Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cecc0698-9635-445d-a04c-bebcc34d9805.roa
File: cecc0698-9635-445d-a04c-bebcc34d9805.roa (raw, json)
Hash identifier: avqS6px7iYH9vp7KHu2R32Dj9VLVuCalFzisgsrLka0=
Subject key identifier: 19:F6:46:F5:5A:DB:86:D8:69:DB:A6:A7:03:65:8E:71:41:51:C8:58
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 16C07E38C784907C6D93EAE9AC9489F8CD2FA3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cecc0698-9635-445d-a04c-bebcc34d9805.roa
Signing time: Sun 26 Jan 2025 00:00:00 +0000
ROA not before: Sun 26 Jan 2025 00:00:00 +0000
ROA not after: Sun 02 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:c0:7e:38:c7:84:90:7c:6d:93:ea:e9:ac:94:89:f8:cd:2f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 26 00:00:00 2025 GMT
Not After : Mar 2 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b2:5b:49:91:03:1d:01:e8:7c:1d:1b:5c:bf:
95:6e:9b:19:3b:65:2d:a4:db:46:ba:5e:e0:89:c1:
37:b0:02:d0:0f:de:4e:87:7c:05:1f:0d:ba:a1:04:
ef:9c:11:98:ea:0b:dc:3f:bc:19:51:7a:1d:07:8a:
62:e9:07:e3:a3:3d:04:11:17:1e:1f:90:53:d6:5c:
8d:c2:dd:d4:76:42:91:36:34:0f:60:4f:4a:82:d3:
34:e9:ac:e3:b9:e4:4f:8f:23:10:c1:0a:57:e3:6d:
eb:e2:9f:2a:dc:5d:c2:ab:6c:b3:4a:b2:b3:77:cd:
f0:21:60:c3:ff:a6:36:2b:5b:89:d7:a9:2c:a9:87:
e9:98:10:32:ba:5f:55:79:f7:f6:88:78:e6:75:fd:
97:42:46:f2:f9:a3:a0:64:bb:47:a4:b1:4f:de:98:
65:f4:98:5f:d8:2f:a2:f2:2f:c9:77:9f:13:71:9b:
ba:48:f8:06:2d:4f:f2:ea:3b:77:e9:38:21:85:c1:
7f:f5:90:8f:8a:40:f1:24:cd:29:87:1d:98:ea:cb:
60:60:59:89:6b:49:cd:58:80:4e:07:8e:4d:31:4f:
d4:df:76:b6:ff:7c:70:e8:38:55:6a:ea:86:ac:7e:
4f:d9:f0:15:3c:19:5c:92:fb:3d:ba:ec:13:0e:7d:
0b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F6:46:F5:5A:DB:86:D8:69:DB:A6:A7:03:65:8E:71:41:51:C8:58
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cecc0698-9635-445d-a04c-bebcc34d9805.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:40:bd:70:91:ad:28:7b:61:ff:d9:16:3c:21:60:a1:24:60:
05:fc:c7:a8:71:fa:0e:82:a5:75:f5:e4:37:f1:7c:61:6a:ba:
6c:1e:82:02:b2:3c:8c:fc:85:a5:5d:43:9d:98:fb:f5:a8:82:
6c:32:8c:55:48:e0:72:15:a7:b6:56:b9:3b:e1:f1:ac:45:be:
7a:c4:26:aa:bd:df:ed:95:80:7d:36:4a:12:bf:ee:a6:20:d4:
33:f5:df:58:7b:b6:b2:62:65:85:3b:c7:21:98:ba:cb:8a:8d:
97:56:55:a8:1c:0a:42:0f:28:01:e6:a3:e5:cf:e2:74:c7:6b:
43:89:ff:01:24:02:be:6e:a5:c3:5e:cf:d8:34:af:56:64:ea:
