Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4747cb3a-dada-4e4c-b2af-99fedfffda48.roa
File: 4747cb3a-dada-4e4c-b2af-99fedfffda48.roa (raw, json)
Hash identifier: +SPrI3CfS1SJ4KrOkkdSLCT8J4Qvs362DvGSSKb8r/8=
Subject key identifier: 23:F4:BA:2C:BB:3F:F3:1C:89:60:9B:90:B1:BF:EF:FD:B7:DC:D3:1E
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 731136178DE5138A66F35795CE914D9D32BB01CC
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4747cb3a-dada-4e4c-b2af-99fedfffda48.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 173.82.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:11:36:17:8d:e5:13:8a:66:f3:57:95:ce:91:4d:9d:32:bb:01:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=092890de2234626a12649aa646296946765239f5c8f176e655490afd5e57115d, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b6:cb:d9:04:07:61:c7:e0:25:80:dd:6c:70:
03:61:b3:65:4e:b8:be:bb:73:d0:7a:38:2b:c1:ee:
b4:af:28:59:25:11:7b:20:bf:2e:0d:4b:9f:57:3f:
5a:fd:4a:54:a2:b2:e9:da:c6:77:83:4e:c8:9b:55:
c4:9c:a7:e7:3c:6a:d5:89:fd:25:69:aa:24:49:39:
dc:ec:6e:06:86:98:f4:c0:7b:d8:0f:d1:4b:d4:ba:
11:48:31:0f:30:31:6e:fc:0a:47:59:96:3a:fc:88:
ac:c4:27:77:cf:1c:91:de:62:c4:c6:1e:f4:92:70:
37:2f:e9:b8:14:c0:76:80:ab:7d:49:f4:d7:d0:b2:
c2:ed:29:b6:55:46:4e:ac:fc:ff:e3:bb:b9:55:8c:
9d:79:87:21:20:7c:a7:88:4a:3f:69:b4:11:77:c2:
14:2a:4e:c5:24:51:3c:bb:78:f9:1d:42:c4:e6:69:
d6:58:30:20:e3:1b:35:33:90:0d:67:0e:23:5d:7c:
d0:5a:f8:47:5d:c2:2e:f6:22:c8:37:0e:87:a7:f4:
16:63:83:4c:b4:b4:05:a3:5c:21:9f:6e:37:9d:b4:
21:4b:e9:e6:da:c3:ff:bb:0f:8f:60:70:72:67:f5:
6a:3d:cc:e2:ab:8c:9b:73:5e:06:ba:79:85:82:32:
dc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F4:BA:2C:BB:3F:F3:1C:89:60:9B:90:B1:BF:EF:FD:B7:DC:D3:1E
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4747cb3a-dada-4e4c-b2af-99fedfffda48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.5.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c7:8b:80:48:0a:80:5c:69:22:d3:bf:6c:95:b6:f3:2d:fc:
8b:b2:2c:08:fe:f8:b4:94:69:4c:90:3d:1d:2d:5e:16:9f:0b:
cb:0d:d2:36:a5:d4:d5:ba:2d:c3:24:98:4d:86:dd:77:39:39:
b1:c9:26:fb:2e:7a:ee:cd:e5:99:d0:da:4b:27:34:d5:6c:52:
77:67:49:4a:80:57:09:ef:d9:2e:df:e6:e1:da:7a:6d:98:cd:
fe:b8:47:68:44:5d:30:8f:a7:8a:f8:0d:5b:a2:af:79:4b:be:
fd:05:06:68:fa:7c:fb:24:61:af:0f:67:b2:ad:23:2e:ce:07:
6e:79:23:e8:a2:4d:23:ea:e6:4c:b6:6f:66:90:91:f9:6c:95:
fe:a8:37:a9:57:21:cf:46:4b:80:be:8a:f1:c4:65:1b:70:50:
68:af:dd:9f:22:ca:40:d4:0e:75:30:65:a6:58:a0:1f:50:e2:
ed:cd:3f:c5:2b:e3:ef:4b:88:18:cb:a9:bc:da:d8:62:be:43:
a0:a5:a3:9a:2a:51:3b:a8:cc:d6:51:c5:40:2f:c1:53:9a:b3:
f3:68:75:e0:04:2a:97:cc:ef:38:78:1d:2e:bb:0f:c2:c1:9a:
c1:e6:43:c9:3d:c8:fd:70:26:22:44:14:64:db:42:00:30:e9:
6f:0a:b9:0b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUcxE2F43lE4pm81eVzpFNnTK7AcwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMTA3MDAwMDAwWhcNMjUwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0AwOTI4OTBkZTIyMzQ2MjZhMTI2NDlhYTY0NjI5Njk0Njc2
NTIzOWY1YzhmMTc2ZTY1NTQ5MGFmZDVlNTcxMTVkMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDQtsvZBAdhx+AlgN1scANhs2VOuL67c9B6OCvB7rSvKFkl
EXsgvy4NS59XP1r9SlSisunaxneDTsibVcScp+c8atWJ/SVpqiRJOdzsbgaGmPTA
e9gP0UvUuhFIMQ8wMW78CkdZljr8iKzEJ3fPHJHeYsTGHvSScDcv6bgUwHaAq31J
9NfQssLtKbZVRk6s/P/ju7lVjJ15hyEgfKeISj9ptBF3whQqTsUkUTy7ePkdQsTm
adZYMCDjGzUzkA1nDiNdfNBa+Eddwi72Isg3Doen9BZjg0y0tAWjXCGfbjedtCFL
6ebaw/+7D49gcHJn9Wo9zOKrjJtzXga6eYWCMtxjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUI/S6LLs/8xyJYJuQsb/v/bfc0x4wHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzQ3NDdjYjNhLWRhZGEtNGU0Yy1iMmFmLTk5ZmVkZmZmZGE0OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACtUgUwDQYJKoZIhvcNAQELBQADggEBAJPHi4BICoBcaSLTv2yVtvMt/Iuy
LAj++LSUaUyQPR0tXhafC8sN0jal1NW6LcMkmE2G3Xc5ObHJJvsueu7N5ZnQ2ksn
NNVsUndnSUqAVwnv2S7f5uHaem2Yzf64R2hEXTCPp4r4DVuir3lLvv0FBmj6fPsk
Ya8PZ7KtIy7OB255I+iiTSPq5ky2b2aQkflslf6oN6lXIc9GS4C+ivHEZRtwUGiv
3Z8iykDUDnUwZaZYoB9Q4u3NP8Ur4+9LiBjLqbza2GK+Q6Clo5oqUTuozNZRxUAv
wVOas/NodeAEKpfM7zh4HS67D8LBmsHmQ8k9yP1wJiJEFGTbQgAw6W8KuQs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:49 2025 by rpki-client