Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6c1bc33f-9c3e-497b-8771-c106c7838032.roa
File: 6c1bc33f-9c3e-497b-8771-c106c7838032.roa (raw, json)
Hash identifier: bNhkqnnVvuYYaSIYX/zT6v19TaCJor0bzNS+htWCsAk=
Subject key identifier: 34:85:FA:42:94:BC:E3:A3:4C:88:51:EF:6E:93:D7:B9:87:09:FF:63
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 38E3C708F7B18BA39E2E5B9A710FCCB917FE94E0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6c1bc33f-9c3e-497b-8771-c106c7838032.roa
Signing time: Sat 08 Mar 2025 15:33:22 +0000
ROA not before: Sat 08 Mar 2025 15:33:22 +0000
ROA not after: Sat 12 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:e3:c7:08:f7:b1:8b:a3:9e:2e:5b:9a:71:0f:cc:b9:17:fe:94:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 8 15:33:22 2025 GMT
Not After : Apr 12 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9a:47:a9:0e:97:e3:c8:1a:86:5f:5a:45:43:
13:7e:63:cf:6e:79:ad:40:a6:34:19:74:5a:0c:96:
4c:b4:2a:24:8b:32:a5:9c:69:e7:f6:be:58:8c:78:
da:3a:dc:e0:d5:40:1f:5e:4a:8a:db:c5:13:8c:d3:
76:69:a1:9d:ef:17:81:ae:cd:08:83:b7:05:f0:cc:
d2:fa:a1:7e:47:5e:6e:46:c3:f4:eb:2f:8c:5d:f0:
22:d6:3b:b5:0d:50:a3:d6:3c:aa:98:54:a2:ea:71:
de:5d:69:98:05:82:1d:26:c5:aa:a0:48:bf:59:34:
f6:3d:ed:18:8a:21:54:05:01:98:39:ed:85:ed:1f:
e4:fe:81:91:28:28:3d:ab:5e:b9:39:f7:49:ce:93:
d1:ea:c2:8c:76:9d:23:be:2c:db:e8:6e:bd:dd:d5:
3b:80:de:26:02:fe:96:98:42:88:a7:21:f6:f3:89:
7a:6d:3b:7d:2d:7a:ea:6a:c3:e2:c3:9d:39:63:4d:
6f:d4:53:a1:d4:6d:bb:e0:3c:44:9c:ff:8c:25:00:
dc:ac:85:c7:18:79:83:c7:bc:cd:9b:84:a7:7e:90:
da:8c:16:bf:60:a2:fc:e0:4c:f9:d8:09:70:b3:67:
7e:60:70:b0:cf:2e:1d:25:e1:f8:f3:91:20:51:b8:
7b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:85:FA:42:94:BC:E3:A3:4C:88:51:EF:6E:93:D7:B9:87:09:FF:63
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6c1bc33f-9c3e-497b-8771-c106c7838032.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
38:93:c2:e7:47:13:f6:3f:ab:4d:ca:a0:68:8a:36:ec:02:42:
8c:54:23:ec:c3:79:22:73:d0:2d:91:d9:2a:f2:18:98:3f:8c:
14:d7:9b:37:d4:ae:f5:71:3e:29:5e:7f:85:a9:4e:30:fb:df:
a5:ed:f7:81:56:26:c6:96:b7:0a:77:cc:47:e9:c2:f9:22:a7:
e8:ff:5d:00:04:ac:2a:12:2a:b0:fc:11:8e:6f:e9:16:ff:cc:
6c:c7:91:c8:21:59:6d:f0:48:17:02:2a:07:ef:01:05:67:e2:
bb:22:57:7e:8b:0b:c5:bf:bf:13:12:e7:d5:a3:3e:d4:66:cc:
1c:9a:26:7d:32:3b:76:6d:7a:7c:52:76:50:90:bb:f8:10:f8:
4e:64:e7:5f:e9:78:cf:f4:fb:29:8c:2b:4d:78:32:5a:60:82:
ed:f8:56:01:63:84:3f:c8:25:3b:bf:92:91:0a:23:3f:46:62:
e9:cf:08:72:3c:9f:8f:94:5a:8a:95:e6:89:41:dd:59:55:51:
d0:aa:09:2b:68:14:6d:19:1c:63:9d:d7:1e:73:d0:62:c5:bc:
92:8a:d5:de:5b:e6:44:08:8b:5c:16:35:98:25:34:37:12:95:
55:73:d4:ba:75:c8:67:e6:02:28:e2:27:dc:64:29:42:53:88:
13:46:87:c5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOOPHCPexi6OeLluacQ/MuRf+lOAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMzA4MTUzMzIyWhcNMjUwNDEyMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNDg5NDZlZGZjYTZiZTNiMDJjZGYwOTdhYzI5ODFhZjc5
MWQwZjEyMDE1Nzk5ODVhNzJkZmY4NmU1MWQ5ZmQ3MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6mkepDpfjyBqGX1pFQxN+Y89uea1ApjQZdFoMlky0KiSL
MqWcaef2vliMeNo63ODVQB9eSorbxROM03ZpoZ3vF4GuzQiDtwXwzNL6oX5HXm5G
w/TrL4xd8CLWO7UNUKPWPKqYVKLqcd5daZgFgh0mxaqgSL9ZNPY97RiKIVQFAZg5
7YXtH+T+gZEoKD2rXrk590nOk9Hqwox2nSO+LNvobr3d1TuA3iYC/paYQoinIfbz
iXptO30teupqw+LDnTljTW/UU6HUbbvgPESc/4wlANyshccYeYPHvM2bhKd+kNqM
Fr9govzgTPnYCXCzZ35gcLDPLh0l4fjzkSBRuHtPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUNIX6QpS846NMiFHvbpPXuYcJ/2MwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzZjMWJjMzNmLTljM2UtNDk3Yi04NzcxLWMxMDZjNzgzODAzMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADiTwudHE/Y/q03KoGiKNuwCQoxU
I+zDeSJz0C2R2SryGJg/jBTXmzfUrvVxPilef4WpTjD736Xt94FWJsaWtwp3zEfp
wvkip+j/XQAErCoSKrD8EY5v6Rb/zGzHkcghWW3wSBcCKgfvAQVn4rsiV36LC8W/
vxMS59WjPtRmzByaJn0yO3ZtenxSdlCQu/gQ+E5k51/peM/0+ymMK014Mlpggu34
VgFjhD/IJTu/kpEKIz9GYunPCHI8n4+UWoqV5olB3VlVUdCqCStoFG0ZHGOd1x5z
0GLFvJKK1d5b5kQIi1wWNZglNDcSlVVz1Lp1yGfmAijiJ9xkKUJTiBNGh8U=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:04 2025 by rpki-client