Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9fc96d46-f937-47c7-8660-3f1aff3a66a0.roa
File: 9fc96d46-f937-47c7-8660-3f1aff3a66a0.roa (raw, json)
Hash identifier: ziwhbIfjVHG0d8zTAIuhyL3BDGQA2XOxFmZQ4PGHqFM=
Subject key identifier: DC:7C:ED:EE:43:C5:DD:F9:59:17:84:6F:9E:B9:5A:1C:5D:01:AB:68
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 112E9D5694705A8BC7F5097FB08B50DDD24718F8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9fc96d46-f937-47c7-8660-3f1aff3a66a0.roa
Signing time: Wed 05 Feb 2025 00:00:00 +0000
ROA not before: Wed 05 Feb 2025 00:00:00 +0000
ROA not after: Wed 12 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:2e:9d:56:94:70:5a:8b:c7:f5:09:7f:b0:8b:50:dd:d2:47:18:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 5 00:00:00 2025 GMT
Not After : Mar 12 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:8a:70:54:75:d0:d9:f7:81:9e:f8:9a:ca:
81:8c:72:95:2d:0d:b5:18:d5:32:dc:1f:bf:8c:be:
08:e0:1c:58:af:0c:47:05:48:9c:d3:1c:32:5e:f2:
18:36:d2:81:8e:18:de:a4:1d:34:0d:73:77:42:5d:
25:bd:4c:f1:d9:c8:18:58:7a:ae:cc:47:23:9c:ae:
2b:e4:f4:be:b8:c5:d5:60:c9:87:b0:c0:42:f5:cd:
36:eb:30:26:46:b1:c5:1d:28:28:df:d7:1f:21:bc:
c0:e9:bc:67:63:68:a7:3a:c0:bc:49:00:54:31:04:
c1:97:9d:cc:1a:70:70:f5:8a:0b:ff:8f:d1:3b:d4:
5b:ac:ff:3d:a3:6b:e4:16:f1:89:0d:9c:23:59:88:
41:eb:87:64:c0:7e:1b:66:9e:ed:44:c9:55:50:c6:
0a:9f:0c:5c:b0:b0:4d:22:3c:6d:31:90:75:7a:18:
10:9a:84:23:f8:07:3b:ff:79:20:76:49:dd:88:9c:
99:60:8f:70:4a:c9:6b:31:ec:3f:eb:f0:38:f0:d4:
da:c9:ad:5b:83:1a:a1:9a:26:fc:ed:b7:db:7c:aa:
58:9a:ac:e4:d9:cb:cb:00:1c:ae:31:83:c7:17:39:
90:1a:42:d0:e4:b7:9d:62:35:11:4a:d1:88:f8:7d:
4b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7C:ED:EE:43:C5:DD:F9:59:17:84:6F:9E:B9:5A:1C:5D:01:AB:68
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9fc96d46-f937-47c7-8660-3f1aff3a66a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
88:ca:4a:f7:d1:9c:f7:a4:a4:23:f9:b1:22:8d:87:f4:57:d1:
9c:7a:30:08:57:55:4d:7d:fc:13:85:87:13:0e:9d:8b:4e:29:
9f:ce:e9:c9:f8:d1:c9:1f:44:4d:8d:29:31:70:ef:21:d8:9b:
ed:af:91:b1:e0:2a:c4:4f:c8:66:9f:39:bc:44:3d:dd:79:85:
29:cc:79:d6:88:e9:d6:a9:2a:c7:72:4a:df:ca:2f:43:16:23:
35:bf:b5:c0:d3:44:f3:2f:f1:53:04:01:41:51:1b:50:40:d9:
68:a8:ed:db:bc:43:48:30:89:c3:b0:05:02:cf:ff:c1:fb:ab:
87:33:49:9f:fa:85:41:3b:9f:00:f3:3f:1c:f8:f5:05:8b:57:
84:55:30:66:df:0d:75:61:01:74:7b:1a:07:65:a9:b1:d5:9e:
9c:e8:16:53:10:95:98:70:83:72:de:d7:ff:ca:63:1a:a6:3a:
c3:ce:59:a6:f2:92:09:ad:01:74:5e:4e:db:dc:f2:66:8d:07:
99:a2:2b:ea:22:4e:c4:71:ba:4f:ea:d1:1c:57:c7:cb:10:af:
d6:a0:33:17:96:0e:de:90:80:e3:23:fb:d7:01:c2:04:06:b1:
c9:5b:17:ef:f0:eb:06:73:e8:96:7b:17:4e:79:98:6f:a6:62:
c9:3c:39:1e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUES6dVpRwWovH9Ql/sItQ3dJHGPgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMjA1MDAwMDAwWhcNMjUwMzEyMjM1OTU5
WjB6MUkwRwYDVQQFE0A0OWFmYWMzYjZkMzM5NWVlZjVjMWUyYTg4YmFmODYwZjM5
ZWFiNGUzNTZiMWM1ZjY2NzI3OWI2ZDgxZDViOGUyMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCg04pwVHXQ2feBnviayoGMcpUtDbUY1TLcH7+MvgjgHFiv
DEcFSJzTHDJe8hg20oGOGN6kHTQNc3dCXSW9TPHZyBhYeq7MRyOcrivk9L64xdVg
yYewwEL1zTbrMCZGscUdKCjf1x8hvMDpvGdjaKc6wLxJAFQxBMGXncwacHD1igv/
j9E71Fus/z2ja+QW8YkNnCNZiEHrh2TAfhtmnu1EyVVQxgqfDFywsE0iPG0xkHV6
GBCahCP4Bzv/eSB2Sd2InJlgj3BKyWsx7D/r8Djw1NrJrVuDGqGaJvztt9t8qlia
rOTZy8sAHK4xg8cXOZAaQtDkt51iNRFK0Yj4fUuHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU3Hzt7kPF3flZF4RvnrlaHF0Bq2gwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzlmYzk2ZDQ2LWY5MzctNDdjNy04NjYwLTNmMWFmZjNhNjZhMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIjKSvfRnPekpCP5sSKNh/RX0Zx6
MAhXVU19/BOFhxMOnYtOKZ/O6cn40ckfRE2NKTFw7yHYm+2vkbHgKsRPyGafObxE
Pd15hSnMedaI6dapKsdySt/KL0MWIzW/tcDTRPMv8VMEAUFRG1BA2Wio7du8Q0gw
icOwBQLP/8H7q4czSZ/6hUE7nwDzPxz49QWLV4RVMGbfDXVhAXR7GgdlqbHVnpzo
FlMQlZhwg3Le1//KYxqmOsPOWabykgmtAXReTtvc8maNB5miK+oiTsRxuk/q0RxX
x8sQr9agMxeWDt6QgOMj+9cBwgQGsclbF+/w6wZz6JZ7F055mG+mYsk8OR4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:04:40 2025 by rpki-client