Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7efcafd7-359f-48f7-ae15-3d5f8ac520d4.roa
File: 7efcafd7-359f-48f7-ae15-3d5f8ac520d4.roa (raw, json)
Hash identifier: NC/JeVpuGJyArxAWIbGngfRp9UxYT7pO5rhLk1SOu2M=
Subject key identifier: 35:45:8E:DF:89:68:C7:97:60:76:3C:E0:34:37:00:B6:D2:62:BE:45
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 76BAFF757FB8F94D94B56A060ED9DD90343421C6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7efcafd7-359f-48f7-ae15-3d5f8ac520d4.roa
Signing time: Sun 22 Dec 2024 00:00:00 +0000
ROA not before: Sun 22 Dec 2024 00:00:00 +0000
ROA not after: Sun 26 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:ba:ff:75:7f:b8:f9:4d:94:b5:6a:06:0e:d9:dd:90:34:34:21:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 22 00:00:00 2024 GMT
Not After : Jan 26 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:20:85:dc:b1:d5:27:a6:ee:b4:3c:94:43:4e:
20:b1:31:df:37:ec:ff:68:78:83:bb:dd:fb:24:6b:
4d:c1:00:bb:52:15:4f:aa:7b:ba:41:c2:66:5b:84:
9e:ef:b1:bd:2c:3e:88:a1:cc:f0:e2:c3:33:27:e4:
3b:b0:d7:04:2e:7c:e4:31:56:1a:e4:8b:4f:70:7c:
53:05:d8:30:ee:3b:84:82:be:b2:f6:39:60:52:e1:
52:6d:9c:b9:92:5d:87:7a:da:95:1b:d4:70:28:d2:
14:1d:d9:bb:8d:94:d5:90:2f:3f:62:3e:89:a3:72:
bc:88:4e:af:3b:c9:51:99:47:3b:a3:c3:9d:f2:0b:
63:0f:18:65:c1:b3:f3:ee:08:2a:bc:e8:ce:2e:7d:
48:33:d3:8e:ec:38:f4:47:39:05:54:fe:f5:bb:67:
e1:c6:b9:89:0b:ff:2b:5e:ac:b5:28:fa:19:62:df:
7d:96:91:c9:55:01:c6:8d:a6:76:8b:b7:6b:7a:fc:
7c:5e:1f:01:a8:ea:bb:1d:6c:e9:f0:b4:11:dc:fb:
de:3b:77:a7:90:f0:47:b1:64:bd:82:1c:fe:2c:76:
a0:46:c8:ab:fa:71:59:09:a0:ad:ae:81:5d:15:de:
c4:51:cf:7f:e1:9c:8c:58:23:b3:8a:31:80:20:d9:
b7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:45:8E:DF:89:68:C7:97:60:76:3C:E0:34:37:00:B6:D2:62:BE:45
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7efcafd7-359f-48f7-ae15-3d5f8ac520d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
92:39:97:4c:e6:fa:64:73:ed:07:97:28:a4:d2:96:a1:8f:59:
1a:52:03:fb:6c:33:d4:b7:fb:82:54:3a:70:17:48:18:be:17:
61:02:0b:c8:19:7e:21:2d:34:bd:3d:5d:bd:a1:e5:e7:4c:61:
ab:48:46:c1:d1:57:4a:7c:79:71:57:33:86:93:c2:78:50:a3:
7e:ff:af:2b:3d:bd:cd:7f:75:35:22:e1:b1:6e:8b:fd:53:1e:
4c:25:f9:3b:d2:52:c3:59:39:32:48:b7:e7:ad:5e:d8:17:f1:
3e:b6:a5:63:b7:ab:60:58:01:6d:06:95:63:5d:18:c4:a2:3e:
57:49:9b:48:26:0a:1b:bf:1b:c8:2f:ef:c8:95:18:32:2f:f3:
56:74:38:2e:69:91:e1:3f:63:db:23:30:a4:4a:64:1f:fd:9d:
d9:48:94:16:e3:bc:15:d3:b7:bb:29:16:0a:a1:f8:0a:fb:7a:
4a:1c:b6:4c:bd:c1:80:9b:22:fa:e8:8c:30:60:75:15:9e:f2:
05:b6:f7:f2:63:3d:76:be:33:37:5c:90:f3:64:c8:32:ff:e4:
1e:74:2a:e0:8d:60:25:0a:6b:93:fa:10:09:4a:aa:4a:00:3c:
6b:82:0f:91:5d:53:7a:95:13:e0:b9:c6:34:f1:0d:eb:41:c7:
d4:e8:0f:43
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUdrr/dX+4+U2UtWoGDtndkDQ0IcYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMjIyMDAwMDAwWhcNMjUwMTI2MjM1OTU5
WjB6MUkwRwYDVQQFE0BiZDNlNjQxNWZjMDQyM2EwYzBkNjkzZDRkNDI3NGZiYjc1
N2Y5YzllOTVlNTZkZWZkZTZkOWIzYzE0ZDRhNTkzMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCkIIXcsdUnpu60PJRDTiCxMd837P9oeIO73fska03BALtS
FU+qe7pBwmZbhJ7vsb0sPoihzPDiwzMn5Duw1wQufOQxVhrki09wfFMF2DDuO4SC
vrL2OWBS4VJtnLmSXYd62pUb1HAo0hQd2buNlNWQLz9iPomjcryITq87yVGZRzuj
w53yC2MPGGXBs/PuCCq86M4ufUgz047sOPRHOQVU/vW7Z+HGuYkL/yterLUo+hli
332WkclVAcaNpnaLt2t6/HxeHwGo6rsdbOnwtBHc+947d6eQ8EexZL2CHP4sdqBG
yKv6cVkJoK2ugV0V3sRRz3/hnIxYI7OKMYAg2be3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUNUWO34lox5dgdjzgNDcAttJivkUwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzdlZmNhZmQ3LTM1OWYtNDhmNy1hZTE1LTNkNWY4YWM1MjBkNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJI5l0zm+mRz7QeXKKTSlqGPWRpS
A/tsM9S3+4JUOnAXSBi+F2ECC8gZfiEtNL09Xb2h5edMYatIRsHRV0p8eXFXM4aT
wnhQo37/rys9vc1/dTUi4bFui/1THkwl+TvSUsNZOTJIt+etXtgX8T62pWO3q2BY
AW0GlWNdGMSiPldJm0gmChu/G8gv78iVGDIv81Z0OC5pkeE/Y9sjMKRKZB/9ndlI
lBbjvBXTt7spFgqh+Ar7ekoctky9wYCbIvrojDBgdRWe8gW29/JjPXa+MzdckPNk
yDL/5B50KuCNYCUKa5P6EAlKqkoAPGuCD5FdU3qVE+C5xjTxDetBx9ToD0M=
-----END CERTIFICATE-----
Generated at Wed Apr 9 22:37:12 2025 by rpki-client