Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/758e0f5d-e823-4592-b39f-4ae4f9396019.roa
File: 758e0f5d-e823-4592-b39f-4ae4f9396019.roa (raw, json)
Hash identifier: 7LyOUUnuqaLpwNeZe3yD2dr+CDPg2OIZFPhiKahfh04=
Subject key identifier: 7D:64:8C:5D:8C:69:66:9C:B8:04:3F:2A:C3:05:6C:7C:4F:48:8A:EF
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 01032C25571F1039BFA4341CBF2B926DAD612D7B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/758e0f5d-e823-4592-b39f-4ae4f9396019.roa
Signing time: Sun 04 Aug 2024 00:00:00 +0000
ROA not before: Sun 04 Aug 2024 00:00:00 +0000
ROA not after: Sun 08 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:03:2c:25:57:1f:10:39:bf:a4:34:1c:bf:2b:92:6d:ad:61:2d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 4 00:00:00 2024 GMT
Not After : Sep 8 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:00:87:dd:83:c8:5a:9c:5a:e4:67:9a:f2:9b:
9f:41:75:85:74:f1:f0:3e:fb:e8:35:5c:39:a2:4a:
77:dd:6b:e8:ce:47:22:97:5f:10:89:90:aa:da:f8:
9b:10:73:aa:e2:d7:88:4d:51:11:b9:67:43:e1:70:
25:02:c4:df:ff:26:c5:0a:21:8a:ff:bc:5a:aa:5c:
c9:a6:ec:48:02:c5:d5:80:3d:f2:d1:6c:0b:6a:4c:
e8:f1:5f:f4:a6:b2:78:61:b2:9d:1d:ad:39:2e:84:
5d:34:ab:50:bd:99:71:25:91:81:31:91:68:95:93:
4b:c3:05:20:91:4f:0c:29:b9:83:36:30:37:8e:c9:
43:89:88:49:80:e5:2a:a7:06:16:97:a4:3e:e2:59:
56:6f:d3:06:f0:06:06:e7:9e:b3:5f:95:29:7f:45:
c3:69:55:40:0c:a6:7c:55:86:83:fd:28:d8:db:94:
9b:30:34:06:84:82:1c:2e:db:eb:2a:e9:17:f8:78:
f3:2d:df:f2:c3:49:70:11:47:c5:d0:69:e3:15:f1:
3e:b3:6d:88:57:45:e1:e8:3d:6a:00:de:a8:6d:7e:
ab:2e:be:42:ed:d7:69:57:ac:a6:22:21:02:f6:07:
20:26:39:15:92:16:1f:40:20:50:e7:40:a0:54:a8:
25:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:64:8C:5D:8C:69:66:9C:B8:04:3F:2A:C3:05:6C:7C:4F:48:8A:EF
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/758e0f5d-e823-4592-b39f-4ae4f9396019.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
73:75:b3:33:c1:36:7d:56:66:8d:63:e6:70:87:f7:15:e3:27:
6d:18:11:99:6f:77:87:ae:33:ed:cf:53:91:83:bf:08:ce:8c:
9b:52:19:ea:dc:3e:c1:3b:a5:61:67:95:70:7f:fe:f0:75:d8:
31:97:db:61:eb:c3:82:50:a8:b6:1a:b5:ca:7c:10:18:da:c6:
8d:e6:61:53:05:46:6b:47:61:83:b6:ce:f1:1f:90:6c:44:fe:
d3:c1:bc:2d:e9:64:e3:d0:82:4f:d6:c9:0d:a9:0d:8c:29:bf:
d0:ac:77:d5:ad:df:86:70:cc:82:08:49:db:32:39:d7:b5:7d:
ac:32:cf:fa:54:6b:8a:30:04:a2:be:8f:74:bc:ac:84:59:ac:
a6:1c:3a:7c:54:bc:64:e7:aa:02:7f:36:17:09:8d:54:6d:2d:
98:a8:df:fa:a5:74:88:e3:c5:ce:32:14:22:47:b3:d0:f8:ea:
b7:db:cb:69:4d:28:da:ce:33:ef:33:c0:95:e9:e6:90:4f:bd:
5f:0a:f0:84:da:94:64:47:ab:aa:71:8b:ae:37:38:fd:4a:3b:
81:be:7e:bd:b1:47:2e:7f:65:39:b1:e0:32:2a:b4:f9:96:9c:
1e:85:f1:22:f0:40:1e:0f:bc:0b:36:17:cc:f5:45:83:70:b0:
18:40:89:cd
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUAQMsJVcfEDm/pDQcvyuSba1hLXswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwODA0MDAwMDAwWhcNMjQwOTA4MjM1OTU5
WjB6MUkwRwYDVQQFE0A3OGI0MTlkOTdjYTI0YzhiYWUyYmY2OGQ0OTc4NjQ2Zjgz
MzA3YTE1OGEwMTYyYWQ1YjVlMGNiYTI0NDRkMGM2MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtAIfdg8hanFrkZ5rym59BdYV08fA+++g1XDmiSnfda+jO
RyKXXxCJkKra+JsQc6ri14hNURG5Z0PhcCUCxN//JsUKIYr/vFqqXMmm7EgCxdWA
PfLRbAtqTOjxX/Smsnhhsp0drTkuhF00q1C9mXElkYExkWiVk0vDBSCRTwwpuYM2
MDeOyUOJiEmA5SqnBhaXpD7iWVZv0wbwBgbnnrNflSl/RcNpVUAMpnxVhoP9KNjb
lJswNAaEghwu2+sq6Rf4ePMt3/LDSXARR8XQaeMV8T6zbYhXReHoPWoA3qhtfqsu
vkLt12lXrKYiIQL2ByAmORWSFh9AIFDnQKBUqCWRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUfWSMXYxpZpy4BD8qwwVsfE9Iiu8wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2Lzc1OGUwZjVkLWU4MjMtNDU5Mi1iMzlmLTRhZTRmOTM5NjAxOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHN1szPBNn1WZo1j5nCH9xXjJ20Y
EZlvd4euM+3PU5GDvwjOjJtSGercPsE7pWFnlXB//vB12DGX22Hrw4JQqLYatcp8
EBjaxo3mYVMFRmtHYYO2zvEfkGxE/tPBvC3pZOPQgk/WyQ2pDYwpv9Csd9Wt34Zw
zIIISdsyOde1fawyz/pUa4owBKK+j3S8rIRZrKYcOnxUvGTnqgJ/NhcJjVRtLZio
3/qldIjjxc4yFCJHs9D46rfby2lNKNrOM+8zwJXp5pBPvV8K8ITalGRHq6pxi643
OP1KO4G+fr2xRy5/ZTmx4DIqtPmWnB6F8SLwQB4PvAs2F8z1RYNwsBhAic0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:11 2025 by rpki-client