Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1807722b-6239-464f-b361-a2bdd368c5eb.roa
File: 1807722b-6239-464f-b361-a2bdd368c5eb.roa (raw, json)
Hash identifier: ANFsEAi3010r+jy7ExaC80IFdklYS2bqYplYOpyCLUs=
Subject key identifier: 51:8B:04:35:09:F3:2B:77:E7:16:3C:48:CD:15:2E:F7:F2:22:6B:7F
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 553792291CBAAA7F8879658737BACA37775CF4B7
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1807722b-6239-464f-b361-a2bdd368c5eb.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.82.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:37:92:29:1c:ba:aa:7f:88:79:65:87:37:ba:ca:37:77:5c:f4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=9f8d69fbcd3e466b79c048a321b65c78274b458b96ee6b774d94a081b14a84cd, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:c5:79:d1:b8:55:48:ca:3e:21:03:53:cd:
c1:cc:a3:f6:78:b1:69:6e:9b:a2:67:0f:c4:49:09:
e6:be:88:52:71:8a:f4:7c:ba:45:d2:ea:9b:11:ca:
91:2c:a2:81:d9:74:25:bd:aa:59:cf:03:d3:a6:84:
9c:c9:62:0d:bf:b7:1a:31:b3:80:79:49:73:86:2b:
48:2b:ff:59:0d:99:78:96:a7:70:17:fd:a4:99:93:
83:71:5a:b3:00:e0:ee:c3:fa:64:51:af:8c:64:45:
5e:6e:dd:ba:ea:b1:95:55:ec:1c:57:3c:32:50:28:
98:06:56:8a:7a:3a:76:4e:eb:23:c3:b9:41:54:c3:
e1:fb:8e:7b:30:28:7a:30:d4:32:6c:fb:a4:f6:74:
5a:36:8b:87:b0:41:cf:ba:30:36:8a:e1:b6:39:06:
5e:4d:ef:cd:37:cb:e3:74:c6:1a:6d:69:b7:e2:17:
5b:81:f4:0b:95:ba:2c:a4:dc:f7:e5:9b:e8:d4:be:
86:13:18:93:80:32:05:1e:c5:1e:24:22:1e:8a:50:
67:27:46:c0:ee:21:1b:40:3e:de:eb:ca:68:b0:6b:
e5:5e:0b:0b:f2:e1:21:3e:e3:59:d5:a1:31:c8:c9:
8f:38:2e:8f:9e:e2:d8:83:ea:91:75:31:1a:48:27:
33:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8B:04:35:09:F3:2B:77:E7:16:3C:48:CD:15:2E:F7:F2:22:6B:7F
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1807722b-6239-464f-b361-a2bdd368c5eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.78.0/24
Signature Algorithm: sha256WithRSAEncryption
64:96:fe:11:a6:d4:cc:54:e8:03:cf:57:f6:6c:f4:0a:a7:6b:
0a:87:8d:d4:3a:f3:66:0f:f4:f0:e3:09:74:9a:7d:6f:80:dd:
23:96:d1:f2:36:72:ef:58:c6:85:a3:02:68:20:5f:e0:ed:b1:
a3:95:14:40:69:03:c8:01:6d:c4:02:ca:2f:c9:f5:94:f5:01:
9b:6b:7d:1c:77:cc:8b:d4:c9:cc:d2:2a:13:ca:56:f2:05:50:
1c:41:5e:43:99:c6:bd:b3:30:f6:d8:9a:76:04:f5:06:75:b9:
f4:8b:16:ad:35:51:5a:cb:0f:36:77:9b:0d:33:8a:52:9e:01:
93:b4:b1:7c:b9:df:17:b2:5f:65:e9:5a:04:e8:dc:40:c9:19:
19:fd:8c:24:9c:48:db:48:06:50:6c:40:f0:ce:14:35:32:f6:
38:24:6c:f2:61:06:4d:42:75:08:7f:8e:98:26:3b:cc:2e:ff:
fc:26:b5:ab:4a:22:46:d8:61:1a:7b:59:c9:e5:09:de:e6:d2:
45:d9:c0:81:37:84:36:be:cc:65:c1:9f:77:6c:07:a0:ad:10:
73:b5:4e:29:f3:c1:c3:57:f9:58:a2:fc:2a:13:a1:24:4d:12:
c4:11:74:6a:f4:fc:37:f8:3b:57:49:9c:11:9a:45:96:9f:93:
d0:bf:c8:ee
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVTeSKRy6qn+IeWWHN7rKN3dc9LcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMTI4MDAwMDAwWhcNMjUwMzA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZjhkNjlmYmNkM2U0NjZiNzljMDQ4YTMyMWI2NWM3ODI3
NGI0NThiOTZlZTZiNzc0ZDk0YTA4MWIxNGE4NGNkMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCZ9sV50bhVSMo+IQNTzcHMo/Z4sWlum6JnD8RJCea+iFJx
ivR8ukXS6psRypEsooHZdCW9qlnPA9OmhJzJYg2/txoxs4B5SXOGK0gr/1kNmXiW
p3AX/aSZk4NxWrMA4O7D+mRRr4xkRV5u3brqsZVV7BxXPDJQKJgGVop6OnZO6yPD
uUFUw+H7jnswKHow1DJs+6T2dFo2i4ewQc+6MDaK4bY5Bl5N7803y+N0xhptabfi
F1uB9AuVuiyk3Pflm+jUvoYTGJOAMgUexR4kIh6KUGcnRsDuIRtAPt7rymiwa+Ve
Cwvy4SE+41nVoTHIyY84Lo+e4tiD6pF1MRpIJzNTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUUYsENQnzK3fnFjxIzRUu9/Iia38wHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzE4MDc3MjJiLTYyMzktNDY0Zi1iMzYxLWEyYmRkMzY4YzVlYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACtUk4wDQYJKoZIhvcNAQELBQADggEBAGSW/hGm1MxU6APPV/Zs9AqnawqH
jdQ682YP9PDjCXSafW+A3SOW0fI2cu9YxoWjAmggX+DtsaOVFEBpA8gBbcQCyi/J
9ZT1AZtrfRx3zIvUyczSKhPKVvIFUBxBXkOZxr2zMPbYmnYE9QZ1ufSLFq01UVrL
DzZ3mw0zilKeAZO0sXy53xeyX2XpWgTo3EDJGRn9jCScSNtIBlBsQPDOFDUy9jgk
bPJhBk1CdQh/jpgmO8wu//wmtatKIkbYYRp7WcnlCd7m0kXZwIE3hDa+zGXBn3ds
B6CtEHO1TinzwcNX+Vii/CoToSRNEsQRdGr0/Df4O1dJnBGaRZafk9C/yO4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:31 2025 by rpki-client