Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cb946a7f-c64d-4692-b9f4-862a632f1b61.roa
File: cb946a7f-c64d-4692-b9f4-862a632f1b61.roa (raw, json)
Hash identifier: 9wq5hSC3ByeCsbwo9p+KuAFLVHATZD7OW+LxDh4AK5s=
Subject key identifier: 24:1F:C2:F4:83:AB:D9:81:2D:96:37:25:11:C4:23:86:5B:8F:9B:FF
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2A887FA07BFA782CB4E75F3E1F651B8F8720B44F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cb946a7f-c64d-4692-b9f4-862a632f1b61.roa
Signing time: Sat 23 Sep 2023 00:00:00 +0000
ROA not before: Sat 23 Sep 2023 00:00:00 +0000
ROA not after: Sat 28 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:88:7f:a0:7b:fa:78:2c:b4:e7:5f:3e:1f:65:1b:8f:87:20:b4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 23 00:00:00 2023 GMT
Not After : Oct 28 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9d:90:7a:36:84:df:d3:34:4e:f5:ad:ce:01:
3b:aa:2c:85:49:36:63:56:09:43:9d:07:f4:c3:1f:
a0:38:9d:15:a5:ba:08:1a:d2:7d:f4:e2:11:36:1d:
08:45:7d:d0:7e:4d:c9:19:cc:ed:12:37:1f:ea:25:
fe:9d:2e:79:e9:58:d6:09:73:63:27:e5:e4:e3:ab:
14:4d:d3:9e:03:e3:b8:13:c4:94:a0:3a:35:fd:58:
ea:35:a5:91:a8:ab:56:80:65:3d:25:8e:cb:e2:2e:
48:e5:89:be:8f:91:b3:59:2a:00:e0:6d:ad:2d:15:
09:58:c8:de:7e:1a:a9:55:0e:ce:43:55:e7:04:6f:
5a:85:e6:2f:55:a7:95:15:bb:5d:06:83:73:e8:b5:
5b:76:89:55:12:11:59:ff:69:59:f2:3e:d1:04:b9:
be:4c:0e:17:e2:ef:92:e2:8e:9d:de:99:e6:02:64:
64:83:6a:5a:51:71:97:71:4c:ef:7e:98:c9:33:b8:
c0:99:66:02:7a:7a:db:72:ea:7e:39:1f:ed:f5:8a:
10:ae:6b:a5:04:1f:94:e3:8c:bb:94:4d:e1:d5:43:
7f:3c:98:fe:8d:13:ca:97:ef:72:f4:a3:30:27:7e:
50:c0:6a:7e:fd:d9:eb:89:1a:a7:67:05:06:cd:91:
39:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1F:C2:F4:83:AB:D9:81:2D:96:37:25:11:C4:23:86:5B:8F:9B:FF
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cb946a7f-c64d-4692-b9f4-862a632f1b61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:15:9b:3d:7b:c6:3b:56:fb:23:3f:1b:39:ac:81:f3:7f:d1:
03:cc:d0:2e:4d:11:1d:48:37:fb:a1:80:ed:f4:29:b3:b8:42:
dc:15:76:e0:c6:cc:1d:ca:39:fc:22:37:52:78:8e:da:f7:90:
7c:f3:11:2c:6f:b4:78:a8:a4:b6:c3:d0:a5:8d:64:b5:85:3f:
6f:bb:68:08:81:95:2f:7a:5b:33:2f:55:5c:44:3c:20:49:1a:
ae:1a:16:4e:a1:e0:74:66:0b:65:b3:cd:46:53:d1:ba:b7:4e:
d7:62:82:1c:84:32:75:16:8a:ee:a7:1d:23:23:32:fd:5c:7a:
e3:f3:ad:e8:96:ab:f8:93:6a:47:9b:55:a7:51:68:f3:30:ff:
9b:33:16:fe:ce:fa:d4:eb:a4:12:6f:2f:b4:6e:44:50:d9:6d:
c0:e2:d8:94:77:7f:07:19:57:44:d2:a4:df:b3:60:90:4a:7b:
2c:8c:18:e2:6d:73:1a:20:19:7c:ba:9f:24:ce:47:9c:9e:98:
90:63:7e:2f:df:7f:ea:81:12:32:89:36:e1:aa:61:af:d0:65:
9c:35:31:b1:9a:1a:0e:6b:24:00:a3:23:a9:60:db:07:8e:14:
9a:a8:84:15:39:fc:73:84:c7:00:e3:c2:e2:aa:34:80:a2:c6:
be:3f:e3:3e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKoh/oHv6eCy0518+H2Ubj4cgtE8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwOTIzMDAwMDAwWhcNMjMxMDI4MjM1OTU5
WjB6MUkwRwYDVQQFE0A2OGQ2MzMyMjczOGYxN2Q0M2Y3ZWI4NjU1MDVhZTRlYjM5
MTQ4MDJjMjNhOTA1OWU3Y2ZhMDU4ZmU1NzU0NDg2MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDKnZB6NoTf0zRO9a3OATuqLIVJNmNWCUOdB/TDH6A4nRWl
ugga0n304hE2HQhFfdB+TckZzO0SNx/qJf6dLnnpWNYJc2Mn5eTjqxRN054D47gT
xJSgOjX9WOo1pZGoq1aAZT0ljsviLkjlib6PkbNZKgDgba0tFQlYyN5+GqlVDs5D
VecEb1qF5i9Vp5UVu10Gg3PotVt2iVUSEVn/aVnyPtEEub5MDhfi75Lijp3emeYC
ZGSDalpRcZdxTO9+mMkzuMCZZgJ6etty6n45H+31ihCua6UEH5TjjLuUTeHVQ388
mP6NE8qX73L0ozAnflDAan792euJGqdnBQbNkTkRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUJB/C9IOr2YEtljclEcQjhluPm/8wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2NiOTQ2YTdmLWM2NGQtNDY5Mi1iOWY0LTg2MmE2MzJmMWI2MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKIVmz17xjtW+yM/GzmsgfN/0QPM
0C5NER1IN/uhgO30KbO4QtwVduDGzB3KOfwiN1J4jtr3kHzzESxvtHiopLbD0KWN
ZLWFP2+7aAiBlS96WzMvVVxEPCBJGq4aFk6h4HRmC2WzzUZT0bq3TtdighyEMnUW
iu6nHSMjMv1ceuPzreiWq/iTakebVadRaPMw/5szFv7O+tTrpBJvL7RuRFDZbcDi
2JR3fwcZV0TSpN+zYJBKeyyMGOJtcxogGXy6nyTOR5yemJBjfi/ff+qBEjKJNuGq
Ya/QZZw1MbGaGg5rJACjI6lg2weOFJqohBU5/HOExwDjwuKqNICixr4/4z4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:49:20 2025 by rpki-client