Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b1c876b7-2022-49f7-8e23-50cbda09661c.roa
File: b1c876b7-2022-49f7-8e23-50cbda09661c.roa (raw, json)
Hash identifier: lkyl8wbbnu83OZ50vHqhBPuCgOlqq5631TKLtrYH+xY=
Subject key identifier: 08:1A:2F:4A:63:6F:8B:8E:A4:63:E2:54:3D:93:00:1E:E9:79:AB:F1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 376FAA88F21B222A34D71159C24CDE36C29BFB19
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b1c876b7-2022-49f7-8e23-50cbda09661c.roa
Signing time: Thu 03 Aug 2023 00:00:00 +0000
ROA not before: Thu 03 Aug 2023 00:00:00 +0000
ROA not after: Thu 07 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:6f:aa:88:f2:1b:22:2a:34:d7:11:59:c2:4c:de:36:c2:9b:fb:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 3 00:00:00 2023 GMT
Not After : Sep 7 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:87:70:c1:6f:88:9c:1f:94:24:42:71:35:5a:
45:51:6b:2b:e1:99:64:68:fd:37:dc:88:5f:88:5e:
52:87:07:46:c0:97:9a:9e:8f:3f:40:e3:f5:de:5a:
7b:eb:47:b5:88:85:31:37:ba:f8:56:72:64:2a:11:
06:7e:1c:79:66:ca:69:05:48:6a:ee:cc:60:7a:4a:
b3:f2:68:92:77:19:19:21:cb:e2:f6:83:a2:bd:6b:
39:21:19:f0:16:80:6f:13:e9:ab:de:6f:a2:1e:b8:
f4:33:f4:54:1a:e4:db:ea:de:9b:8a:0a:af:a3:6b:
09:17:1a:c5:37:97:8d:a9:47:50:97:ca:1c:37:d0:
fd:e6:a2:c0:b5:8a:c3:4d:57:89:8b:e2:ba:96:7a:
f3:64:9d:b4:ac:20:fc:a8:fe:24:b9:82:7b:61:7a:
69:92:34:da:3d:1b:32:e4:56:f3:57:3e:17:5d:7a:
51:1a:f4:b3:f7:79:78:7d:2a:e7:62:82:51:43:c2:
5c:60:ef:43:86:36:02:bc:3e:d9:c8:43:bf:45:95:
1e:07:05:4f:7c:dc:55:87:4f:5a:a9:64:72:c6:00:
1b:8c:27:d8:cf:e8:c4:9b:e3:85:dc:ea:24:31:47:
0a:e1:23:e0:9f:f9:24:b7:31:2c:02:2f:86:bf:57:
53:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1A:2F:4A:63:6F:8B:8E:A4:63:E2:54:3D:93:00:1E:E9:79:AB:F1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b1c876b7-2022-49f7-8e23-50cbda09661c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
61:b1:e4:3b:d3:e0:21:ed:62:e1:fd:c9:06:cc:f6:a4:ae:19:
75:41:d1:21:c3:3d:51:ac:b6:df:e2:be:ad:c8:24:0c:e5:ed:
ec:bb:30:92:ca:0c:2f:46:be:a5:6e:75:e8:a5:6b:6d:76:9f:
5b:a5:b8:8c:56:99:91:18:09:86:97:b7:49:7f:bf:57:6d:a0:
66:4f:2e:e1:46:f7:0c:63:39:89:2e:f4:86:e0:a5:85:ed:0a:
10:3f:ba:68:fa:aa:61:6d:d3:81:ea:34:13:1d:54:e1:c9:8b:
13:68:91:f3:6c:00:1c:ec:52:57:0b:31:17:3b:5d:99:98:17:
8d:ef:b0:9e:4d:74:16:56:1c:22:a3:a6:40:43:bf:42:a8:3c:
7f:3b:c9:1a:66:8b:43:d0:38:ae:ae:db:f1:36:82:33:30:f3:
c4:94:42:fa:bd:ff:e5:b3:bb:1a:94:29:bc:16:a0:5f:43:f7:
e8:70:fc:7f:c4:48:34:8d:d2:6e:ee:c8:42:1b:06:0d:af:35:
70:7f:b3:3d:b6:fe:64:fd:c5:dc:12:2b:f4:4a:e5:de:20:17:
5b:78:28:1d:62:9d:69:09:97:26:1c:35:38:e6:61:e7:3c:9b:
fc:ff:65:9f:0a:4a:45:e2:e5:96:05:c4:5c:54:76:a6:b9:f5:
d7:01:ba:00
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUN2+qiPIbIio01xFZwkzeNsKb+xkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwODAzMDAwMDAwWhcNMjMwOTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BkMDVkZDA2OWY1NGQ5ZDdmNmM0MTNhZjAxMDg2M2E3YTdm
NTY0M2IzZGUyNmFlYjY3YTM5ZGM3ZDZmOWNlOTI2MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDAh3DBb4icH5QkQnE1WkVRayvhmWRo/TfciF+IXlKHB0bA
l5qejz9A4/XeWnvrR7WIhTE3uvhWcmQqEQZ+HHlmymkFSGruzGB6SrPyaJJ3GRkh
y+L2g6K9azkhGfAWgG8T6aveb6IeuPQz9FQa5Nvq3puKCq+jawkXGsU3l42pR1CX
yhw30P3mosC1isNNV4mL4rqWevNknbSsIPyo/iS5gnthemmSNNo9GzLkVvNXPhdd
elEa9LP3eXh9KudiglFDwlxg70OGNgK8PtnIQ79FlR4HBU983FWHT1qpZHLGABuM
J9jP6MSb44Xc6iQxRwrhI+Cf+SS3MSwCL4a/V1MRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUCBovSmNvi46kY+JUPZMAHul5q/EwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2IxYzg3NmI3LTIwMjItNDlmNy04ZTIzLTUwY2JkYTA5NjYxYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGGx5DvT4CHtYuH9yQbM9qSuGXVB
0SHDPVGstt/ivq3IJAzl7ey7MJLKDC9GvqVudeila212n1uluIxWmZEYCYaXt0l/
v1dtoGZPLuFG9wxjOYku9IbgpYXtChA/umj6qmFt04HqNBMdVOHJixNokfNsABzs
UlcLMRc7XZmYF43vsJ5NdBZWHCKjpkBDv0KoPH87yRpmi0PQOK6u2/E2gjMw88SU
Qvq9/+WzuxqUKbwWoF9D9+hw/H/ESDSN0m7uyEIbBg2vNXB/sz22/mT9xdwSK/RK
5d4gF1t4KB1inWkJlyYcNTjmYec8m/z/ZZ8KSkXi5ZYFxFxUdqa59dcBugA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:16:03 2025 by rpki-client