Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/64861621-f20b-446d-b192-f8fa509954a9.roa
File: 64861621-f20b-446d-b192-f8fa509954a9.roa (raw, json)
Hash identifier: EpDMWpUCmYS5EPkBkD8NVwIJewttzii/MAfOW6obTAc=
Subject key identifier: 5E:B5:A9:35:77:1F:81:2D:C9:A8:7F:6F:C0:D0:87:E9:22:72:5C:B8
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1DA268D80D98A2C3FBA490E16E8832253969DE7E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/64861621-f20b-446d-b192-f8fa509954a9.roa
Signing time: Sun 09 Jul 2023 00:00:00 +0000
ROA not before: Sun 09 Jul 2023 00:00:00 +0000
ROA not after: Sun 13 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:a2:68:d8:0d:98:a2:c3:fb:a4:90:e1:6e:88:32:25:39:69:de:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 9 00:00:00 2023 GMT
Not After : Aug 13 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:50:8c:fb:7b:98:b6:ff:fa:72:fb:a0:12:0b:
ef:88:4c:bf:b6:ae:55:75:0b:14:4f:40:9f:0f:28:
9a:8a:58:f8:63:da:32:73:a0:f2:bf:80:4d:2b:87:
07:9c:7e:9a:aa:3f:70:2a:ba:21:a5:7c:be:a3:a8:
db:77:df:f9:0b:b7:f6:ad:e3:a0:6b:f7:d3:1c:3f:
63:f2:ef:5b:5c:f8:d8:89:85:e2:0a:97:e4:22:b8:
d2:da:d8:c4:7b:0e:47:89:9d:d6:93:9a:f7:b6:d7:
fe:b7:72:0a:36:e1:cc:59:6c:c0:23:2d:51:93:a2:
99:5d:b8:c1:7d:14:b1:80:f2:60:3b:65:d9:ab:38:
cf:1c:8a:85:43:44:ed:78:b4:a4:92:2b:ce:8f:5a:
d8:46:26:7f:79:8d:22:fc:cf:cd:84:31:5c:92:66:
56:83:b0:a2:f9:4a:c9:4b:e4:4f:25:af:af:e6:dd:
f2:8b:d5:29:d4:48:54:06:15:d7:4d:07:11:a8:88:
2d:e1:31:60:61:42:b5:75:7f:79:e8:ca:8e:b2:61:
1a:64:4b:fc:85:1e:26:c9:9e:3c:b3:3e:c5:80:19:
e0:00:db:81:79:3e:b5:ba:38:e4:a3:4d:22:53:07:
83:c3:86:72:65:69:ca:02:80:1d:7b:26:6a:ec:3c:
55:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B5:A9:35:77:1F:81:2D:C9:A8:7F:6F:C0:D0:87:E9:22:72:5C:B8
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/64861621-f20b-446d-b192-f8fa509954a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
83:98:dd:c5:e7:07:87:cf:e2:f4:e6:b5:b4:8d:17:4d:fe:e0:
cb:0d:eb:a4:8e:a5:8a:40:b1:d1:d6:c5:27:2a:65:c6:31:74:
17:30:77:bc:c6:b9:18:17:f4:c4:50:b6:7b:e1:b5:73:92:dc:
35:84:b4:7c:96:86:3a:b3:34:2c:6c:7f:6d:80:dd:45:e0:a3:
49:39:97:e4:f7:f3:0c:cb:a2:b0:33:57:f6:f7:8d:a8:9a:2d:
5f:4d:c8:25:2f:a5:d3:60:10:4c:4e:f9:a1:34:bf:d0:36:ce:
d3:26:53:ca:c9:69:d7:a7:7c:1a:ba:27:85:da:6b:be:ff:2c:
d1:73:7f:f9:0c:9a:ee:97:52:70:95:39:0a:0a:48:02:3e:5b:
4b:20:8a:39:41:29:c4:ee:0a:6d:5f:3b:22:64:e6:79:99:53:
b7:ab:87:44:43:f8:37:ae:00:7f:83:80:da:80:af:44:57:96:
0c:cc:a6:7e:6a:7b:90:8a:4b:5c:ca:20:be:34:95:6a:6d:17:
41:e7:be:e4:47:a4:c0:d8:6d:b7:02:ca:34:a0:39:eb:9f:88:
2f:5a:a7:95:2f:2c:1c:2e:fd:5c:5d:d3:8b:0f:b2:f6:bd:0d:
35:8e:31:42:9d:77:4f:bd:d8:6a:fc:f2:73:93:f7:c8:35:1c:
51:8f:a7:32
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHaJo2A2YosP7pJDhbogyJTlp3n4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNzA5MDAwMDAwWhcNMjMwODEzMjM1OTU5
WjB6MUkwRwYDVQQFE0BlOGE5MTg0MDgwMDc2NDM0NGJhYWJkMzU4YTA4YWI3Zjc4
NTlmZTdmMDU3YzY5MmY1ZTI3YzdmYmQ1YzE0MTE3MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCfUIz7e5i2//py+6ASC++ITL+2rlV1CxRPQJ8PKJqKWPhj
2jJzoPK/gE0rhwecfpqqP3AquiGlfL6jqNt33/kLt/at46Br99McP2Py71tc+NiJ
heIKl+QiuNLa2MR7DkeJndaTmve21/63cgo24cxZbMAjLVGToplduMF9FLGA8mA7
ZdmrOM8cioVDRO14tKSSK86PWthGJn95jSL8z82EMVySZlaDsKL5SslL5E8lr6/m
3fKL1SnUSFQGFddNBxGoiC3hMWBhQrV1f3noyo6yYRpkS/yFHibJnjyzPsWAGeAA
24F5PrW6OOSjTSJTB4PDhnJlacoCgB17JmrsPFWlAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUXrWpNXcfgS3JqH9vwNCH6SJyXLgwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzY0ODYxNjIxLWYyMGItNDQ2ZC1iMTkyLWY4ZmE1MDk5NTRhOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIOY3cXnB4fP4vTmtbSNF03+4MsN
66SOpYpAsdHWxScqZcYxdBcwd7zGuRgX9MRQtnvhtXOS3DWEtHyWhjqzNCxsf22A
3UXgo0k5l+T38wzLorAzV/b3jaiaLV9NyCUvpdNgEExO+aE0v9A2ztMmU8rJaden
fBq6J4Xaa77/LNFzf/kMmu6XUnCVOQoKSAI+W0sgijlBKcTuCm1fOyJk5nmZU7er
h0RD+DeuAH+DgNqAr0RXlgzMpn5qe5CKS1zKIL40lWptF0HnvuRHpMDYbbcCyjSg
OeufiC9ap5UvLBwu/Vxd04sPsva9DTWOMUKdd0+92Gr88nOT98g1HFGPpzI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:07:39 2025 by rpki-client