Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f055dd53-5d60-4d27-9791-61aca02cc147.roa
File: f055dd53-5d60-4d27-9791-61aca02cc147.roa (raw, json)
Hash identifier: 7D3D7bqGOHVN/iDtoSwCltiUoLRhWz3xjetfXYGc/s8=
Subject key identifier: 52:76:B9:21:92:34:B3:15:89:D4:C0:46:C2:6A:3A:99:03:DA:F7:EF
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5F0CE5C6752E554AA5D1D31A0B06B0C2EF25B539
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f055dd53-5d60-4d27-9791-61aca02cc147.roa
Signing time: Mon 28 Aug 2023 00:00:00 +0000
ROA not before: Mon 28 Aug 2023 00:00:00 +0000
ROA not after: Mon 02 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:0c:e5:c6:75:2e:55:4a:a5:d1:d3:1a:0b:06:b0:c2:ef:25:b5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 28 00:00:00 2023 GMT
Not After : Oct 2 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:c1:7f:d1:36:9d:90:64:08:95:2b:7d:35:
9e:54:94:7d:16:66:02:bc:4b:14:51:38:5a:41:e6:
a3:43:3a:8f:ca:73:21:83:c4:90:72:a7:48:e9:af:
30:cf:1a:5d:4b:7e:db:a8:67:6c:73:97:20:a5:17:
b2:ac:f6:01:f6:9d:60:ff:64:f1:26:d3:b5:2c:f0:
5e:06:62:81:46:17:cb:25:ce:c6:0a:d4:89:9c:f3:
ee:be:ee:58:4a:d5:c7:95:42:45:5b:4a:bc:ee:f4:
2a:21:88:1b:12:3e:e8:f1:0e:c4:22:ce:16:e7:37:
d7:f0:48:77:40:5e:c5:f4:66:ae:2c:72:48:d3:55:
3b:b5:ea:d7:23:b3:21:af:98:34:32:c4:61:02:a5:
c9:ef:d1:0f:56:d9:18:f9:ef:a2:c4:b5:8f:e0:af:
17:48:a0:51:25:fb:33:35:37:57:0c:85:5f:3b:d6:
78:29:eb:9f:bd:0a:34:b6:50:d9:1e:43:9b:2d:49:
db:03:94:35:8e:83:8f:a0:a7:67:fd:01:33:14:53:
e3:62:6b:7f:3d:b9:44:7f:f0:6f:d6:42:93:83:20:
52:59:46:f0:1a:30:02:74:91:0c:d0:d9:9b:5d:b9:
86:bc:f9:65:93:4f:42:81:1f:dd:85:4b:5f:50:95:
01:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:76:B9:21:92:34:B3:15:89:D4:C0:46:C2:6A:3A:99:03:DA:F7:EF
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f055dd53-5d60-4d27-9791-61aca02cc147.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:68:8f:c0:1e:09:a0:64:18:a3:49:e5:f9:b9:1c:fd:34:11:
33:43:c0:9e:e3:70:ed:2f:ce:26:1c:22:9e:15:2b:fb:ac:76:
1d:57:ec:49:67:bd:19:73:df:75:6b:99:b4:89:44:c2:c2:36:
5e:a3:d4:60:f6:52:3c:e3:94:ad:ae:ea:d9:50:14:fe:f2:6c:
71:6a:d3:ff:21:f2:5c:07:f3:15:2f:fa:31:87:01:a4:fd:e0:
eb:f1:71:37:13:91:04:0d:83:93:c2:99:d4:6f:37:0f:c6:3a:
b3:1a:ce:ab:79:b6:e8:e1:f1:f3:ea:0c:31:3b:a6:10:07:87:
c0:42:8f:72:ac:4d:6f:9b:19:6f:6e:33:b9:93:15:f8:03:ac:
2f:c1:26:f8:85:c8:fe:95:f9:2b:10:23:e6:14:06:79:fa:9c:
6f:0c:05:34:2c:03:41:73:ac:27:74:76:07:a2:9b:75:0d:98:
d2:ed:8c:e4:01:93:c1:3d:b3:71:c4:e9:0f:6b:5c:83:53:07:
4e:e8:1c:dd:3b:cb:af:87:73:7b:63:c7:9d:c5:ba:b0:59:47:
63:90:f2:1e:70:61:35:88:1a:27:c5:28:0c:05:7a:e4:e0:ca:
30:1c:36:77:18:8b:aa:b3:a3:15:3e:13:fa:eb:2e:57:0a:66:
83:c8:5e:46
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXwzlxnUuVUql0dMaCwawwu8ltTkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwODI4MDAwMDAwWhcNMjMxMDAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BlNzI5NGQ5ODI4ODE4NzNhNWIwNTVkNDhmNjkwZDk3OGM2
NzI2ZGFlNjM4ZWVhZGM0Mjg3NmNiNjMxM2U0YzhhMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCjV8F/0TadkGQIlSt9NZ5UlH0WZgK8SxRROFpB5qNDOo/K
cyGDxJByp0jprzDPGl1LftuoZ2xzlyClF7Ks9gH2nWD/ZPEm07Us8F4GYoFGF8sl
zsYK1Imc8+6+7lhK1ceVQkVbSrzu9CohiBsSPujxDsQizhbnN9fwSHdAXsX0Zq4s
ckjTVTu16tcjsyGvmDQyxGECpcnv0Q9W2Rj576LEtY/grxdIoFEl+zM1N1cMhV87
1ngp65+9CjS2UNkeQ5stSdsDlDWOg4+gp2f9ATMUU+Nia389uUR/8G/WQpODIFJZ
RvAaMAJ0kQzQ2ZtduYa8+WWTT0KBH92FS19QlQHjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUUna5IZI0sxWJ1MBGwmo6mQPa9+8wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2YwNTVkZDUzLTVkNjAtNGQyNy05NzkxLTYxYWNhMDJjYzE0Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACpoj8AeCaBkGKNJ5fm5HP00ETND
wJ7jcO0vziYcIp4VK/usdh1X7ElnvRlz33VrmbSJRMLCNl6j1GD2UjzjlK2u6tlQ
FP7ybHFq0/8h8lwH8xUv+jGHAaT94OvxcTcTkQQNg5PCmdRvNw/GOrMazqt5tujh
8fPqDDE7phAHh8BCj3KsTW+bGW9uM7mTFfgDrC/BJviFyP6V+SsQI+YUBnn6nG8M
BTQsA0FzrCd0dgeim3UNmNLtjOQBk8E9s3HE6Q9rXINTB07oHN07y6+Hc3tjx53F
urBZR2OQ8h5wYTWIGifFKAwFeuTgyjAcNncYi6qzoxU+E/rrLlcKZoPIXkY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:20:58 2025 by rpki-client