Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7bd06eb8-e66f-4d78-92f2-8a870b696c5a.roa
File: 7bd06eb8-e66f-4d78-92f2-8a870b696c5a.roa (raw, json)
Hash identifier: 8sIwTruNkMQ7TSuDpw7q6t5i6EYwT/yU42netnJayw0=
Subject key identifier: 96:5A:F6:D0:86:55:A9:B5:7D:77:81:C2:B2:58:77:9D:48:EB:BC:10
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 3DF5DE9887640B71749ADEA7835B30DE2A9BB7CF
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7bd06eb8-e66f-4d78-92f2-8a870b696c5a.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.82.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:f5:de:98:87:64:0b:71:74:9a:de:a7:83:5b:30:de:2a:9b:b7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=4de7fb09b77cf06c55d65b2957191a31e8f6b5f81683096b0743e380776230fd, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:22:0b:27:98:0e:7d:06:35:0d:4e:b7:85:f6:
1f:ed:6a:75:47:0b:b2:88:86:a5:2d:e0:d2:cc:43:
f3:a0:aa:bb:32:78:7f:30:6a:6b:d7:37:00:db:6b:
78:a3:2a:d8:31:0a:4a:aa:4a:37:97:ac:55:cb:6c:
e9:ff:f4:a5:34:1d:09:5c:62:15:2c:34:ff:48:07:
af:52:f9:02:a1:b0:f5:8f:90:da:32:b6:10:51:94:
68:d5:c0:7e:5c:c6:7a:97:2c:36:78:c5:ea:03:5e:
c8:29:da:02:56:74:da:0a:bc:fb:ca:8f:d0:3c:2a:
82:3f:c5:0a:cc:22:e6:d7:2a:18:7a:e4:fd:b9:ee:
f0:c1:68:e2:fd:4b:7c:c5:5e:f8:70:d7:74:df:eb:
e2:d1:99:67:e5:84:ea:82:64:b1:fb:ec:42:d6:32:
37:95:6f:1a:9d:19:73:11:74:29:66:05:8a:13:4b:
a1:9c:b7:46:4c:01:2a:60:5c:32:be:d2:b4:dc:94:
ec:0d:d7:2f:83:73:21:f3:0a:9b:99:e2:1d:47:c2:
6a:4c:d2:50:b8:b5:04:1f:24:0c:df:62:5d:32:af:
44:07:1c:73:ef:0c:50:74:a9:a4:88:e4:48:1b:be:
b3:a0:74:64:c9:4d:12:be:25:25:9d:ce:a7:08:59:
f7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5A:F6:D0:86:55:A9:B5:7D:77:81:C2:B2:58:77:9D:48:EB:BC:10
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7bd06eb8-e66f-4d78-92f2-8a870b696c5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.65.0/24
Signature Algorithm: sha256WithRSAEncryption
75:ff:5d:e2:cf:4d:a6:4c:a2:0b:d5:3d:54:eb:a8:36:c2:1c:
4c:2f:c6:ae:87:18:10:c0:98:b3:b3:b9:49:53:2e:40:1b:64:
ba:d9:99:19:a9:04:ba:27:f3:11:09:2f:dc:5b:2f:5e:11:94:
a6:b0:0d:12:4f:b5:31:ff:80:5e:8c:67:c5:20:ac:81:9e:eb:
d4:6d:26:e5:14:8c:f4:35:56:c3:0c:47:14:18:1c:04:86:6f:
df:86:27:cd:39:ea:2d:8b:7a:8b:c4:d0:ee:61:e6:af:6b:f3:
11:83:7d:04:e3:1d:6e:56:42:e3:31:66:0e:58:f3:a5:20:5a:
64:31:d2:c9:dc:43:b1:9f:33:4a:07:f7:51:55:98:ae:f2:95:
ca:47:fd:37:3b:21:11:b1:39:c0:c2:36:a9:67:b6:34:2c:71:
b6:3d:b4:a1:c0:fe:c6:84:5e:bd:1c:1c:6e:dd:5e:b5:5c:0d:
32:d5:42:ea:99:35:21:3e:56:03:7c:9f:67:95:11:f6:dc:57:
ce:d1:ae:dd:f6:a5:d8:7e:00:51:c6:29:65:68:89:d7:69:14:
5f:91:64:f3:a1:18:5c:0e:b6:bd:bf:0f:50:40:1f:5a:21:6d:
51:af:aa:07:e8:11:50:ab:26:b6:14:f1:bc:03:e6:7b:52:b1:
9d:40:66:4a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPfXemIdkC3F0mt6ng1sw3iqbt88wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMTI4MDAwMDAwWhcNMjUwMzA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A0ZGU3ZmIwOWI3N2NmMDZjNTVkNjViMjk1NzE5MWEzMWU4
ZjZiNWY4MTY4MzA5NmIwNzQzZTM4MDc3NjIzMGZkMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCbIgsnmA59BjUNTreF9h/tanVHC7KIhqUt4NLMQ/Ogqrsy
eH8wamvXNwDba3ijKtgxCkqqSjeXrFXLbOn/9KU0HQlcYhUsNP9IB69S+QKhsPWP
kNoythBRlGjVwH5cxnqXLDZ4xeoDXsgp2gJWdNoKvPvKj9A8KoI/xQrMIubXKhh6
5P257vDBaOL9S3zFXvhw13Tf6+LRmWflhOqCZLH77ELWMjeVbxqdGXMRdClmBYoT
S6Gct0ZMASpgXDK+0rTclOwN1y+DcyHzCpuZ4h1HwmpM0lC4tQQfJAzfYl0yr0QH
HHPvDFB0qaSI5EgbvrOgdGTJTRK+JSWdzqcIWfevAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUllr20IZVqbV9d4HCslh3nUjrvBAwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzdiZDA2ZWI4LWU2NmYtNGQ3OC05MmYyLThhODcwYjY5NmM1YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACtUkEwDQYJKoZIhvcNAQELBQADggEBAHX/XeLPTaZMogvVPVTrqDbCHEwv
xq6HGBDAmLOzuUlTLkAbZLrZmRmpBLon8xEJL9xbL14RlKawDRJPtTH/gF6MZ8Ug
rIGe69RtJuUUjPQ1VsMMRxQYHASGb9+GJ8056i2LeovE0O5h5q9r8xGDfQTjHW5W
QuMxZg5Y86UgWmQx0sncQ7GfM0oH91FVmK7ylcpH/Tc7IRGxOcDCNqlntjQscbY9
tKHA/saEXr0cHG7dXrVcDTLVQuqZNSE+VgN8n2eVEfbcV87Rrt32pdh+AFHGKWVo
iddpFF+RZPOhGFwOtr2/D1BAH1ohbVGvqgfoEVCrJrYU8bwD5ntSsZ1AZko=
-----END CERTIFICATE-----
Generated at Sat May 3 17:16:50 2025 by rpki-client