Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/91aa3f05-851c-41f9-a22f-c3a7e39b0bfe.roa
File: 91aa3f05-851c-41f9-a22f-c3a7e39b0bfe.roa (raw, json)
Hash identifier: HJW44QW9GPFyeTbdazg+Gf2wXs8xFLCsy3yICLjSE8k=
Subject key identifier: 5F:96:54:E1:25:2E:D0:66:90:42:3D:08:9A:31:54:D3:E6:49:FD:D9
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 15757802884403E0F03FB2A57E39C3AE90C8411B
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/91aa3f05-851c-41f9-a22f-c3a7e39b0bfe.roa
Signing time: Fri 31 Jan 2025 00:00:00 +0000
ROA not before: Fri 31 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:d00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:75:78:02:88:44:03:e0:f0:3f:b2:a5:7e:39:c3:ae:90:c8:41:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 31 00:00:00 2025 GMT
Not After : Mar 7 23:59:59 2025 GMT
Subject: serialNumber=bcf099acb5a2db45d990c63782430115332ae13371b9647a91425807a0b2d15d, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e9:05:02:a2:d5:5a:16:e6:b9:0d:41:26:48:
d1:56:a3:3a:a3:1c:57:c5:73:1b:2b:22:01:1b:4f:
d5:cd:ea:fb:69:86:71:b1:d8:70:a0:ec:e5:27:87:
3b:db:87:5c:e3:98:f5:dc:42:d2:7d:15:49:35:c9:
c2:a0:e4:8d:c4:bf:e3:fc:14:09:85:81:04:cb:28:
c3:cb:f8:8c:0c:9f:16:d1:ca:51:91:18:56:c1:cb:
b4:e1:3c:11:83:95:7d:ed:f6:0d:d1:2a:cf:0b:05:
a5:2d:10:1d:11:31:13:74:e1:57:b7:9b:a2:88:d1:
39:6d:5a:46:32:1e:e4:86:c9:41:a7:83:10:08:32:
36:fc:d4:cc:22:4f:bd:a0:62:9a:97:5e:f2:f7:5d:
4c:24:9a:11:a5:fb:79:1c:74:fe:b4:34:bb:e6:35:
ab:d6:92:05:a4:26:d2:9e:88:c4:c8:4f:24:fa:69:
f4:88:d3:df:06:b5:a7:75:14:d6:9d:47:a7:31:db:
bd:d6:fe:90:89:dc:10:04:44:47:30:d3:d2:61:f6:
3c:8e:f5:01:0f:fa:78:43:10:06:56:67:f2:08:16:
d0:95:e7:81:e4:d3:79:4f:15:df:de:27:59:78:69:
6c:2e:41:8f:33:a3:72:ec:4f:b0:65:a3:3b:c7:2c:
2f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:96:54:E1:25:2E:D0:66:90:42:3D:08:9A:31:54:D3:E6:49:FD:D9
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/91aa3f05-851c-41f9-a22f-c3a7e39b0bfe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:d00::/40
Signature Algorithm: sha256WithRSAEncryption
9f:1c:ac:74:0a:cc:b3:f2:98:98:b3:93:67:cd:d1:fb:2d:60:
e0:cf:10:9b:5e:1b:85:d0:59:d1:19:8a:b7:73:7a:d1:29:a1:
9d:55:76:3e:6e:cd:73:f0:c4:51:93:af:ff:3f:2b:51:ed:98:
9d:fd:2a:42:4c:9e:d2:a7:e7:ca:1f:89:a0:ab:8c:48:16:5b:
73:32:f5:d6:bf:e7:d7:a6:5b:15:76:09:fb:bd:af:9f:d1:d2:
53:cb:2d:3f:80:dd:05:e3:f4:de:d5:8e:7b:89:8b:66:fb:30:
fb:d9:14:ac:89:0e:75:ec:a9:fb:06:45:ae:52:9e:09:90:c2:
d0:26:5f:92:58:3f:40:07:83:b1:7f:17:9e:f0:70:fa:91:c4:
de:fa:ed:0e:70:f0:b5:df:31:c1:ef:56:99:04:9c:ca:ce:8b:
7d:c4:8e:2e:b1:83:b8:79:0e:d0:65:9a:d3:48:87:6b:3d:7e:
22:2d:12:47:b8:a8:5b:0a:8b:6d:0c:ee:0b:2c:71:4a:62:f2:
78:37:a2:60:8a:26:bd:7c:b0:ac:38:f3:ab:ab:c5:b9:cb:29:
8f:40:c2:a0:48:28:fa:1f:d4:fb:45:52:ca:74:c8:01:e4:b1:
d5:17:0d:29:ef:03:bb:b4:a0:0c:26:70:a4:cd:cd:4b:30:04:
ce:68:5b:4b
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUFXV4AohEA+DwP7KlfjnDrpDIQRswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BiY2YwOTlhY2I1YTJkYjQ1ZDk5MGM2Mzc4MjQzMDExNTMz
MmFlMTMzNzFiOTY0N2E5MTQyNTgwN2EwYjJkMTVkMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCN6QUCotVaFua5DUEmSNFWozqjHFfFcxsrIgEbT9XN6vtp
hnGx2HCg7OUnhzvbh1zjmPXcQtJ9FUk1ycKg5I3Ev+P8FAmFgQTLKMPL+IwMnxbR
ylGRGFbBy7ThPBGDlX3t9g3RKs8LBaUtEB0RMRN04Ve3m6KI0TltWkYyHuSGyUGn
gxAIMjb81MwiT72gYpqXXvL3XUwkmhGl+3kcdP60NLvmNavWkgWkJtKeiMTITyT6
afSI098Gtad1FNadR6cx273W/pCJ3BAEREcw09Jh9jyO9QEP+nhDEAZWZ/IIFtCV
54Hk03lPFd/eJ1l4aWwuQY8zo3LsT7BlozvHLC+xAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUX5ZU4SUu0GaQQj0ImjFU0+ZJ/dkwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzkxYWEzZjA1LTg1MWMtNDFmOS1hMjJmLWMzYTdlMzliMGJmZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmBZzADTANBgkqhkiG9w0BAQsFAAOCAQEAnxysdArMs/KYmLOTZ83R+y1g
4M8Qm14bhdBZ0RmKt3N60SmhnVV2Pm7Nc/DEUZOv/z8rUe2Ynf0qQkye0qfnyh+J
oKuMSBZbczL11r/n16ZbFXYJ+72vn9HSU8stP4DdBeP03tWOe4mLZvsw+9kUrIkO
deyp+wZFrlKeCZDC0CZfklg/QAeDsX8XnvBw+pHE3vrtDnDwtd8xwe9WmQScys6L
fcSOLrGDuHkO0GWa00iHaz1+Ii0SR7ioWwqLbQzuCyxxSmLyeDeiYIomvXywrDjz
q6vFucspj0DCoEgo+h/U+0VSynTIAeSx1RcNKe8Du7SgDCZwpM3NSzAEzmhbSw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:23 2025 by rpki-client