Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aab8c681-9c05-42b1-8f72-6efff7022b58.roa
File: aab8c681-9c05-42b1-8f72-6efff7022b58.roa (raw, json)
Hash identifier: yFQ7oAZwWTHvAsOI8XvZC5Q5hOY5zZ3a11bUq+mz7xI=
Subject key identifier: 89:18:A4:C7:32:0C:55:5B:26:09:C7:E2:B3:62:F7:D5:54:8C:2D:83
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 344BE7A7B3B70A952B0195A060AE02788861B941
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aab8c681-9c05-42b1-8f72-6efff7022b58.roa
Signing time: Sat 27 Apr 2024 00:00:00 +0000
ROA not before: Sat 27 Apr 2024 00:00:00 +0000
ROA not after: Sat 01 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:4b:e7:a7:b3:b7:0a:95:2b:01:95:a0:60:ae:02:78:88:61:b9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 27 00:00:00 2024 GMT
Not After : Jun 1 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fe:78:07:22:df:66:97:e6:00:ad:f4:ee:ab:
59:1a:f3:cb:f7:94:b2:b7:69:54:c7:b5:fb:af:40:
f3:a2:08:5e:a4:7c:71:1c:16:21:22:2e:ba:ec:5a:
03:70:54:14:4d:f6:b7:3e:e0:3a:53:56:03:c7:46:
af:78:2e:fa:b0:88:1d:6d:fa:b8:5e:5d:1e:ea:67:
03:1a:0e:6b:70:4d:ff:74:6e:69:59:ef:5b:81:fc:
6d:13:27:5f:ec:fc:e1:10:e9:b4:f0:c6:00:a5:fc:
36:82:5b:2d:17:d7:f4:34:ad:27:df:ab:ff:87:ff:
92:80:31:d4:0e:3a:f8:97:03:de:df:14:29:cb:9d:
86:c7:11:f9:f6:6c:a9:a7:af:05:86:13:67:56:66:
98:62:e5:12:df:2c:54:cd:38:1c:db:ef:f4:15:ac:
ea:aa:0b:a5:ca:45:aa:5c:54:21:a9:af:b1:62:a1:
d2:f6:a8:6f:ef:e1:50:fb:dc:be:9c:5c:f8:2e:f8:
02:0a:18:26:15:94:d0:42:db:74:43:4b:54:3f:92:
64:ca:66:58:1f:51:74:3b:2a:81:17:d7:73:4e:12:
6b:ad:75:75:9f:c4:d4:d2:38:ec:61:73:95:24:4a:
df:e0:15:18:5a:41:b9:0a:58:a2:b0:d0:54:9f:18:
1c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:18:A4:C7:32:0C:55:5B:26:09:C7:E2:B3:62:F7:D5:54:8C:2D:83
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aab8c681-9c05-42b1-8f72-6efff7022b58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:92:15:bd:75:75:80:60:a3:2e:b7:b8:b7:a3:da:41:89:23:
69:63:d2:b4:9d:93:4a:0b:75:50:3d:29:22:06:1d:f4:75:05:
a9:27:36:56:91:61:c4:71:2c:67:84:4a:f8:83:4b:2b:5d:e5:
75:68:be:02:c4:ec:89:7e:f4:73:ef:8c:2d:49:d8:1d:bd:22:
4b:55:5d:e5:5d:b4:0a:86:48:5a:c6:6e:4a:a4:57:e9:e1:51:
77:68:be:64:24:3a:cc:ac:fa:24:5e:46:f7:2b:64:09:d9:32:
59:cc:6f:b0:01:53:65:e9:c3:29:e6:42:36:26:b0:28:7d:ef:
30:01:91:d6:bc:f3:13:d1:f9:28:64:4c:73:a4:92:d4:ff:6c:
16:29:c0:a5:3a:39:0a:f6:c0:cb:57:8e:26:ba:26:b8:a6:1b:
09:4c:a7:05:ea:7b:c0:6a:0f:fe:e7:f9:72:0c:ed:fa:2a:87:
f1:ea:d2:11:84:48:87:d7:29:4a:ff:54:8c:c5:b9:e5:be:47:
cc:db:1a:ea:ad:6d:b6:f9:35:6d:0a:c6:f3:a3:01:0c:38:71:
fb:a9:db:02:cc:53:d9:66:07:f1:9d:9d:a2:20:55:f2:71:35:
cc:27:d1:af:90:50:8d:e5:dc:e4:d8:dd:5b:23:14:07:3e:39:
dd:75:98:53
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNEvnp7O3CpUrAZWgYK4CeIhhuUEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNDI3MDAwMDAwWhcNMjQwNjAxMjM1OTU5
WjB6MUkwRwYDVQQFE0AwNGMxMThmMWEzYzcyMzg4NWNiNmUzZmM5MzEwOWUzMWM1
MzM1YzIzMmE4MzU1ODk2ZDEwODI1YzQxYzg5MGZkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDb/ngHIt9ml+YArfTuq1ka88v3lLK3aVTHtfuvQPOiCF6k
fHEcFiEiLrrsWgNwVBRN9rc+4DpTVgPHRq94LvqwiB1t+rheXR7qZwMaDmtwTf90
bmlZ71uB/G0TJ1/s/OEQ6bTwxgCl/DaCWy0X1/Q0rSffq/+H/5KAMdQOOviXA97f
FCnLnYbHEfn2bKmnrwWGE2dWZphi5RLfLFTNOBzb7/QVrOqqC6XKRapcVCGpr7Fi
odL2qG/v4VD73L6cXPgu+AIKGCYVlNBC23RDS1Q/kmTKZlgfUXQ7KoEX13NOEmut
dXWfxNTSOOxhc5UkSt/gFRhaQbkKWKKw0FSfGByxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUiRikxzIMVVsmCcfis2L31VSMLYMwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2FhYjhjNjgxLTljMDUtNDJiMS04ZjcyLTZlZmZmNzAyMmI1OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACuSFb11dYBgoy63uLej2kGJI2lj
0rSdk0oLdVA9KSIGHfR1BaknNlaRYcRxLGeESviDSytd5XVovgLE7Il+9HPvjC1J
2B29IktVXeVdtAqGSFrGbkqkV+nhUXdovmQkOsys+iReRvcrZAnZMlnMb7ABU2Xp
wynmQjYmsCh97zABkda88xPR+ShkTHOkktT/bBYpwKU6OQr2wMtXjia6JrimGwlM
pwXqe8BqD/7n+XIM7foqh/Hq0hGESIfXKUr/VIzFueW+R8zbGuqtbbb5NW0KxvOj
AQw4cfup2wLMU9lmB/GdnaIgVfJxNcwn0a+QUI3l3OTY3VsjFAc+Od11mFM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:47:32 2025 by rpki-client