Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/89b006a1-e85b-49e6-a2b9-5c990cda3023.roa
File: 89b006a1-e85b-49e6-a2b9-5c990cda3023.roa (raw, json)
Hash identifier: xWmuw3yxT33wvdTXNxHhiPZgAk08z8mSh9c19SrojCo=
Subject key identifier: D0:52:B4:2A:18:97:29:28:39:3D:39:88:50:47:CC:24:9A:BC:22:D9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 69ABEBF683D04E556E5A806C15C8E094FE3C1406
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/89b006a1-e85b-49e6-a2b9-5c990cda3023.roa
Signing time: Mon 07 Oct 2024 00:00:00 +0000
ROA not before: Mon 07 Oct 2024 00:00:00 +0000
ROA not after: Mon 11 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ab:eb:f6:83:d0:4e:55:6e:5a:80:6c:15:c8:e0:94:fe:3c:14:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 7 00:00:00 2024 GMT
Not After : Nov 11 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0f:fe:2f:86:21:20:45:78:47:56:9d:84:b3:
28:da:26:ed:e8:1b:6f:3b:0e:31:f7:e1:49:b2:fc:
91:92:d8:5b:c8:26:25:29:4d:7b:f1:f1:0a:54:63:
ec:a9:16:3e:14:25:fa:3a:6d:d1:79:26:09:6a:fc:
ce:c7:83:f6:47:c2:39:16:c2:70:97:a3:0a:d4:2b:
e3:2d:8d:7b:62:c1:78:35:d8:09:ec:0e:b2:a8:38:
b4:56:73:43:fc:3c:f3:32:e1:2e:53:b6:a9:3c:e1:
59:e9:0d:9c:16:97:15:72:6f:ec:f9:09:bd:c3:78:
4a:f0:cf:f4:94:e8:2b:f4:13:0e:a7:8b:6c:d5:9f:
f6:d7:9b:b9:c2:75:62:ac:55:72:a5:9b:05:f1:6d:
49:c4:58:9c:c8:28:73:a5:1c:bc:0a:5f:27:0b:15:
69:7c:3b:18:17:31:45:29:41:39:04:b3:4d:8d:8a:
5a:8b:e9:2a:46:d8:af:c4:d0:43:81:33:83:02:1c:
57:f3:5b:51:71:40:0f:21:eb:0a:e0:cc:3d:e4:3b:
5d:9b:a3:09:dc:7c:37:67:7b:72:66:cd:75:d0:a2:
26:35:56:b3:6e:91:15:46:5e:36:ec:74:5d:63:d9:
70:46:39:43:1b:1b:a8:56:16:e4:fd:83:e6:08:02:
05:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:52:B4:2A:18:97:29:28:39:3D:39:88:50:47:CC:24:9A:BC:22:D9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/89b006a1-e85b-49e6-a2b9-5c990cda3023.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
75:02:2d:4e:06:57:2d:4b:2c:e0:f7:7e:22:10:69:35:6a:56:
66:5a:87:54:e0:94:89:b9:d3:6a:5a:c0:f0:b0:c6:54:46:0a:
80:79:06:40:07:7b:b6:a3:e6:1a:fd:72:8a:0a:a1:28:5f:75:
6b:c9:29:99:61:4c:5e:6d:bb:5a:08:d8:5d:bd:89:06:71:d3:
b1:d7:99:4b:91:c9:86:bf:e6:f9:2c:7d:7d:4b:fb:68:16:cf:
26:9e:35:22:ca:6c:da:5d:b5:14:5a:fb:44:4a:4b:73:b0:00:
bc:df:6c:2c:37:3d:5c:00:ae:a8:46:f1:f9:75:c4:13:75:bd:
5f:8c:3d:10:47:33:ac:81:6e:fe:8e:9c:66:30:ef:8f:d0:fd:
e4:91:8d:f6:c1:68:f5:20:43:26:66:f8:1b:cb:f7:66:2d:7a:
16:23:64:a9:9e:cb:5d:aa:b9:88:5a:fb:37:77:b0:ad:74:f5:
81:d1:77:db:6d:50:52:24:e9:55:71:b3:3e:01:32:ec:5b:5f:
28:55:45:61:64:3a:6c:3d:da:e3:80:f0:00:5d:17:f0:a4:9a:
c6:27:3b:73:bf:81:00:87:53:b1:9f:fd:54:20:02:2c:9b:8f:
6c:f6:67:2f:de:1c:c5:6e:93:34:c5:82:51:26:67:f3:85:c2:
ed:7b:2d:71
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUaavr9oPQTlVuWoBsFcjglP48FAYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMDA3MDAwMDAwWhcNMjQxMTExMjM1OTU5
WjB6MUkwRwYDVQQFE0BlZTJlMzlhMjdhOTBkYWY0YTcyNDQ5YzliZWU5OGFlYjJk
NDNhZTQ2YWJhZTcxMDU0NzgwMGMzNTY2NTU0MjIzMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDUD/4vhiEgRXhHVp2EsyjaJu3oG287DjH34Umy/JGS2FvI
JiUpTXvx8QpUY+ypFj4UJfo6bdF5Jglq/M7Hg/ZHwjkWwnCXowrUK+MtjXtiwXg1
2AnsDrKoOLRWc0P8PPMy4S5Ttqk84VnpDZwWlxVyb+z5Cb3DeErwz/SU6Cv0Ew6n
i2zVn/bXm7nCdWKsVXKlmwXxbUnEWJzIKHOlHLwKXycLFWl8OxgXMUUpQTkEs02N
ilqL6SpG2K/E0EOBM4MCHFfzW1FxQA8h6wrgzD3kO12bowncfDdne3JmzXXQoiY1
VrNukRVGXjbsdF1j2XBGOUMbG6hWFuT9g+YIAgVNAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU0FK0KhiXKSg5PTmIUEfMJJq8ItkwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2Lzg5YjAwNmExLWU4NWItNDllNi1hMmI5LTVjOTkwY2RhMzAyMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHUCLU4GVy1LLOD3fiIQaTVqVmZa
h1TglIm502pawPCwxlRGCoB5BkAHe7aj5hr9cooKoShfdWvJKZlhTF5tu1oI2F29
iQZx07HXmUuRyYa/5vksfX1L+2gWzyaeNSLKbNpdtRRa+0RKS3OwALzfbCw3PVwA
rqhG8fl1xBN1vV+MPRBHM6yBbv6OnGYw74/Q/eSRjfbBaPUgQyZm+BvL92YtehYj
ZKmey12quYha+zd3sK109YHRd9ttUFIk6VVxsz4BMuxbXyhVRWFkOmw92uOA8ABd
F/CkmsYnO3O/gQCHU7Gf/VQgAiybj2z2Zy/eHMVukzTFglEmZ/OFwu17LXE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:31:24 2025 by rpki-client