Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d5eed30f-4fed-4ccb-8b56-9ba8f09c8b67.roa
File: d5eed30f-4fed-4ccb-8b56-9ba8f09c8b67.roa (raw, json)
Hash identifier: e5wlGPAtp3aQPJccDh+ChTFs5/W+f1XMBqPvA/w0hdU=
Subject key identifier: 9E:A6:2F:F4:BC:F6:B5:95:E5:AB:62:40:8A:C5:A8:D5:42:60:8E:B7
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 79969CE28E2BFAE0BC7E3F6505A792B6C434C806
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d5eed30f-4fed-4ccb-8b56-9ba8f09c8b67.roa
Signing time: Tue 16 Jan 2024 00:00:00 +0000
ROA not before: Tue 16 Jan 2024 00:00:00 +0000
ROA not after: Tue 20 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:96:9c:e2:8e:2b:fa:e0:bc:7e:3f:65:05:a7:92:b6:c4:34:c8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 16 00:00:00 2024 GMT
Not After : Feb 20 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:ef:7f:57:2d:1b:76:5d:87:58:e7:02:a8:
b8:b5:a0:63:3a:8f:b9:72:f8:05:0e:c6:ae:34:30:
74:5c:8a:49:f3:ad:e7:1c:a8:9b:73:a3:94:6b:68:
93:89:ef:a0:11:31:49:f7:18:0d:31:b1:ee:c9:f6:
97:37:53:50:2d:62:d8:36:af:ea:df:fe:92:8f:8e:
b7:a2:63:d5:c2:01:36:e5:63:69:a8:6c:14:e7:32:
4b:c6:0f:2f:5e:26:d1:66:cc:e4:24:08:f4:2a:c4:
79:cb:26:32:09:b9:ae:93:d1:d1:19:67:40:c9:cd:
45:11:1a:ce:9d:07:9b:1e:a9:58:d2:c3:1b:72:cc:
9d:da:f8:4f:82:8a:14:4a:90:f8:66:80:74:77:9f:
40:96:7a:34:db:66:27:c9:9f:5a:3c:1b:79:40:85:
5d:98:2d:e9:e1:01:33:08:52:ba:61:41:a0:26:23:
21:f5:55:71:c9:81:95:23:05:c9:de:b4:1e:34:e2:
ed:24:76:73:d8:b4:c6:d7:00:f8:ea:cc:3f:3d:0f:
9e:80:dd:77:10:48:03:76:7e:d4:45:14:34:fb:10:
36:26:8e:84:1e:fa:68:30:f5:38:d7:b8:ba:0b:a8:
e7:af:25:13:06:1c:00:2f:89:5a:4b:14:b5:68:99:
6f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A6:2F:F4:BC:F6:B5:95:E5:AB:62:40:8A:C5:A8:D5:42:60:8E:B7
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d5eed30f-4fed-4ccb-8b56-9ba8f09c8b67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
95:6f:38:e6:16:98:68:fa:33:b8:ee:77:e6:be:9d:c4:d6:7b:
e9:19:4e:32:a2:fa:27:13:12:e4:cc:6f:f8:0c:2e:f7:72:4d:
56:bc:39:17:20:c1:04:25:40:0d:dd:03:3c:99:6f:40:7f:6e:
7c:4c:6f:c0:66:59:dd:89:be:d7:06:bb:7f:fa:d8:82:9b:c0:
a9:ed:5e:33:08:1a:22:76:a6:4f:3e:07:d2:fb:d8:c9:f3:16:
83:8b:e1:d4:0a:14:e3:01:d8:ea:68:9f:09:f2:36:e6:82:a5:
ee:fd:11:d2:08:5b:e0:c1:23:66:28:1b:11:2d:6b:55:20:0f:
ff:fc:4e:5e:41:aa:ba:59:aa:ef:5f:56:ac:ca:e0:c2:9f:dc:
c1:3a:95:69:e7:3e:a1:df:11:43:5b:0f:89:7c:cd:d5:1e:43:
6c:cf:70:c8:42:da:ec:5d:5a:02:c7:f1:a2:dc:63:23:73:6b:
56:f0:90:a1:ac:a1:51:d0:e6:8a:04:e2:0a:ac:75:17:a3:39:
04:8f:29:9e:22:53:04:3a:4a:b4:bc:a6:19:8c:3d:10:f5:ac:
e6:98:f1:59:02:d8:49:2a:b8:4a:f1:d2:f6:8c:5a:14:32:0e:
d8:d3:a2:39:25:95:31:02:02:52:34:75:18:83:ba:f7:27:e2:
c2:19:19:6b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUeZac4o4r+uC8fj9lBaeStsQ0yAYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwMTE2MDAwMDAwWhcNMjQwMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AxMjJkMjFkM2NiNjc5NTg5NTQ5OTEyOTRhNDhmZWQxOTIy
ZTA1ZWM4NjA5M2NkZGI2Y2U5YmYzOTQ1NmQ1Yjg5MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1Ze9/Vy0bdl2HWOcCqLi1oGM6j7ly+AUOxq40MHRciknz
reccqJtzo5RraJOJ76ARMUn3GA0xse7J9pc3U1AtYtg2r+rf/pKPjreiY9XCATbl
Y2mobBTnMkvGDy9eJtFmzOQkCPQqxHnLJjIJua6T0dEZZ0DJzUURGs6dB5seqVjS
wxtyzJ3a+E+CihRKkPhmgHR3n0CWejTbZifJn1o8G3lAhV2YLenhATMIUrphQaAm
IyH1VXHJgZUjBcnetB404u0kdnPYtMbXAPjqzD89D56A3XcQSAN2ftRFFDT7EDYm
joQe+mgw9TjXuLoLqOevJRMGHAAviVpLFLVomW+bAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUnqYv9Lz2tZXlq2JAisWo1UJgjrcwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2Q1ZWVkMzBmLTRmZWQtNGNjYi04YjU2LTliYThmMDljOGI2Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJVvOOYWmGj6M7jud+a+ncTWe+kZ
TjKi+icTEuTMb/gMLvdyTVa8ORcgwQQlQA3dAzyZb0B/bnxMb8BmWd2JvtcGu3/6
2IKbwKntXjMIGiJ2pk8+B9L72MnzFoOL4dQKFOMB2OponwnyNuaCpe79EdIIW+DB
I2YoGxEta1UgD//8Tl5BqrpZqu9fVqzK4MKf3ME6lWnnPqHfEUNbD4l8zdUeQ2zP
cMhC2uxdWgLH8aLcYyNza1bwkKGsoVHQ5ooE4gqsdRejOQSPKZ4iUwQ6SrS8phmM
PRD1rOaY8VkC2EkquErx0vaMWhQyDtjTojkllTECAlI0dRiDuvcn4sIZGWs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:40 2025 by rpki-client