Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d51c3795-6773-418d-a97f-679030a3020b.roa
File: d51c3795-6773-418d-a97f-679030a3020b.roa (raw, json)
Hash identifier: ch86eB9vCtvALCZk7TAGfrUgUOgLeCRSfSOUxfcOiFw=
Subject key identifier: FE:EF:7C:21:B3:E7:F0:20:07:B6:9C:C6:5B:6D:3D:2F:C7:0F:73:21
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 23A5EA216732C5263510EE394D4C3188B5B933C2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d51c3795-6773-418d-a97f-679030a3020b.roa
Signing time: Wed 25 Dec 2024 00:00:00 +0000
ROA not before: Wed 25 Dec 2024 00:00:00 +0000
ROA not after: Wed 29 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:a5:ea:21:67:32:c5:26:35:10:ee:39:4d:4c:31:88:b5:b9:33:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 25 00:00:00 2024 GMT
Not After : Jan 29 23:59:59 2025 GMT
Subject: serialNumber=f468806b518276bf3a3014eb0002d52ea15bdf352dc5b1b7c346fcb7a6fef6eb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b7:00:62:05:b1:99:22:bc:32:c2:b0:58:80:
00:5b:05:f1:ae:58:04:28:5c:94:b0:26:5e:4d:64:
46:02:f9:65:09:d9:1b:63:f2:61:8e:a1:39:d9:46:
5a:8e:91:ef:b0:11:c5:c5:c3:dd:a4:59:df:85:20:
d3:d5:cb:fd:c1:be:61:3b:1b:f5:ec:37:21:f6:f2:
fb:68:04:f6:c1:00:a5:f2:ee:0b:d2:b4:1b:19:7f:
56:ad:1f:36:6f:ab:e9:c0:6f:f0:1c:81:86:fb:e1:
64:a8:48:ae:46:45:d1:05:25:af:a6:69:22:e6:da:
ce:9c:d2:d2:60:d9:36:77:c5:cd:d3:8a:0c:01:96:
a0:aa:e9:ab:c1:63:fd:ef:78:e9:c8:0f:1b:2d:e7:
a3:84:0b:f4:7d:a8:f7:bd:c4:64:67:64:9f:ec:49:
6c:06:66:4a:9e:72:20:69:9f:b8:5f:80:fa:5f:4a:
6f:f1:88:9b:9b:e6:9c:f7:37:9f:c7:54:d5:97:11:
71:b7:99:f9:2e:47:18:e8:88:03:16:db:92:af:91:
fe:7e:bd:42:4a:60:8a:5a:d0:80:eb:3e:c0:c0:e2:
25:9e:76:aa:dd:30:a1:25:11:5a:26:63:d8:9e:f2:
25:a8:fb:9d:bb:33:13:31:c6:65:42:78:fa:67:57:
6e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EF:7C:21:B3:E7:F0:20:07:B6:9C:C6:5B:6D:3D:2F:C7:0F:73:21
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d51c3795-6773-418d-a97f-679030a3020b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
87:e7:11:19:3c:ab:c9:9c:d7:09:b7:b5:c0:d9:9b:d7:42:2b:
02:1c:94:cb:72:12:e5:32:c5:4a:7e:4e:8d:ac:22:ff:ee:9b:
8d:1d:33:a3:5a:be:5c:48:65:06:04:88:b3:45:39:92:95:a2:
f9:4d:71:6b:f0:64:97:f9:e8:fe:c7:67:94:de:c5:48:80:bc:
eb:f5:42:2e:3c:f7:35:18:0c:cb:90:e6:d3:07:51:b1:00:45:
37:99:92:99:69:77:12:26:b1:1f:a8:3a:c1:17:3f:be:39:7f:
95:43:15:fa:20:7e:21:64:7c:d0:ab:36:54:1b:0a:62:32:65:
6b:8d:f0:a3:22:37:a5:eb:4d:21:6e:14:b7:44:41:8d:1d:74:
23:6b:92:fa:1d:5e:a8:9e:66:64:c4:bb:f5:7f:34:ec:bd:c6:
f3:03:ad:fc:3b:7f:c6:ce:af:16:51:26:71:33:da:ab:94:de:
4b:f0:96:2e:bf:ab:a0:87:12:e2:e4:ba:15:40:f6:f5:d7:3c:
39:a0:3c:50:b6:dd:53:05:13:43:6e:e2:8c:8f:f1:cb:77:6d:
a8:80:5b:4e:1f:6f:e6:4a:19:49:13:c1:77:25:cb:1c:9c:ce:
d9:14:27:0e:cc:31:f1:3d:58:ff:e3:77:b7:48:04:8a:7f:13:
65:c4:29:56
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUI6XqIWcyxSY1EO45TUwxiLW5M8IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMjI1MDAwMDAwWhcNMjUwMTI5MjM1OTU5
WjB6MUkwRwYDVQQFE0BmNDY4ODA2YjUxODI3NmJmM2EzMDE0ZWIwMDAyZDUyZWEx
NWJkZjM1MmRjNWIxYjdjMzQ2ZmNiN2E2ZmVmNmViMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNtwBiBbGZIrwywrBYgABbBfGuWAQoXJSwJl5NZEYC+WUJ
2Rtj8mGOoTnZRlqOke+wEcXFw92kWd+FINPVy/3BvmE7G/XsNyH28vtoBPbBAKXy
7gvStBsZf1atHzZvq+nAb/AcgYb74WSoSK5GRdEFJa+maSLm2s6c0tJg2TZ3xc3T
igwBlqCq6avBY/3veOnIDxst56OEC/R9qPe9xGRnZJ/sSWwGZkqeciBpn7hfgPpf
Sm/xiJub5pz3N5/HVNWXEXG3mfkuRxjoiAMW25Kvkf5+vUJKYIpa0IDrPsDA4iWe
dqrdMKElEVomY9ie8iWo+527MxMxxmVCePpnV24/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU/u98IbPn8CAHtpzGW209L8cPcyEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2Q1MWMzNzk1LTY3NzMtNDE4ZC1hOTdmLTY3OTAzMGEzMDIwYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIfnERk8q8mc1wm3tcDZm9dCKwIc
lMtyEuUyxUp+To2sIv/um40dM6NavlxIZQYEiLNFOZKVovlNcWvwZJf56P7HZ5Te
xUiAvOv1Qi489zUYDMuQ5tMHUbEARTeZkplpdxImsR+oOsEXP745f5VDFfogfiFk
fNCrNlQbCmIyZWuN8KMiN6XrTSFuFLdEQY0ddCNrkvodXqieZmTEu/V/NOy9xvMD
rfw7f8bOrxZRJnEz2quU3kvwli6/q6CHEuLkuhVA9vXXPDmgPFC23VMFE0Nu4oyP
8ct3baiAW04fb+ZKGUkTwXclyxycztkUJw7MMfE9WP/jd7dIBIp/E2XEKVY=
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net