Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aef0bdf3-a292-4b88-aae4-64b2dacac1c2.roa
File: aef0bdf3-a292-4b88-aae4-64b2dacac1c2.roa (raw, json)
Hash identifier: PYGkwBCWcRBvRL3MAMq/H9CriOIPRjw/qQd0OiTk7Es=
Subject key identifier: A0:98:8F:1B:AF:02:EF:CA:88:70:A2:7D:38:37:2C:BC:F4:D8:16:31
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7EAD2169E1C5630E35A0422B0BF8D167EEE5A20F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aef0bdf3-a292-4b88-aae4-64b2dacac1c2.roa
Signing time: Mon 24 Mar 2025 22:18:20 +0000
ROA not before: Mon 24 Mar 2025 22:18:20 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:ad:21:69:e1:c5:63:0e:35:a0:42:2b:0b:f8:d1:67:ee:e5:a2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 24 22:18:20 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:51:81:b2:52:ad:a3:f7:29:e9:2d:80:7e:ea:
9f:7d:74:92:97:7d:80:49:c8:b1:73:46:5d:a7:2a:
81:73:8f:8d:f0:c7:a9:f0:60:6c:fe:44:fc:0d:28:
f0:7b:48:cc:46:72:fd:e9:a3:7f:86:23:2f:78:4c:
c9:4b:06:dc:51:44:9a:03:40:5c:62:7d:bf:30:dc:
f0:76:1b:c5:47:eb:5a:4d:07:7d:7e:8a:4e:b4:a0:
8b:80:da:39:4b:ba:51:03:5b:43:28:4d:80:b5:8c:
16:9e:87:0d:bb:5b:05:1b:4d:f6:83:90:10:f3:76:
5e:a3:c4:cc:a8:09:74:19:c5:d1:3f:5b:23:25:bc:
ec:7d:85:73:ef:69:b8:75:31:88:5a:2f:0b:69:b3:
55:34:83:00:27:7a:5b:ec:e4:4d:8b:e7:15:4e:04:
fd:8e:08:a2:40:f5:3d:ee:73:0b:bb:ff:4b:6e:69:
8e:30:74:c6:4d:88:6a:8e:07:72:a7:bc:ef:a1:fe:
c4:94:46:d6:8e:03:9a:48:9c:80:f2:35:8f:6f:9c:
96:90:ad:7b:ce:5c:be:8c:bd:39:c7:9c:e9:fb:c6:
91:a3:c8:77:10:a6:b2:e8:51:b6:3f:11:ca:35:74:
36:93:8a:db:4a:c2:40:c5:e1:0f:1d:56:e7:90:94:
7c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:98:8F:1B:AF:02:EF:CA:88:70:A2:7D:38:37:2C:BC:F4:D8:16:31
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aef0bdf3-a292-4b88-aae4-64b2dacac1c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:fe:95:e1:ec:48:9f:bc:0a:54:f6:48:3b:58:9c:48:40:f6:
1a:99:58:f5:c4:ae:63:9e:be:d8:bb:4f:c7:81:e7:09:43:8b:
ca:ea:84:4b:9d:ba:91:97:b5:a0:2b:9f:59:23:25:f9:23:43:
5f:bf:53:61:3e:fe:41:19:61:19:ad:45:33:ec:a0:55:75:04:
a9:5b:20:4a:30:01:06:e0:a7:68:1f:4e:81:0b:d3:03:e8:10:
2b:c0:31:ae:a4:eb:61:6f:5c:b4:ac:b1:56:2f:a9:34:b6:d9:
c5:dc:9d:34:bf:8f:43:69:6e:fc:0b:63:0d:fd:b1:af:a6:e1:
7d:4e:e0:a4:7f:46:c6:b0:18:2b:bf:a8:bc:14:6f:73:87:f4:
17:71:ef:5a:7a:57:8e:2d:bc:64:88:16:d9:33:d4:84:d8:06:
e9:c5:7d:35:ee:56:2c:76:1e:12:f1:3e:5f:3f:19:26:46:1c:
22:d7:2f:80:6e:90:3b:10:ef:c2:02:bd:45:92:35:8c:32:f3:
ee:21:6d:16:39:e7:6f:c4:26:1d:78:35:9b:a2:e6:48:6d:44:
82:28:86:7b:b8:cf:59:2e:4f:27:27:35:f2:cc:27:be:71:94:
e2:41:56:fb:c2:76:e0:a7:87:ef:47:56:9f:07:85:0a:03:34:
6f:8f:85:78
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfq0haeHFYw41oEIrC/jRZ+7log8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMzI0MjIxODIwWhcNMjUwNDI4MjM1OTU5
WjB6MUkwRwYDVQQFE0A5MWQ4ODM5YjU0YzQ2MTU5MzNiZGY3OTZjMDc5NjM5MzNj
NzA3YmVlNmY3MjE3Mjc3MGM2YTA5M2FhOGMwNjZkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD9UYGyUq2j9ynpLYB+6p99dJKXfYBJyLFzRl2nKoFzj43w
x6nwYGz+RPwNKPB7SMxGcv3po3+GIy94TMlLBtxRRJoDQFxifb8w3PB2G8VH61pN
B31+ik60oIuA2jlLulEDW0MoTYC1jBaehw27WwUbTfaDkBDzdl6jxMyoCXQZxdE/
WyMlvOx9hXPvabh1MYhaLwtps1U0gwAnelvs5E2L5xVOBP2OCKJA9T3ucwu7/0tu
aY4wdMZNiGqOB3KnvO+h/sSURtaOA5pInIDyNY9vnJaQrXvOXL6MvTnHnOn7xpGj
yHcQprLoUbY/Eco1dDaTittKwkDF4Q8dVueQlHzbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUoJiPG68C78qIcKJ9ODcsvPTYFjEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2FlZjBiZGYzLWEyOTItNGI4OC1hYWU0LTY0YjJkYWNhYzFjMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAF3+leHsSJ+8ClT2SDtYnEhA9hqZ
WPXErmOevti7T8eB5wlDi8rqhEudupGXtaArn1kjJfkjQ1+/U2E+/kEZYRmtRTPs
oFV1BKlbIEowAQbgp2gfToEL0wPoECvAMa6k62FvXLSssVYvqTS22cXcnTS/j0Np
bvwLYw39sa+m4X1O4KR/RsawGCu/qLwUb3OH9Bdx71p6V44tvGSIFtkz1ITYBunF
fTXuVix2HhLxPl8/GSZGHCLXL4BukDsQ78ICvUWSNYwy8+4hbRY552/EJh14NZui
5khtRIIohnu4z1kuTycnNfLMJ75xlOJBVvvCduCnh+9HVp8HhQoDNG+PhXg=
-----END CERTIFICATE-----
Generated at Wed Apr 9 21:12:15 2025 by rpki-client