7f:68:06:01:f4:8a:cd:f9:5c:0b:8b:64:22:36:03:ba:b4:0f:
2e:b2:89:15:0e:a2:6f:79:db:2a:78:5b:a5:5d:e2:81:e7:11:
20:3a:fb:5c:31:ba:80:eb:d9:c2:6b:ae:c8:fd:aa:93:17:3f:
c7:df:87:3a:ce:49:8a:5e:91:87:18:30:e9:6e:af:60:d7:37:
8f:39:76:99:d5:9e:73:90:54:9a:c6:63:44:cd:1b:d1:c5:2a:
79:07:9a:91:77:9d:4a:52:e9:ae:b8:7b:df:0d:b3:47:7d:73:
78:b1:9b:cb
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgITFsB+OMeEkHxtk+rprJSJ+M0vozANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzIyNzhhYWI4NzhmMjY2MmNlMTRlOTA1ZTE4ZWJjYjc1MjJm
OTJiMzY4NGJjNDg2NWI0ZDAeFw0yNTAxMjYwMDAwMDBaFw0yNTAzMDIyMzU5NTla
MHoxSTBHBgNVBAUTQGQ0MjZhYTExMDkyMGRkZjNlMjU4NzUzNjU1MGY5NDczNjU5
OWRiNDIzMTc2ODg1MDhmYWZmOGQxOWM3NGQwZTgxLTArBgNVBAMTJGMwY2UyM2Vh
LTQzZmMtNGJlNC1iZWVlLWMwMTQ3ODEyMmEwZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANeyW0mRAx0B6HwdG1y/lW6bGTtlLaTbRrpe4InBN7AC0A/e
Tod8BR8NuqEE75wRmOoL3D+8GVF6HQeKYukH46M9BBEXHh+QU9ZcjcLd1HZCkTY0
D2BPSoLTNOms47nkT48jEMEKV+Nt6+KfKtxdwqtss0qys3fN8CFgw/+mNitbidep
LKmH6ZgQMrpfVXn39oh45nX9l0JG8vmjoGS7R6SxT96YZfSYX9gvovIvyXefE3Gb
ukj4Bi1P8uo7d+k4IYXBf/WQj4pA8STNKYcdmOrLYGBZiWtJzViATgeOTTFP1N92
tv98cOg4VWrqhqx+T9nwFTwZXJL7PbrsEw59C6sCAwEAAaOCArEwggKtMB0GA1Ud
DgQWBBQZ9kb1WtuG2GnbpqcDZY5xQVHIWDAfBgNVHSMEGDAWgBRVqN1F2UQT+dGS
9Sxjzoz7xhSWuDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
MDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzE0MzNlYmZmLWRm
ZDYtNGM1Yy1iN2ZmLTk5Yzg1MTM5ZDRhOC8yNzhhYWI4NzhmMjY2MmNlMTRlOTA1
ZTE4ZWJjYjc1MjJmOTJiMzY4NGJjNDg2NWI0ZC5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8xNmYxZmZlZS03NDYxLTQ2NzQtYmIwNS1mZGRl
ZmE5YTAyYzYvY2VjYzA2OTgtOTYzNS00NDVkLWEwNGMtYmViY2MzNGQ5ODA1LnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUt
ZmRkZWZhOWEwMmM2L0ptTE9GT2tGNFk2OHQxSXZrck5vUzhTR1cwMC5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMckeDANBgkqhkiG9w0BAQsFAAOCAQEAskC9cJGtKHth/9kWPCFgoSRgBfzH
qHH6DoKldfXkN/F8YWq6bB6CArI8jPyFpV1DnZj79aiCbDKMVUjgchWntla5O+Hx
rEW+esQmqr3f7ZWAfTZKEr/upiDUM/XfWHu2smJlhTvHIZi6y4qNl1ZVqBwKQg8o
Aeaj5c/idMdrQ4n/ASQCvm6lw17P2DSvVmTqf2gGAfSKzflcC4tkIjYDurQPLrKJ
FQ6ib3nbKnhbpV3igecRIDr7XDG6gOvZwmuuyP2qkxc/x9+HOs5Jil6Rhxgw6W6v
YNc3jzl2mdWec5BUmsZjRM0b0cUqeQeakXedSlLprrh73w2zR31zeLGbyw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 11:47:00 2025 by rpki-client