Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d379cf6a-ae3c-41f6-b902-381a47f96ab4.roa
File: d379cf6a-ae3c-41f6-b902-381a47f96ab4.roa (raw, json)
Hash identifier: pfwGF0uZTs+LzUrhIodeAc2dm2DPvRZFlLORj5Fxl60=
Subject key identifier: 00:77:7E:EE:D2:EB:73:E8:38:E8:3F:B8:3C:EC:00:AE:63:E7:2E:2B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7CEC363ECFC583C61358F45F82B32BC8A9840450
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d379cf6a-ae3c-41f6-b902-381a47f96ab4.roa
Signing time: Sun 01 Oct 2023 00:00:00 +0000
ROA not before: Sun 01 Oct 2023 00:00:00 +0000
ROA not after: Sun 05 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:ec:36:3e:cf:c5:83:c6:13:58:f4:5f:82:b3:2b:c8:a9:84:04:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 1 00:00:00 2023 GMT
Not After : Nov 5 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:35:ee:b3:a7:48:3e:54:70:66:be:e0:ca:
d5:ea:bf:b5:df:d3:ed:2b:16:99:ee:ee:e9:36:19:
cb:77:6e:91:c5:c8:ff:1b:92:ad:7d:06:fe:b2:ca:
c9:7a:d5:b9:4d:1b:7a:86:ce:55:89:77:39:12:db:
11:53:57:96:49:22:b1:bf:42:35:4c:04:6e:c7:77:
b5:ac:8a:8d:b4:6e:db:b8:80:36:1b:bc:22:05:7f:
5e:d6:b8:d1:44:1a:00:02:e2:17:c1:d9:dd:70:df:
66:d5:9a:c1:5f:15:42:fc:6b:9e:bc:18:43:fa:cd:
c9:de:62:aa:01:de:56:c3:ab:cb:6b:28:09:19:47:
17:d2:3b:f6:44:a3:01:11:5a:fb:4c:fb:9c:24:1d:
13:40:14:64:0e:70:91:f6:f7:dd:c9:06:2d:fc:9f:
7a:79:d7:0d:de:4f:cd:9d:a7:f8:4e:27:23:27:53:
a6:26:cc:cb:02:30:7e:8f:4b:9d:a9:a3:47:de:12:
d1:08:eb:4c:92:b2:ed:f9:d2:c5:76:49:4f:a1:3d:
d8:54:b8:2b:f8:e9:25:29:77:8a:25:06:7f:a0:4c:
bc:63:a2:54:8a:ff:bb:0d:94:55:2d:a5:d0:0e:12:
15:a3:3b:44:1d:e9:21:58:e2:7f:00:c7:0e:84:24:
94:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:77:7E:EE:D2:EB:73:E8:38:E8:3F:B8:3C:EC:00:AE:63:E7:2E:2B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d379cf6a-ae3c-41f6-b902-381a47f96ab4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
27:85:4b:d8:a1:ef:20:d8:03:50:bb:17:ba:3d:4e:0d:ac:91:
4d:a1:02:29:cf:b6:95:b4:e5:c2:e2:a9:fd:09:7f:d2:c2:03:
22:37:66:c0:2a:29:71:a7:c2:33:b5:f0:d2:ed:9c:83:95:1e:
c4:22:55:5e:c7:46:92:d1:aa:1c:51:96:5b:60:d1:2b:e1:fe:
13:58:29:ca:3d:b7:18:a6:96:e5:e2:c4:d5:8e:0e:90:b2:a5:
68:70:cc:fd:51:bd:e2:10:32:b4:02:be:c2:a4:52:52:5c:d0:
e8:7c:c7:7c:40:f8:0a:98:14:94:c2:e8:9d:a9:df:ff:af:45:
63:8b:c8:30:6d:24:4e:9d:03:35:4c:a4:38:83:fd:cd:e1:df:
3d:82:56:7e:25:0a:84:00:48:cd:22:ad:51:e2:61:37:83:9c:
d7:02:2e:34:a7:62:b8:68:5a:77:ef:f0:40:0c:6a:a2:7a:bc:
a0:5a:99:a0:10:36:f7:a5:ec:f7:0d:35:78:bd:ab:4e:3a:ba:
30:c4:f6:73:69:3d:de:37:7e:40:06:91:d8:4b:1d:00:70:b4:
1d:0e:15:65:8a:21:76:ef:6d:d9:f6:35:88:9f:9c:13:a8:56:
a0:b7:6d:50:2d:3f:b0:8c:eb:2a:fd:ba:25:b9:82:af:3f:b6:
56:3c:ab:3a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfOw2Ps/Fg8YTWPRfgrMryKmEBFAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMDAxMDAwMDAwWhcNMjMxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AyYWI5MDljNjE1Y2NjNGRlZDhlMTUzNTI0MTEwOWI5ZmUx
MTUxM2EyNWMxNzVjYTYyNzE0NGQ5MGUzOThiOWMxMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC17DXus6dIPlRwZr7gytXqv7Xf0+0rFpnu7uk2Gct3bpHF
yP8bkq19Bv6yysl61blNG3qGzlWJdzkS2xFTV5ZJIrG/QjVMBG7Hd7Wsio20btu4
gDYbvCIFf17WuNFEGgAC4hfB2d1w32bVmsFfFUL8a568GEP6zcneYqoB3lbDq8tr
KAkZRxfSO/ZEowERWvtM+5wkHRNAFGQOcJH2993JBi38n3p51w3eT82dp/hOJyMn
U6YmzMsCMH6PS52po0feEtEI60ySsu350sV2SU+hPdhUuCv46SUpd4olBn+gTLxj
olSK/7sNlFUtpdAOEhWjO0Qd6SFY4n8Axw6EJJTnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUAHd+7tLrc+g46D+4POwArmPnLiswHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2QzNzljZjZhLWFlM2MtNDFmNi1iOTAyLTM4MWE0N2Y5NmFiNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACeFS9ih7yDYA1C7F7o9Tg2skU2h
AinPtpW05cLiqf0Jf9LCAyI3ZsAqKXGnwjO18NLtnIOVHsQiVV7HRpLRqhxRlltg
0Svh/hNYKco9tximluXixNWODpCypWhwzP1RveIQMrQCvsKkUlJc0Oh8x3xA+AqY
FJTC6J2p3/+vRWOLyDBtJE6dAzVMpDiD/c3h3z2CVn4lCoQASM0irVHiYTeDnNcC
LjSnYrhoWnfv8EAMaqJ6vKBamaAQNvel7PcNNXi9q046ujDE9nNpPd43fkAGkdhL
HQBwtB0OFWWKIXbvbdn2NYifnBOoVqC3bVAtP7CM6yr9uiW5gq8/tlY8qzo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:43:48 2025 by rpki-client