Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d900fd03-8765-4045-a45c-3a32b6eeacd6.roa
File: d900fd03-8765-4045-a45c-3a32b6eeacd6.roa (raw, json)
Hash identifier: D81qYW0oKZl7e050GwLTeqyWpoGuXM8Hi25g4XUIo1Q=
Subject key identifier: E5:7F:4D:52:C5:40:A9:BF:62:92:8B:78:65:A3:A3:71:6C:38:54:03
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0CA840DD79633597122B6700C4A4AC8B892F823D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d900fd03-8765-4045-a45c-3a32b6eeacd6.roa
Signing time: Wed 26 Feb 2025 13:48:22 +0000
ROA not before: Wed 26 Feb 2025 13:48:22 +0000
ROA not after: Wed 02 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:a8:40:dd:79:63:35:97:12:2b:67:00:c4:a4:ac:8b:89:2f:82:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 26 13:48:22 2025 GMT
Not After : Apr 2 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fb:b0:73:db:b9:8e:b6:ea:fe:fe:50:52:51:
3a:96:d7:67:55:3e:d8:a0:5f:75:f7:63:e9:0f:1f:
4c:b7:92:19:39:7b:88:e2:0f:c0:02:b8:9f:7c:f8:
5e:d2:66:70:2b:f9:42:5e:a8:05:19:16:e0:88:a8:
4d:2a:04:29:fa:05:86:f9:ec:58:42:f8:e5:8b:a2:
9f:2e:29:e6:54:bd:a0:26:3e:a6:47:cf:a2:70:18:
d8:70:3b:1b:b9:be:8b:8a:6e:d2:8e:db:ee:4f:31:
fc:82:4b:02:ec:b0:2e:47:3d:ff:37:73:c6:ef:09:
cb:2c:01:90:1b:67:3d:50:7b:ff:45:91:87:44:11:
be:39:7d:01:06:e3:53:cf:28:fe:79:a5:04:ee:b9:
8f:8c:79:a2:88:11:ed:08:10:e5:27:f9:5c:8f:df:
ed:bb:b0:9b:e2:dc:f7:4e:90:4b:7a:e2:00:c9:9f:
85:57:8a:5f:fc:64:b1:26:4e:fd:3d:f6:ff:a5:13:
70:34:cd:23:12:83:a3:f0:80:e2:92:1f:d4:2d:f7:
d1:5f:7b:43:87:a8:17:da:37:55:d5:b1:ff:02:60:
e0:ff:97:15:34:1f:6a:be:c4:27:e2:92:7c:6a:f5:
b8:29:a9:f6:81:2f:6d:e4:c5:92:d8:69:b2:10:91:
e9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7F:4D:52:C5:40:A9:BF:62:92:8B:78:65:A3:A3:71:6C:38:54:03
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d900fd03-8765-4045-a45c-3a32b6eeacd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ee:62:8d:9b:d6:f3:ba:31:6c:ca:2a:d2:04:ce:9c:1b:89:
52:c8:b3:6c:f4:21:35:6b:68:1b:bb:b4:80:0f:24:5c:fd:da:
f2:c4:f7:cf:43:c5:25:20:1b:71:df:a3:d0:e0:6c:8c:42:24:
8e:65:af:71:a8:79:5d:18:64:4e:e5:32:34:4f:d0:e7:93:f2:
cf:89:11:d0:c1:19:26:ac:8e:b9:56:14:87:73:f7:90:90:27:
98:6b:74:26:58:26:ea:7e:c0:5f:65:11:08:7e:02:e5:a7:72:
cb:89:c5:fc:20:5e:bb:af:e0:2d:d4:3e:13:73:29:6c:ff:4a:
88:27:ca:29:f0:ae:f4:db:22:1a:2b:a6:39:08:f0:3f:a2:f1:
f0:a9:2f:8e:dc:cb:a0:03:7b:2a:1b:d6:b5:4a:c8:30:14:05:
ab:f5:f5:90:5f:4a:82:54:ef:f2:29:b1:5a:4d:ec:5d:8e:bf:
3a:ef:ba:01:f0:12:fb:05:4b:e7:2a:23:c9:d9:df:48:54:49:
99:90:2d:b1:a7:4f:b3:81:5f:83:07:b1:87:e7:9d:72:a2:24:
ec:76:8d:0e:f2:7a:5d:4e:d8:c3:6a:6c:2d:e5:0d:2a:e8:5f:
c5:f9:55:f7:85:07:85:cb:2b:4b:bd:46:31:4e:d7:1c:ab:21:
6a:56:2a:b5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDKhA3XljNZcSK2cAxKSsi4kvgj0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMjI2MTM0ODIyWhcNMjUwNDAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BlZTQ4NzU1NmZhYzYzOWU1NjA5MDhkYzZjYzg1NmYwMTZh
NzI2YmI4ZGU3ZWZjNjM3NmU1MGQ0NTI0YzZlNjNlMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDc+7Bz27mOtur+/lBSUTqW12dVPtigX3X3Y+kPH0y3khk5
e4jiD8ACuJ98+F7SZnAr+UJeqAUZFuCIqE0qBCn6BYb57FhC+OWLop8uKeZUvaAm
PqZHz6JwGNhwOxu5vouKbtKO2+5PMfyCSwLssC5HPf83c8bvCcssAZAbZz1Qe/9F
kYdEEb45fQEG41PPKP55pQTuuY+MeaKIEe0IEOUn+VyP3+27sJvi3PdOkEt64gDJ
n4VXil/8ZLEmTv099v+lE3A0zSMSg6PwgOKSH9Qt99Ffe0OHqBfaN1XVsf8CYOD/
lxU0H2q+xCfiknxq9bgpqfaBL23kxZLYabIQkelTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU5X9NUsVAqb9ikot4ZaOjcWw4VAMwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2Q5MDBmZDAzLTg3NjUtNDA0NS1hNDVjLTNhMzJiNmVlYWNkNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAD/uYo2b1vO6MWzKKtIEzpwbiVLI
s2z0ITVraBu7tIAPJFz92vLE989DxSUgG3Hfo9DgbIxCJI5lr3GoeV0YZE7lMjRP
0OeT8s+JEdDBGSasjrlWFIdz95CQJ5hrdCZYJup+wF9lEQh+AuWncsuJxfwgXruv
4C3UPhNzKWz/SognyinwrvTbIhorpjkI8D+i8fCpL47cy6ADeyob1rVKyDAUBav1
9ZBfSoJU7/IpsVpN7F2OvzrvugHwEvsFS+cqI8nZ30hUSZmQLbGnT7OBX4MHsYfn
nXKiJOx2jQ7yel1O2MNqbC3lDSroX8X5VfeFB4XLK0u9RjFO1xyrIWpWKrU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:38:43 2025 by rpki-client