Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f94aaf41-6a47-4747-817c-33a0e470207b.roa
File: f94aaf41-6a47-4747-817c-33a0e470207b.roa (raw, json)
Hash identifier: yoKz+mU8Mnel6mTl+TsbvEeAdgSZZdod3DR25U80v4g=
Subject key identifier: B5:19:4B:EB:B3:D9:03:7B:5C:9B:15:FE:4D:73:2C:CF:82:0C:ED:14
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6361A68E8B46705570DD7BF3911F0364F7AF7100
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f94aaf41-6a47-4747-817c-33a0e470207b.roa
Signing time: Wed 05 Mar 2025 11:28:22 +0000
ROA not before: Wed 05 Mar 2025 11:28:22 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:61:a6:8e:8b:46:70:55:70:dd:7b:f3:91:1f:03:64:f7:af:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 5 11:28:22 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:db:27:66:ff:d4:25:4a:33:9e:44:84:de:
49:71:07:c1:04:87:c4:34:3e:37:a3:e4:fd:0b:bf:
a3:a3:c4:9c:cf:f2:9c:5b:05:4c:df:16:97:2c:f0:
c1:8b:ae:ab:f0:32:ba:df:d6:53:de:b5:24:db:4c:
a6:45:0f:3c:09:51:19:63:d5:a9:26:51:92:26:7c:
35:2f:7b:b3:bd:38:47:58:75:d5:c1:47:67:95:ab:
43:21:7d:66:dd:08:e1:f7:2e:f5:56:2f:3d:72:16:
24:cd:c6:63:31:49:c1:f5:46:a3:e1:50:52:fe:4f:
a1:cc:4b:db:ce:cd:e7:f0:57:19:a2:6d:b3:71:f0:
eb:07:f0:2a:03:10:c0:b8:77:7b:d0:b6:c9:7d:d5:
49:6f:11:53:c7:c9:98:63:92:73:8f:ee:6d:d5:06:
ac:2e:de:a0:e5:af:d8:96:bb:90:a2:ec:30:e6:b1:
4c:c2:8c:bb:1c:3d:0e:50:3f:e3:bf:9b:55:d3:63:
3c:c3:6c:9a:db:bb:ed:15:99:e8:fb:10:11:fa:d7:
2d:f6:3f:60:59:d8:56:dc:f3:54:ad:34:f6:45:c1:
3b:4c:39:5e:c0:e4:d1:bc:b7:e4:cc:4e:c4:49:ee:
a2:fc:26:4e:33:5e:10:4c:c1:93:af:c2:6c:5e:d0:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:19:4B:EB:B3:D9:03:7B:5C:9B:15:FE:4D:73:2C:CF:82:0C:ED:14
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f94aaf41-6a47-4747-817c-33a0e470207b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
46:e0:1f:05:b6:8a:9e:93:c3:69:10:d1:61:64:4f:ea:4d:2e:
ab:17:56:36:d5:4c:21:59:f7:4e:80:a5:66:33:6b:7e:fb:4e:
59:3f:9d:8f:7e:3c:19:0c:dd:e3:6e:9a:59:47:68:67:3a:c9:
b9:0c:1f:e1:dd:ac:2f:d7:93:da:90:c0:ad:18:dd:b3:06:b5:
c4:04:c1:1c:8c:71:6f:c2:3e:91:21:b2:02:48:89:8c:5e:3e:
d6:81:24:f7:e2:1c:e9:f8:0e:5c:fb:08:12:49:34:06:e3:7f:
04:8c:ca:ee:5b:c1:75:74:d9:65:a2:7c:41:4e:ae:04:73:02:
a3:eb:38:e9:01:b9:af:19:53:85:17:fc:1b:56:db:de:17:e3:
6a:6c:44:4f:96:d3:67:80:de:ef:6a:c2:46:23:8e:2d:36:b3:
84:7f:19:7d:e3:58:79:97:a5:e7:ba:b9:57:ff:11:0f:9a:0f:
3d:4b:7a:2a:26:79:85:a0:87:f1:49:8e:2f:c1:af:aa:88:9b:
01:cd:a6:64:93:15:a9:8a:bf:ab:f3:d6:9e:d3:2f:cd:5a:15:
f6:7c:14:9e:50:1c:be:af:e2:f7:a8:d4:48:ca:70:b2:4f:6e:
fc:99:6d:d2:d6:ff:37:5a:92:b0:a6:8f:79:e9:ba:62:4a:6a:
c1:ea:11:a7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUY2GmjotGcFVw3XvzkR8DZPevcQAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMzA1MTEyODIyWhcNMjUwNDA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A0YmQ3MzIyMzg5NGMyYTU1ZDk1MDFkOWIzM2RiNzJhNDNl
NDkwYWFhNDhiMGFlZGI2MGVjNWQwYWZiMmI1MWU1MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2ydsnZv/UJUoznkSE3klxB8EEh8Q0Pjej5P0Lv6OjxJzP
8pxbBUzfFpcs8MGLrqvwMrrf1lPetSTbTKZFDzwJURlj1akmUZImfDUve7O9OEdY
ddXBR2eVq0MhfWbdCOH3LvVWLz1yFiTNxmMxScH1RqPhUFL+T6HMS9vOzefwVxmi
bbNx8OsH8CoDEMC4d3vQtsl91UlvEVPHyZhjknOP7m3VBqwu3qDlr9iWu5Ci7DDm
sUzCjLscPQ5QP+O/m1XTYzzDbJrbu+0Vmej7EBH61y32P2BZ2Fbc81StNPZFwTtM
OV7A5NG8t+TMTsRJ7qL8Jk4zXhBMwZOvwmxe0Fb1AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUtRlL67PZA3tcmxX+TXMsz4IM7RQwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2Y5NGFhZjQxLTZhNDctNDc0Ny04MTdjLTMzYTBlNDcwMjA3Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEbgHwW2ip6Tw2kQ0WFkT+pNLqsX
VjbVTCFZ906ApWYza377Tlk/nY9+PBkM3eNumllHaGc6ybkMH+HdrC/Xk9qQwK0Y
3bMGtcQEwRyMcW/CPpEhsgJIiYxePtaBJPfiHOn4Dlz7CBJJNAbjfwSMyu5bwXV0
2WWifEFOrgRzAqPrOOkBua8ZU4UX/BtW294X42psRE+W02eA3u9qwkYjji02s4R/
GX3jWHmXpee6uVf/EQ+aDz1LeiomeYWgh/FJji/Br6qImwHNpmSTFamKv6vz1p7T
L81aFfZ8FJ5QHL6v4veo1EjKcLJPbvyZbdLW/zdakrCmj3npumJKasHqEac=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:52:52 2025 by rpki-client