Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ef772b50-13bf-4fab-a099-470c53f2a28f.roa
File: ef772b50-13bf-4fab-a099-470c53f2a28f.roa (raw, json)
Hash identifier: rZkwqWEiqN03+z8ubwl4ksDCFmdOptnqvoASDY7X7+o=
Subject key identifier: E7:96:57:F9:C0:3D:CF:74:3C:20:08:3E:7A:5E:82:31:A8:5D:77:3B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2BAD2ABFC0B0D9F472CEF3AA17C285C1947F2D36
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ef772b50-13bf-4fab-a099-470c53f2a28f.roa
Signing time: Sat 01 Feb 2025 00:00:00 +0000
ROA not before: Sat 01 Feb 2025 00:00:00 +0000
ROA not after: Sat 08 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:ad:2a:bf:c0:b0:d9:f4:72:ce:f3:aa:17:c2:85:c1:94:7f:2d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 1 00:00:00 2025 GMT
Not After : Mar 8 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:3d:d3:d6:9d:25:d7:c3:f0:ca:d2:ed:00:95:
ee:3b:4f:51:fe:7e:8f:8c:d1:4a:5e:5d:a6:62:bf:
21:26:50:f2:71:c4:14:31:89:7f:fb:8d:ec:a9:6d:
2b:a1:65:96:a6:32:4e:98:25:49:e3:83:05:d9:42:
e4:38:de:43:ca:96:3b:18:5b:17:30:d8:ae:66:79:
4c:29:4e:63:07:7b:5e:ed:4d:90:45:dd:79:ee:09:
2a:f9:6e:92:84:d0:2a:0f:38:05:49:bd:1d:d1:c9:
11:29:6b:d6:b4:c1:5a:d6:7c:bb:63:d3:bf:37:fd:
95:b6:0b:af:e0:e9:a9:08:51:28:50:24:2d:8f:22:
13:11:01:ee:69:93:f4:eb:f5:2e:8c:a8:24:8c:59:
a3:5b:30:b5:01:cd:e6:b8:ca:60:db:2f:a3:c5:4d:
ca:b7:19:83:75:dd:7a:81:ac:60:35:d9:77:f7:f6:
38:65:bd:78:b7:32:06:26:89:a9:df:3a:15:ff:20:
4c:63:d5:97:10:82:5b:5d:2b:73:69:1b:ed:2c:a3:
fe:5c:f6:2a:c7:c3:23:52:e8:67:d5:7f:cb:d7:b2:
4d:86:64:08:df:42:9f:a8:f7:53:41:f8:60:7f:d9:
91:bf:41:1f:79:d5:1b:d6:f7:9a:4c:f7:03:ba:d3:
3a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:96:57:F9:C0:3D:CF:74:3C:20:08:3E:7A:5E:82:31:A8:5D:77:3B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ef772b50-13bf-4fab-a099-470c53f2a28f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e5:a7:13:ad:94:ba:68:87:7b:6a:18:07:f2:0e:61:f8:5b:
59:d1:5a:e7:13:5a:84:d0:16:f7:7c:5c:1a:fe:33:d5:2f:2d:
56:8a:51:23:51:e1:a4:9a:a2:ed:62:aa:a9:8f:9c:18:95:e7:
6e:fb:b7:a2:51:8a:02:fd:24:7c:37:ef:32:32:7c:cb:6f:6c:
50:7c:59:3c:c9:c5:a7:a8:6a:9d:0a:5a:0f:a3:b5:88:a4:18:
1e:09:2b:02:c6:7d:39:4a:ce:89:00:38:91:f5:5c:20:96:f6:
b4:29:c8:fe:df:39:ab:8b:84:d9:34:84:1f:b2:08:df:89:75:
f6:0a:e8:fa:e7:a4:f4:f4:1e:a2:b9:a6:f4:01:68:c6:e8:4e:
60:dc:6b:6c:69:72:98:07:6d:86:ab:ea:04:2d:ff:6b:57:8f:
83:2c:02:3f:70:8e:e0:f0:15:1d:24:b4:a9:3b:85:5f:48:62:
16:4d:de:bd:9a:e8:4c:7b:94:03:b4:9d:76:fe:48:13:2c:2d:
d9:ab:b8:85:90:9a:c4:51:37:b6:c2:65:68:ac:b5:de:1f:de:
07:15:26:dc:db:97:e7:e3:14:78:aa:6f:ca:fe:96:9f:46:f5:
ff:33:60:c5:b2:f8:36:ab:9e:bd:0f:68:8f:82:77:39:42:73:
f7:bd:74:0a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUK60qv8Cw2fRyzvOqF8KFwZR/LTYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMjAxMDAwMDAwWhcNMjUwMzA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BiMTI5OTA4OTc5NjYzNGI5NTlkMjc4NjQwOWRjYTkwZjZk
YjdlMDUyYmRiNWQwYmM2YTA3MjA5NGU1YzE0MzI4MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD6PdPWnSXXw/DK0u0Ale47T1H+fo+M0UpeXaZivyEmUPJx
xBQxiX/7jeypbSuhZZamMk6YJUnjgwXZQuQ43kPKljsYWxcw2K5meUwpTmMHe17t
TZBF3XnuCSr5bpKE0CoPOAVJvR3RyREpa9a0wVrWfLtj0783/ZW2C6/g6akIUShQ
JC2PIhMRAe5pk/Tr9S6MqCSMWaNbMLUBzea4ymDbL6PFTcq3GYN13XqBrGA12Xf3
9jhlvXi3MgYmianfOhX/IExj1ZcQgltdK3NpG+0so/5c9irHwyNS6GfVf8vXsk2G
ZAjfQp+o91NB+GB/2ZG/QR951RvW95pM9wO60zrNAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU55ZX+cA9z3Q8IAg+el6CMahddzswHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2VmNzcyYjUwLTEzYmYtNGZhYi1hMDk5LTQ3MGM1M2YyYTI4Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHjlpxOtlLpoh3tqGAfyDmH4W1nR
WucTWoTQFvd8XBr+M9UvLVaKUSNR4aSaou1iqqmPnBiV5277t6JRigL9JHw37zIy
fMtvbFB8WTzJxaeoap0KWg+jtYikGB4JKwLGfTlKzokAOJH1XCCW9rQpyP7fOauL
hNk0hB+yCN+JdfYK6PrnpPT0HqK5pvQBaMboTmDca2xpcpgHbYar6gQt/2tXj4Ms
Aj9wjuDwFR0ktKk7hV9IYhZN3r2a6Ex7lAO0nXb+SBMsLdmruIWQmsRRN7bCZWis
td4f3gcVJtzbl+fjFHiqb8r+lp9G9f8zYMWy+Darnr0PaI+CdzlCc/e9dAo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:02:11 2025 by rpki-client