Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b461d98d-cd9d-487f-9ca4-c667e2e1e041.roa
File: b461d98d-cd9d-487f-9ca4-c667e2e1e041.roa (raw, json)
Hash identifier: mGWJMMHll/31HfPitmMa3vQErFBJi3i16Rs+kbaNJKk=
Subject key identifier: 3F:A6:04:89:4C:A8:90:EB:8F:52:29:47:FA:12:F3:5D:5F:53:DB:FC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 77479F5824CA6B20235B43503F834DA7A92D49EC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b461d98d-cd9d-487f-9ca4-c667e2e1e041.roa
Signing time: Thu 06 Mar 2025 15:53:23 +0000
ROA not before: Thu 06 Mar 2025 15:53:23 +0000
ROA not after: Thu 10 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:47:9f:58:24:ca:6b:20:23:5b:43:50:3f:83:4d:a7:a9:2d:49:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 6 15:53:23 2025 GMT
Not After : Apr 10 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:14:4f:ff:0f:a6:98:cf:b3:ac:e0:b2:a9:
b1:68:33:db:76:db:b1:82:be:99:88:65:a9:49:c2:
0c:e8:17:60:75:7e:59:a0:43:88:b3:21:10:55:da:
8b:1f:c9:42:a9:0e:bb:7b:60:24:9c:46:45:0c:37:
0d:a5:c7:34:cf:07:ea:33:80:be:7d:b9:bd:89:00:
6c:1a:f1:08:62:70:41:8f:35:48:10:f8:87:aa:cb:
39:35:c0:54:7d:d9:bd:dd:c9:9a:d4:03:70:63:91:
11:cb:60:a2:10:dc:2d:a0:b7:e0:52:85:f7:a6:e1:
cd:12:5a:1b:0e:e5:e1:46:14:0c:22:33:08:9b:77:
08:a5:6b:13:f4:e9:21:d3:0f:6b:ce:11:60:dd:f1:
30:34:dd:02:e2:bb:44:6b:28:2d:28:55:5f:25:09:
2d:ee:50:ac:cf:b8:f2:3f:d5:50:9b:d2:59:8f:92:
72:98:08:d0:85:83:2f:a0:ed:60:a0:82:49:c7:21:
07:60:8c:f3:be:4c:a6:d4:a2:35:2a:10:e2:61:35:
c1:86:b1:ec:9a:01:ef:e0:47:3a:87:31:27:f4:83:
7c:a3:72:49:9e:29:3b:c4:a8:ee:8d:63:6c:ef:fe:
fd:a5:7e:31:6a:9c:ec:5d:ab:01:d1:4c:f8:22:e2:
65:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A6:04:89:4C:A8:90:EB:8F:52:29:47:FA:12:F3:5D:5F:53:DB:FC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b461d98d-cd9d-487f-9ca4-c667e2e1e041.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
46:66:d6:d7:93:65:de:f6:f9:64:da:0e:29:ed:ce:3b:30:d0:
75:7c:d3:60:21:7a:06:76:3f:fd:cc:b4:18:1f:a3:b8:38:81:
bf:9e:1b:3d:b0:fa:a8:15:22:7e:a5:51:01:7c:39:5c:a6:8f:
a4:98:c1:0e:f3:88:de:14:5f:78:4e:7f:53:4a:9d:9a:ac:f8:
7b:45:23:09:c0:07:5d:c4:cf:62:53:dc:46:67:71:08:56:74:
0b:3c:04:f8:65:aa:23:12:73:bf:aa:0e:06:0f:53:3f:47:cb:
40:89:5e:fa:dd:cf:46:00:af:ca:8c:17:41:fe:68:5a:43:0f:
21:7d:ee:ee:d5:88:26:0e:76:74:ad:70:93:f4:64:78:53:9a:
43:5b:bc:05:f8:a5:93:11:5f:da:6a:ff:6f:84:71:38:9b:36:
93:f2:cf:90:49:fa:e0:e1:16:2e:9c:66:38:0b:ac:0c:c3:7b:
a8:e3:dd:dc:a0:15:a9:09:fb:39:0e:c7:09:5f:2f:98:02:34:
ca:ae:aa:e7:e0:eb:28:f1:e8:35:f9:26:50:f3:7c:7b:04:12:
cd:66:0c:8d:ff:b5:35:be:25:d4:4c:82:61:5a:f4:d7:cf:d5:
9a:93:68:6a:cf:a9:fd:53:1c:43:61:8c:37:f0:a8:d4:f5:90:
b0:96:5c:27
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUd0efWCTKayAjW0NQP4NNp6ktSewwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMzA2MTU1MzIzWhcNMjUwNDEwMjM1OTU5
WjB6MUkwRwYDVQQFE0AxZjYzY2U1OGY2MDJjM2RmMWYwNzNjNTUyZWM3OTJhOThj
YmEyNzRlZDdkMjdjMDhhNTkwZjIxMjAzZGE5NzdjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4mhRP/w+mmM+zrOCyqbFoM9t227GCvpmIZalJwgzoF2B1
flmgQ4izIRBV2osfyUKpDrt7YCScRkUMNw2lxzTPB+ozgL59ub2JAGwa8QhicEGP
NUgQ+Ieqyzk1wFR92b3dyZrUA3BjkRHLYKIQ3C2gt+BShfem4c0SWhsO5eFGFAwi
MwibdwilaxP06SHTD2vOEWDd8TA03QLiu0RrKC0oVV8lCS3uUKzPuPI/1VCb0lmP
knKYCNCFgy+g7WCggknHIQdgjPO+TKbUojUqEOJhNcGGseyaAe/gRzqHMSf0g3yj
ckmeKTvEqO6NY2zv/v2lfjFqnOxdqwHRTPgi4mWXAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUP6YEiUyokOuPUilH+hLzXV9T2/wwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2I0NjFkOThkLWNkOWQtNDg3Zi05Y2E0LWM2NjdlMmUxZTA0MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEZm1teTZd72+WTaDintzjsw0HV8
02AhegZ2P/3MtBgfo7g4gb+eGz2w+qgVIn6lUQF8OVymj6SYwQ7ziN4UX3hOf1NK
nZqs+HtFIwnAB13Ez2JT3EZncQhWdAs8BPhlqiMSc7+qDgYPUz9Hy0CJXvrdz0YA
r8qMF0H+aFpDDyF97u7ViCYOdnStcJP0ZHhTmkNbvAX4pZMRX9pq/2+EcTibNpPy
z5BJ+uDhFi6cZjgLrAzDe6jj3dygFakJ+zkOxwlfL5gCNMququfg6yjx6DX5JlDz
fHsEEs1mDI3/tTW+JdRMgmFa9NfP1ZqTaGrPqf1THENhjDfwqNT1kLCWXCc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:33:47 2025 by rpki-client