Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f685d58-409e-483f-aea3-7c199782c16c.roa
File: 7f685d58-409e-483f-aea3-7c199782c16c.roa (raw, json)
Hash identifier: kuHIP1CsQFNBzvR1GUZ1vdDrsG3Xz2EZGde0V3e6urg=
Subject key identifier: 83:5B:81:5C:32:41:E1:17:72:19:4D:71:C2:EA:A0:40:AA:89:66:D2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 503F50B1A63101C82EE0F1DDE811776D133FEBBA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f685d58-409e-483f-aea3-7c199782c16c.roa
Signing time: Sun 25 Aug 2024 00:00:00 +0000
ROA not before: Sun 25 Aug 2024 00:00:00 +0000
ROA not after: Sun 29 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:3f:50:b1:a6:31:01:c8:2e:e0:f1:dd:e8:11:77:6d:13:3f:eb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 25 00:00:00 2024 GMT
Not After : Sep 29 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:37:47:e0:7c:88:03:d0:e5:97:ee:1e:66:1e:
c5:e5:73:77:0d:d8:a9:a9:80:4e:06:b1:a9:4d:30:
0d:65:be:38:91:d8:a3:cb:ec:70:ea:8c:f0:e8:14:
bd:b7:43:83:55:59:8a:e2:6f:03:0b:6a:f0:9c:60:
93:c5:3d:ee:9d:68:c7:7f:0e:de:ca:98:3b:6c:15:
1d:1c:2d:28:a3:c8:48:85:4f:a3:aa:5f:60:ff:89:
a4:27:bb:6b:a0:6b:d3:c1:8a:06:ea:8c:c0:e2:e1:
60:d8:37:0e:f9:89:6a:bd:13:e9:67:00:b8:0e:06:
49:45:0e:a2:17:70:f4:6f:3c:f2:86:e4:1a:84:7d:
24:8e:87:8d:27:e7:34:e3:53:93:e6:ba:85:e8:aa:
7d:02:ea:eb:3e:92:a4:47:f9:22:55:00:67:81:68:
47:66:41:c6:f0:c4:6e:c0:01:1f:c0:2e:4f:43:90:
52:bb:5b:8c:e3:c1:a6:ad:a0:af:e7:d8:07:32:61:
bc:96:0f:78:4f:d5:8b:d4:d2:57:6f:a4:75:10:32:
a6:19:1c:9b:24:0d:83:f7:ac:0e:1c:3d:8a:c8:e8:
bf:f7:08:29:32:71:69:a5:35:68:a7:c0:b2:a2:ae:
c1:f9:5a:7a:32:9f:9a:91:d9:5e:de:14:14:25:20:
c4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5B:81:5C:32:41:E1:17:72:19:4D:71:C2:EA:A0:40:AA:89:66:D2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f685d58-409e-483f-aea3-7c199782c16c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
59:04:dd:16:b7:ff:b3:16:ba:0e:ad:67:88:f4:fe:87:c1:fe:
2f:88:32:ad:e6:3c:48:9a:d2:0f:50:0d:55:ef:07:c8:e2:b7:
86:0d:e6:74:ba:b6:34:d9:06:d5:2d:ff:91:df:21:8a:d6:13:
1a:ff:9b:31:86:9d:d6:9b:5f:ec:8f:c5:3f:e7:29:1d:e6:74:
79:a9:46:95:d9:03:27:34:69:1d:b9:f6:8a:5f:b9:a7:ec:fa:
80:04:21:5d:06:b8:76:36:05:15:db:11:75:04:78:97:e0:ab:
b1:d1:c5:fc:30:eb:0b:23:f4:8d:a0:3c:cc:12:d1:cf:50:a2:
77:5f:ce:d4:c8:7b:ef:3e:ee:9f:74:13:e1:cc:0f:93:73:ad:
de:4b:df:83:ef:ca:05:c5:05:bf:23:f4:b2:66:12:17:ed:57:
36:cd:e1:8e:df:fc:60:aa:e6:8e:0c:7e:5c:06:1b:a2:38:79:
87:ac:47:79:da:dc:5c:55:ca:5d:59:8c:b6:5b:d8:d5:a5:1f:
2f:b8:e1:d9:21:7f:48:b2:63:21:3f:59:52:6c:a8:29:f4:38:
81:b5:19:71:66:4b:db:80:ca:d9:f3:20:0d:36:26:db:dc:a0:
b8:ca:df:f5:c5:f4:b6:a4:f7:ea:11:e0:5a:23:dd:0b:f8:f5:
27:aa:a6:ca
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUD9QsaYxAcgu4PHd6BF3bRM/67owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwODI1MDAwMDAwWhcNMjQwOTI5MjM1OTU5
WjB6MUkwRwYDVQQFE0BkNGExOGZiODM5YWQ2NWYxNjc4MWU2ZGVkYzZlMWI1Zjhl
YjllNjVjMzZjMzVmMmQ2ZWM2OGMzMmViYjg0OTVkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCON0fgfIgD0OWX7h5mHsXlc3cN2KmpgE4GsalNMA1lvjiR
2KPL7HDqjPDoFL23Q4NVWYribwMLavCcYJPFPe6daMd/Dt7KmDtsFR0cLSijyEiF
T6OqX2D/iaQnu2uga9PBigbqjMDi4WDYNw75iWq9E+lnALgOBklFDqIXcPRvPPKG
5BqEfSSOh40n5zTjU5PmuoXoqn0C6us+kqRH+SJVAGeBaEdmQcbwxG7AAR/ALk9D
kFK7W4zjwaatoK/n2AcyYbyWD3hP1YvU0ldvpHUQMqYZHJskDYP3rA4cPYrI6L/3
CCkycWmlNWinwLKirsH5Wnoyn5qR2V7eFBQlIMTTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUg1uBXDJB4RdyGU1xwuqgQKqJZtIwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzdmNjg1ZDU4LTQwOWUtNDgzZi1hZWEzLTdjMTk5NzgyYzE2Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAFkE3Ra3/7MWug6tZ4j0/ofB/i+I
Mq3mPEia0g9QDVXvB8jit4YN5nS6tjTZBtUt/5HfIYrWExr/mzGGndabX+yPxT/n
KR3mdHmpRpXZAyc0aR259opfuafs+oAEIV0GuHY2BRXbEXUEeJfgq7HRxfww6wsj
9I2gPMwS0c9QondfztTIe+8+7p90E+HMD5Nzrd5L34PvygXFBb8j9LJmEhftVzbN
4Y7f/GCq5o4MflwGG6I4eYesR3na3FxVyl1ZjLZb2NWlHy+44dkhf0iyYyE/WVJs
qCn0OIG1GXFmS9uAytnzIA02JtvcoLjK3/XF9Lak9+oR4Foj3Qv49Seqpso=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:12:57 2025 by rpki-client