Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e33213d1-04c9-4aff-8c52-5807d5828111.roa
File: e33213d1-04c9-4aff-8c52-5807d5828111.roa (raw, json)
Hash identifier: Mqgd84AVbRHbWfs810Tk68SkLlgu22QFNTYAH3gIVFo=
Subject key identifier: 80:F7:17:EA:5C:59:02:F3:B9:3D:BB:20:58:C1:56:C2:72:DC:64:22
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3FCF65378E6A651245999B86A12BBE2BC75BDEE7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e33213d1-04c9-4aff-8c52-5807d5828111.roa
Signing time: Sun 29 Oct 2023 00:00:00 +0000
ROA not before: Sun 29 Oct 2023 00:00:00 +0000
ROA not after: Sun 03 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:cf:65:37:8e:6a:65:12:45:99:9b:86:a1:2b:be:2b:c7:5b:de:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 29 00:00:00 2023 GMT
Not After : Dec 3 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:70:a4:dc:4e:7d:d7:7f:8d:41:95:86:64:
ba:b4:8e:55:e8:0e:65:ec:73:e7:f3:14:9a:d7:7c:
3e:34:f5:1c:02:c3:3c:b8:25:a7:b5:7b:9a:a8:ff:
7c:3e:9a:36:58:4f:5e:7f:45:af:7c:5c:c6:8a:87:
ce:5b:31:de:e9:29:95:4e:d9:62:f9:ff:73:97:7a:
99:4d:83:2a:2d:92:7f:2b:86:42:4f:3b:c1:d6:a5:
3c:93:33:97:5c:6e:53:13:31:db:2e:32:49:1c:4e:
cb:56:02:15:87:ab:a0:0a:23:c6:c8:26:c1:26:bb:
75:08:eb:e9:94:3f:79:d5:8e:2d:51:bf:0d:ac:3f:
c9:73:a7:1c:d2:8e:1a:0f:da:34:1b:67:e8:85:02:
96:ca:be:3d:0e:d3:03:e2:91:7d:d7:a3:de:ba:cf:
fe:6a:f2:b2:d1:8c:75:60:e7:72:f3:b7:57:bf:a6:
1e:68:53:f0:f9:f1:16:58:6a:5b:9f:bc:1f:2c:05:
3b:a1:c4:c9:d1:33:aa:3f:af:fc:bd:8f:db:84:30:
83:7e:df:85:c0:3f:7d:f0:72:a0:50:25:4e:05:2c:
81:60:92:5e:e2:80:71:88:75:8b:3a:e9:46:f3:e3:
0d:41:75:e4:4c:72:89:68:d0:44:2d:d0:e0:39:b3:
57:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F7:17:EA:5C:59:02:F3:B9:3D:BB:20:58:C1:56:C2:72:DC:64:22
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e33213d1-04c9-4aff-8c52-5807d5828111.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:1f:2a:1f:8f:7c:2b:73:7f:f7:8a:11:b1:da:3b:86:9c:a5:
23:95:29:c3:89:88:63:61:e3:54:4f:42:75:c0:f1:1f:6d:8a:
70:6c:19:19:8e:44:b1:8a:ee:1d:c1:2b:15:a7:29:1a:10:5f:
57:c9:ea:49:61:ac:9d:53:44:2b:7a:d4:a1:a6:7e:d1:f2:fd:
0b:e9:a0:2d:21:5a:b7:a1:6c:09:51:97:3f:72:05:bf:3d:a4:
72:fb:49:0f:96:d1:b3:f3:c5:60:21:da:9f:93:0b:a9:9f:54:
39:29:91:13:de:39:8b:8a:3e:05:42:41:7c:29:29:7e:0b:ca:
4d:9f:c2:16:43:32:fc:8f:b2:d2:b0:f4:b3:a7:7a:b5:cf:14:
7b:7f:81:50:f2:9b:21:d1:6c:b7:f0:be:bf:f6:76:0d:b9:52:
f0:12:68:f9:2d:d0:f3:d2:28:94:8a:dd:17:13:94:55:9b:58:
6e:0d:a2:f6:66:62:75:3d:0a:d5:da:7d:a3:2a:d0:2a:d8:5c:
dd:07:11:47:fc:fd:3a:e5:2e:6d:14:8f:ea:10:91:16:90:a6:
85:27:34:47:dc:8b:ee:02:52:3f:9d:84:d0:84:f7:fd:97:ff:
7a:a6:e5:0e:4f:f9:2d:89:50:c7:ef:80:d5:c8:ef:25:93:61:
d9:fa:f9:af
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUP89lN45qZRJFmZuGoSu+K8db3ucwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMDI5MDAwMDAwWhcNMjMxMjAzMjM1OTU5
WjB6MUkwRwYDVQQFE0BiNzY2Y2E2NDIzMTBkYjk3YjA3MDZjYzI1NTg0MDgyZmM0
ZmNlYTI4YWYwOWIzODI1ZDM2YWI1MGFiZTQxZDFlMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJVXCk3E5913+NQZWGZLq0jlXoDmXsc+fzFJrXfD409RwC
wzy4Jae1e5qo/3w+mjZYT15/Ra98XMaKh85bMd7pKZVO2WL5/3OXeplNgyotkn8r
hkJPO8HWpTyTM5dcblMTMdsuMkkcTstWAhWHq6AKI8bIJsEmu3UI6+mUP3nVji1R
vw2sP8lzpxzSjhoP2jQbZ+iFApbKvj0O0wPikX3Xo966z/5q8rLRjHVg53Lzt1e/
ph5oU/D58RZYalufvB8sBTuhxMnRM6o/r/y9j9uEMIN+34XAP33wcqBQJU4FLIFg
kl7igHGIdYs66Ubz4w1BdeRMcolo0EQt0OA5s1fxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUgPcX6lxZAvO5PbsgWMFWwnLcZCIwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2UzMzIxM2QxLTA0YzktNGFmZi04YzUyLTU4MDdkNTgyODExMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABofKh+PfCtzf/eKEbHaO4acpSOV
KcOJiGNh41RPQnXA8R9tinBsGRmORLGK7h3BKxWnKRoQX1fJ6klhrJ1TRCt61KGm
ftHy/QvpoC0hWrehbAlRlz9yBb89pHL7SQ+W0bPzxWAh2p+TC6mfVDkpkRPeOYuK
PgVCQXwpKX4Lyk2fwhZDMvyPstKw9LOnerXPFHt/gVDymyHRbLfwvr/2dg25UvAS
aPkt0PPSKJSK3RcTlFWbWG4NovZmYnU9CtXafaMq0CrYXN0HEUf8/TrlLm0Uj+oQ
kRaQpoUnNEfci+4CUj+dhNCE9/2X/3qm5Q5P+S2JUMfvgNXI7yWTYdn6+a8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:17:16 2025 by rpki-client