Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b7746e91-6feb-460d-9850-108fca71db71.roa
File: b7746e91-6feb-460d-9850-108fca71db71.roa (raw, json)
Hash identifier: i6jOr0AROctzxoVSzXKKvD8Ug5Tjb+09ERzttGn20pc=
Subject key identifier: 25:C6:4A:EA:D8:B3:21:4F:A4:DA:0E:29:DA:5E:A2:F2:F6:28:0F:06
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 245608F7EE2C70E9ED256555074FCDC96121C855
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b7746e91-6feb-460d-9850-108fca71db71.roa
Signing time: Wed 06 Nov 2024 00:00:00 +0000
ROA not before: Wed 06 Nov 2024 00:00:00 +0000
ROA not after: Wed 11 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:56:08:f7:ee:2c:70:e9:ed:25:65:55:07:4f:cd:c9:61:21:c8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 6 00:00:00 2024 GMT
Not After : Dec 11 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:3e:c6:61:20:b5:77:5d:a2:74:81:b9:05:
03:5d:35:23:05:83:ea:6b:5e:e1:b0:86:71:02:67:
d7:31:05:c4:68:6b:c5:ac:48:42:73:2e:01:b7:d4:
ae:3c:65:ad:a0:92:0a:30:a3:16:2d:ca:ba:4b:06:
88:f4:df:aa:79:b5:15:ed:d1:c8:a0:d5:ae:ff:f4:
ed:ea:cf:08:f3:4d:eb:43:14:5e:7f:f5:ce:1f:32:
fc:b2:80:44:45:67:0c:2b:26:e7:a3:7d:01:8d:60:
f6:0d:1c:0a:54:ea:b6:46:c8:ef:f2:a1:66:53:ac:
19:b7:a7:4c:57:50:c0:72:be:8b:5d:33:d6:0f:ed:
0e:00:3b:36:6b:ee:1a:15:95:f2:04:c9:ac:f4:b2:
87:19:18:d3:54:51:e3:50:19:b1:c2:44:77:40:40:
9c:b8:7d:fd:df:0a:0f:79:37:e6:c3:0e:05:d9:6a:
09:06:99:61:de:75:eb:ef:39:8a:a2:40:48:cd:97:
c2:cc:99:75:7c:81:49:01:d4:a5:be:4a:32:10:8a:
b3:39:4a:f3:da:81:41:04:2e:10:b2:4f:a6:52:6d:
6a:ee:cf:c9:51:ef:cc:d5:43:51:d2:a9:dd:fb:be:
6e:48:81:42:7c:4e:57:fd:21:09:e8:38:c6:4c:c3:
e1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C6:4A:EA:D8:B3:21:4F:A4:DA:0E:29:DA:5E:A2:F2:F6:28:0F:06
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b7746e91-6feb-460d-9850-108fca71db71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:b6:b6:41:e9:0e:21:a1:9e:e2:bf:35:9e:d3:8c:30:aa:20:
bc:77:1a:ac:84:a6:32:82:1c:b0:2b:c1:9a:01:bb:b3:58:9c:
77:bc:46:6f:c9:19:9b:7a:a5:e3:2c:d2:b5:e6:2d:bf:e5:01:
97:db:f4:ba:7c:0a:7e:83:f4:93:31:ec:d9:fa:3c:88:82:c9:
dc:3f:af:fd:4c:43:ad:a7:2e:1a:03:00:55:05:60:44:66:59:
ff:c1:07:2e:5d:b6:dd:aa:6b:51:39:d6:03:f9:63:1b:6e:d9:
ef:52:ae:67:ae:cb:91:56:20:97:8f:f0:74:77:0a:c9:e8:83:
ed:03:f9:5a:3b:8a:2e:f9:2d:22:9e:4d:60:80:52:81:9c:f5:
48:0f:df:c0:c2:0d:5b:c1:56:05:0d:a7:b8:0d:17:f1:29:44:
3c:c4:91:73:bb:26:95:a3:c7:13:0a:d5:65:bf:01:01:7f:38:
ca:73:1c:88:3d:30:2e:0b:eb:f1:c9:9e:8f:4f:fd:5f:72:4d:
61:de:e8:a4:3a:a1:13:b9:2d:11:8c:d1:13:d5:3e:28:f8:e4:
33:95:b1:ba:33:65:f7:5e:98:6c:4f:7a:d6:23:dd:67:ce:d9:
49:80:74:c8:ce:ff:16:f5:50:9c:78:e0:0e:a3:da:1a:73:8f:
88:83:e9:f6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJFYI9+4scOntJWVVB0/NyWEhyFUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMTA2MDAwMDAwWhcNMjQxMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0A1ODI0OTY1MDQxOTZmYzg0NTRmMmNmNGQ3Njc0NWRkY2Rl
M2Y4YjRlNTAzY2NjMWZhM2ZhNDAzNTVmNjFmN2FhMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDIuz7GYSC1d12idIG5BQNdNSMFg+prXuGwhnECZ9cxBcRo
a8WsSEJzLgG31K48Za2gkgowoxYtyrpLBoj036p5tRXt0cig1a7/9O3qzwjzTetD
FF5/9c4fMvyygERFZwwrJuejfQGNYPYNHApU6rZGyO/yoWZTrBm3p0xXUMByvotd
M9YP7Q4AOzZr7hoVlfIEyaz0socZGNNUUeNQGbHCRHdAQJy4ff3fCg95N+bDDgXZ
agkGmWHedevvOYqiQEjNl8LMmXV8gUkB1KW+SjIQirM5SvPagUEELhCyT6ZSbWru
z8lR78zVQ1HSqd37vm5IgUJ8Tlf9IQnoOMZMw+GLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUJcZK6tizIU+k2g4p2l6i8vYoDwYwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2I3NzQ2ZTkxLTZmZWItNDYwZC05ODUwLTEwOGZjYTcxZGI3MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAH22tkHpDiGhnuK/NZ7TjDCqILx3
GqyEpjKCHLArwZoBu7NYnHe8Rm/JGZt6peMs0rXmLb/lAZfb9Lp8Cn6D9JMx7Nn6
PIiCydw/r/1MQ62nLhoDAFUFYERmWf/BBy5dtt2qa1E51gP5Yxtu2e9Srmeuy5FW
IJeP8HR3Csnog+0D+Vo7ii75LSKeTWCAUoGc9UgP38DCDVvBVgUNp7gNF/EpRDzE
kXO7JpWjxxMK1WW/AQF/OMpzHIg9MC4L6/HJno9P/V9yTWHe6KQ6oRO5LRGM0RPV
Pij45DOVsbozZfdemGxPetYj3WfO2UmAdMjO/xb1UJx44A6j2hpzj4iD6fY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:48:17 2025 by rpki-client