Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9e03ae04-6ead-49f8-b2b6-4a281e282942.roa
File: 9e03ae04-6ead-49f8-b2b6-4a281e282942.roa (raw, json)
Hash identifier: ga22lE3X6bXlZzB4Jqwu2xs6FsKmcje+uRhnzy7NiQ4=
Subject key identifier: 87:DD:FF:75:32:D6:53:E3:19:24:8C:8A:4C:F5:3F:2D:FD:BD:02:6D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7A1E4CD6966A9B3D8263E4F56D6CE6F67132D63B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9e03ae04-6ead-49f8-b2b6-4a281e282942.roa
Signing time: Fri 08 Mar 2024 00:00:00 +0000
ROA not before: Fri 08 Mar 2024 00:00:00 +0000
ROA not after: Fri 12 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:1e:4c:d6:96:6a:9b:3d:82:63:e4:f5:6d:6c:e6:f6:71:32:d6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 8 00:00:00 2024 GMT
Not After : Apr 12 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:32:db:c8:35:96:7d:82:79:15:bb:0b:0f:0d:
ef:b7:7f:85:2b:f0:58:cb:37:c4:f8:74:a0:ac:42:
cc:73:ba:8b:26:6d:c7:af:06:dd:05:0e:16:24:00:
79:45:9c:59:be:d0:b2:00:ce:55:1b:1c:4a:b9:e7:
71:19:38:bd:ec:47:bb:5c:dc:2f:d4:81:97:01:77:
4f:e0:47:91:dd:de:23:d3:9a:66:48:1a:e7:c5:bc:
e2:08:4b:db:99:3e:35:9f:aa:26:5b:30:db:8c:e6:
a5:34:0b:09:c9:04:3e:bd:85:3e:d0:8e:5d:5d:ac:
45:44:78:b4:c3:fb:36:ea:90:7b:9e:3c:f7:ce:50:
3e:16:34:bb:9f:49:60:75:28:4a:e6:4b:ff:37:db:
cb:25:c6:f7:69:e8:64:95:f6:72:3d:88:65:87:e4:
51:a2:54:7c:0b:10:60:92:aa:bb:1c:a6:79:dd:14:
d8:e3:a5:7e:40:eb:27:6f:45:6b:26:07:a2:96:45:
12:ef:e5:d1:eb:08:e4:52:c4:9d:b6:94:82:fe:59:
0f:ce:4f:89:b2:ca:64:1a:37:7e:12:27:c4:76:c0:
3b:45:52:26:32:33:92:22:a5:4f:32:72:10:b8:37:
68:a1:b1:2b:19:76:6a:4f:ef:a9:c9:91:e1:c5:1a:
7a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DD:FF:75:32:D6:53:E3:19:24:8C:8A:4C:F5:3F:2D:FD:BD:02:6D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9e03ae04-6ead-49f8-b2b6-4a281e282942.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:f2:c4:17:b9:4a:7d:2a:4b:ae:5c:c1:ff:30:d1:fa:0f:b3:
a8:39:98:ca:af:b6:6f:d2:24:1d:f4:91:50:41:7b:a6:76:ce:
70:4b:60:76:bd:dd:70:b9:d9:27:6c:5e:8d:07:3d:37:cb:8e:
8b:5c:77:18:e3:3a:33:48:ae:0e:6b:0e:a5:fd:36:f8:9b:05:
0d:d9:89:87:3f:36:a8:c3:75:d3:ab:de:5d:5f:04:02:91:b8:
ac:d2:cc:ac:0e:12:6c:bf:75:5e:2f:69:41:1a:50:b5:eb:6d:
1e:f9:74:92:9d:ea:bf:4c:bd:3c:77:24:62:43:8f:ac:77:7d:
c6:9e:ba:97:84:a6:96:cb:da:34:b9:7e:23:be:93:2b:1e:d9:
27:9d:fb:e7:71:51:75:ef:42:e2:b4:00:b2:c3:52:32:fd:26:
af:5e:cf:7d:1e:3b:d6:ea:f3:d3:4b:bc:7b:8c:5c:2a:70:c3:
f4:9f:ac:e6:84:e0:61:5d:97:fd:76:93:4e:c0:f0:2a:e2:d6:
60:c2:14:ea:89:2f:4a:21:02:aa:0c:c8:dd:ce:50:21:6a:f3:
6f:9c:76:a9:28:b0:02:e6:2c:75:25:a8:4e:fd:b4:97:3d:7c:
5e:e3:df:ad:82:75:3a:fa:d7:9b:75:ea:60:ad:dd:de:5c:70:
17:03:a1:23
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUeh5M1pZqmz2CY+T1bWzm9nEy1jswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwMzA4MDAwMDAwWhcNMjQwNDEyMjM1OTU5
WjB6MUkwRwYDVQQFE0AyYjYwODUxYTllMWUxNTkyYjAyN2JjNzg4ZGM2MDRiNDBi
YzUwNmI2OTBlODFjZjQ2ZmViNTI4YTE5OTEwYjI0MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCjMtvINZZ9gnkVuwsPDe+3f4Ur8FjLN8T4dKCsQsxzuosm
bcevBt0FDhYkAHlFnFm+0LIAzlUbHEq553EZOL3sR7tc3C/UgZcBd0/gR5Hd3iPT
mmZIGufFvOIIS9uZPjWfqiZbMNuM5qU0CwnJBD69hT7Qjl1drEVEeLTD+zbqkHue
PPfOUD4WNLufSWB1KErmS/8328slxvdp6GSV9nI9iGWH5FGiVHwLEGCSqrscpnnd
FNjjpX5A6ydvRWsmB6KWRRLv5dHrCORSxJ22lIL+WQ/OT4myymQaN34SJ8R2wDtF
UiYyM5IipU8ychC4N2ihsSsZdmpP76nJkeHFGnpzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUh93/dTLWU+MZJIyKTPU/Lf29Am0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzllMDNhZTA0LTZlYWQtNDlmOC1iMmI2LTRhMjgxZTI4Mjk0Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKTyxBe5Sn0qS65cwf8w0foPs6g5
mMqvtm/SJB30kVBBe6Z2znBLYHa93XC52SdsXo0HPTfLjotcdxjjOjNIrg5rDqX9
NvibBQ3ZiYc/NqjDddOr3l1fBAKRuKzSzKwOEmy/dV4vaUEaULXrbR75dJKd6r9M
vTx3JGJDj6x3fcaeupeEppbL2jS5fiO+kyse2Sed++dxUXXvQuK0ALLDUjL9Jq9e
z30eO9bq89NLvHuMXCpww/SfrOaE4GFdl/12k07A8Cri1mDCFOqJL0ohAqoMyN3O
UCFq82+cdqkosALmLHUlqE79tJc9fF7j362CdTr615t16mCt3d5ccBcDoSM=
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:14:04 2025 by rpki-client