROA not before: Wed 22 Nov 2023 00:00:00 +0000
ROA not after: Wed 27 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:42:6a:07:21:3d:b6:36:dc:17:7a:b5:78:32:2a:28:45:2e:f7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 22 00:00:00 2023 GMT
Not After : Dec 27 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:03:b6:21:00:af:97:23:22:7f:f5:8e:fb:63:
9c:85:7e:fc:da:4c:d7:43:c9:07:68:01:dd:62:72:
bb:36:3b:c2:06:75:d5:40:db:3b:c1:51:af:05:10:
01:d6:4e:0b:84:83:ed:e8:75:4e:c2:80:57:31:9f:
e5:aa:44:2e:df:c5:a1:a3:d9:17:13:67:50:e2:9e:
40:14:1e:12:d1:6b:18:46:f8:4e:59:9e:76:69:10:
42:a7:42:a3:75:3f:b9:0d:45:7f:de:04:bd:38:a0:
89:5a:d9:53:0d:38:d0:8f:0c:4d:82:80:9c:f1:15:
ba:99:2c:e9:f8:eb:0f:32:9c:df:a2:7e:9f:7a:8d:
08:3f:9c:dc:3d:b0:68:ed:41:16:70:b8:7e:aa:85:
02:89:61:14:2f:40:0f:7e:e6:88:ad:74:4e:be:c6:
6f:f0:85:14:28:66:2e:71:b1:4e:17:6e:be:6c:c8:
37:23:44:84:0e:7c:fc:f2:58:48:08:ba:6a:73:1e:
5c:46:77:23:97:9d:dd:9f:6f:e2:96:a0:da:fb:d5:
18:58:c9:79:b0:03:5c:75:7d:30:32:4c:bf:6c:c8:
77:30:4e:c3:20:ac:ec:fa:65:ca:28:bd:8a:ce:47:
69:12:0e:04:2b:46:f3:95:5b:72:83:bd:51:57:fd:
97:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FF:D5:35:7B:70:AD:7F:59:9A:D4:EF:EF:93:BE:61:8A:E9:80:ED
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/627bd991-a77b-4e57-9d73-60e4a9644ecd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
62:b5:d9:7c:01:93:0e:b6:8b:23:56:04:03:fa:90:d8:63:d4:
7a:5f:0b:f1:4a:d4:3c:08:bc:ff:10:2f:cc:77:d5:fe:98:ff:
ec:84:b9:bd:3d:bf:d5:e8:7e:de:2b:ff:81:d0:37:c9:a5:cf:
e9:e7:f9:b6:78:55:b1:d3:05:b4:c5:d1:e6:99:15:ce:10:26:
b6:f9:66:93:53:d7:16:43:4f:83:9d:b7:43:5e:da:9d:7a:ab:
eb:c1:72:01:73:e0:9d:4c:61:23:a1:52:a6:05:d1:57:45:7c:
54:ea:f2:30:71:7a:43:52:04:fe:14:64:75:41:3f:0f:b7:10:
4f:ec:1c:9a:6e:c6:31:2d:6b:48:eb:32:92:dc:fa:ad:35:c7:
67:f2:6e:a0:e4:d7:c6:43:26:3c:a2:f5:a1:d8:cc:75:57:c3:
10:b2:81:b0:6b:80:15:46:a3:aa:58:62:8b:05:9b:20:3a:77:
99:4a:f0:be:1d:c3:44:a5:df:1c:23:1e:03:48:66:75:54:1f:
21:84:46:05:ab:2e:50:12:98:eb:84:bc:27:b5:43:5f:8c:5c:
d9:86:fd:30:54:fc:c6:87:3d:3e:54:85:fd:8d:17:c2:84:e6:
3b:fb:8c:a8:78:17:02:27:a0:b6:42:96:35:a2:88:ea:53:cd:
fe:4e:67:ed
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUP0JqByE9tjbcF3q1eDIqKEUu904wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTIyMDAwMDAwWhcNMjMxMjI3MjM1OTU5
WjB6MUkwRwYDVQQFE0A3Y2M4MDMwZjNkODZiM2U1MGViYWYxYTI1MjM5OTUzNzBm
YTQ5NThlYTFkMGJiYmM3YzkzYWIxN2Q3YjI3MWMyMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDgA7YhAK+XIyJ/9Y77Y5yFfvzaTNdDyQdoAd1icrs2O8IG
ddVA2zvBUa8FEAHWTguEg+3odU7CgFcxn+WqRC7fxaGj2RcTZ1DinkAUHhLRaxhG
+E5ZnnZpEEKnQqN1P7kNRX/eBL04oIla2VMNONCPDE2CgJzxFbqZLOn46w8ynN+i
fp96jQg/nNw9sGjtQRZwuH6qhQKJYRQvQA9+5oitdE6+xm/whRQoZi5xsU4Xbr5s
yDcjRIQOfPzyWEgIumpzHlxGdyOXnd2fb+KWoNr71RhYyXmwA1x1fTAyTL9syHcw
TsMgrOz6ZcoovYrOR2kSDgQrRvOVW3KDvVFX/ZfVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUuP/VNXtwrX9ZmtTv75O+YYrpgO0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzYyN2JkOTkxLWE3N2ItNGU1Ny05ZDczLTYwZTRhOTY0NGVjZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGK12XwBkw62iyNWBAP6kNhj1Hpf
C/FK1DwIvP8QL8x31f6Y/+yEub09v9Xoft4r/4HQN8mlz+nn+bZ4VbHTBbTF0eaZ
Fc4QJrb5ZpNT1xZDT4Odt0Ne2p16q+vBcgFz4J1MYSOhUqYF0VdFfFTq8jBxekNS
BP4UZHVBPw+3EE/sHJpuxjEta0jrMpLc+q01x2fybqDk18ZDJjyi9aHYzHVXwxCy
gbBrgBVGo6pYYosFmyA6d5lK8L4dw0Sl3xwjHgNIZnVUHyGERgWrLlASmOuEvCe1
Q1+MXNmG/TBU/MaHPT5Uhf2NF8KE5jv7jKh4FwInoLZCljWiiOpTzf5OZ+0=
-----END CERTIFICATE-----
Generated at Wed Apr 9 23:21:49 2025 by rpki-client