Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8282001e-4b43-461d-bff7-d590ed6d7838.roa
File: 8282001e-4b43-461d-bff7-d590ed6d7838.roa (raw, json)
Hash identifier: gEgeJlE8XRpDPbv/bZO3Zr44v/UNwlzPGlOMIU1YkPQ=
Subject key identifier: 4E:74:A4:10:20:E5:FE:AD:57:36:2E:CF:03:98:67:DA:16:69:FA:F4
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 17D2809CDDBB79E4A0CE8E68F58B3E46D15887F9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8282001e-4b43-461d-bff7-d590ed6d7838.roa
Signing time: Sat 06 Jul 2024 00:00:00 +0000
ROA not before: Sat 06 Jul 2024 00:00:00 +0000
ROA not after: Sat 10 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:d2:80:9c:dd:bb:79:e4:a0:ce:8e:68:f5:8b:3e:46:d1:58:87:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 6 00:00:00 2024 GMT
Not After : Aug 10 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:da:61:2b:10:93:de:41:ee:6e:c2:03:54:1c:
c6:98:62:54:bc:5b:f5:d7:17:98:ea:af:5c:26:22:
40:39:e8:19:3c:41:5a:0e:db:85:fc:e1:de:81:5b:
f2:39:7d:ad:c4:79:75:a0:50:1f:6b:3a:39:37:67:
0c:94:52:cb:fa:65:17:7a:72:2a:e9:bb:c9:26:14:
90:a5:a2:2d:27:79:ab:1b:80:46:c6:ef:86:52:5e:
44:b7:ef:ba:52:19:73:40:85:0a:dd:80:b7:7a:97:
56:56:b5:c3:9a:01:e4:6d:d0:ed:07:7d:ff:0b:f5:
df:ef:e2:d3:a8:d8:3f:5d:a8:f5:36:72:5d:c9:bf:
18:59:e2:9d:67:ee:3a:30:54:eb:67:e6:a9:95:fd:
6d:e2:b2:27:14:c7:da:4f:41:2b:18:ee:0d:aa:5f:
a8:6d:71:ef:da:b8:9d:12:6a:9c:ec:c3:27:82:06:
2d:f1:da:1f:80:75:97:39:ae:ba:19:7a:3f:be:8f:
8e:34:07:ce:eb:97:7a:d2:41:3f:c9:ba:18:cb:b8:
13:b2:14:fc:68:7f:d5:53:50:e6:d6:5e:03:19:84:
2d:f9:7d:85:69:c7:2b:f6:5b:a9:49:9c:8b:7d:72:
7c:cb:49:de:bf:33:75:f6:dd:25:79:bb:f3:11:3d:
23:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:74:A4:10:20:E5:FE:AD:57:36:2E:CF:03:98:67:DA:16:69:FA:F4
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8282001e-4b43-461d-bff7-d590ed6d7838.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:52:41:91:03:35:d1:f9:e1:1e:86:cd:9e:98:e4:3d:a4:42:
e2:a7:05:f2:0d:0c:21:ef:9d:6d:da:6a:47:df:54:d8:6d:2b:
c7:2a:50:04:00:00:84:38:f2:3e:27:de:72:0b:2d:96:ff:81:
59:a3:c3:52:5e:7c:cc:08:9c:15:d9:b4:91:85:51:6a:d0:f6:
27:6d:fe:9e:96:99:0a:cf:d1:0c:ab:32:c3:09:c7:c2:66:d4:
42:4b:4c:1d:8f:f2:3e:b5:99:07:ee:97:54:c4:b8:5e:d6:8d:
66:5b:ff:0d:b2:eb:53:a2:91:1a:45:e3:b6:54:09:28:9d:2b:
44:da:57:fe:2b:ed:d0:f3:90:5a:b9:b8:51:7a:fe:03:14:e7:
dd:55:8d:cb:44:4a:3d:b5:46:cc:bc:32:16:4f:cd:5c:26:64:
5f:29:b9:4d:16:8e:51:f5:58:8c:f7:17:b0:df:6b:82:23:1f:
0b:dc:5e:4e:bc:ab:b5:fc:c5:3e:43:b3:de:d4:a3:46:aa:1c:
23:ed:57:8a:60:b9:5d:ec:5b:33:f7:6d:a9:e1:18:a0:50:7c:
86:5f:39:b2:56:51:ce:1b:37:63:f4:c6:6b:ca:8a:c4:46:85:
f4:89:82:c3:fe:bc:6f:50:f7:f9:e9:24:7a:2f:fd:fe:62:79:
60:9b:7d:99
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUF9KAnN27eeSgzo5o9Ys+RtFYh/kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNzA2MDAwMDAwWhcNMjQwODEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BkMGU3NTQzMjc3NDE0YzM3NzQwYjQzZDdlYTk2ZjBhMTEw
OTg2ZDI3NzNhZmZiOTQ3NWJmNjdmZWI0NzAzM2VmMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDb2mErEJPeQe5uwgNUHMaYYlS8W/XXF5jqr1wmIkA56Bk8
QVoO24X84d6BW/I5fa3EeXWgUB9rOjk3ZwyUUsv6ZRd6cirpu8kmFJCloi0neasb
gEbG74ZSXkS377pSGXNAhQrdgLd6l1ZWtcOaAeRt0O0Hff8L9d/v4tOo2D9dqPU2
cl3JvxhZ4p1n7jowVOtn5qmV/W3isicUx9pPQSsY7g2qX6htce/auJ0SapzswyeC
Bi3x2h+AdZc5rroZej++j440B87rl3rSQT/JuhjLuBOyFPxof9VTUObWXgMZhC35
fYVpxyv2W6lJnIt9cnzLSd6/M3X23SV5u/MRPSNTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUTnSkECDl/q1XNi7PA5hn2hZp+vQwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzgyODIwMDFlLTRiNDMtNDYxZC1iZmY3LWQ1OTBlZDZkNzgzOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKpSQZEDNdH54R6GzZ6Y5D2kQuKn
BfINDCHvnW3aakffVNhtK8cqUAQAAIQ48j4n3nILLZb/gVmjw1JefMwInBXZtJGF
UWrQ9idt/p6WmQrP0QyrMsMJx8Jm1EJLTB2P8j61mQful1TEuF7WjWZb/w2y61Oi
kRpF47ZUCSidK0TaV/4r7dDzkFq5uFF6/gMU591VjctESj21Rsy8MhZPzVwmZF8p
uU0WjlH1WIz3F7Dfa4IjHwvcXk68q7X8xT5Ds97Uo0aqHCPtV4pguV3sWzP3banh
GKBQfIZfObJWUc4bN2P0xmvKisRGhfSJgsP+vG9Q9/npJHov/f5ieWCbfZk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:31 2025 by rpki-client