Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/b1121dfe-8b77-4852-8504-3b11c27ee5f3.roa
File: b1121dfe-8b77-4852-8504-3b11c27ee5f3.roa (raw, json)
Hash identifier: bccftmzuEWvcqUAzffcCmWZrivZtqS0oZOB6g9lDuZY=
Subject key identifier: 27:E1:54:A6:FE:1A:E5:F9:4C:04:2D:B6:4E:AF:A9:17:63:98:75:04
Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial: 58FAAC6F270ECAA4B03D1E80D5D409840791BD8D
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/b1121dfe-8b77-4852-8504-3b11c27ee5f3.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.112.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:fa:ac:6f:27:0e:ca:a4:b0:3d:1e:80:d5:d4:09:84:07:91:bd:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=ea612cf07e5f00755e5a855c80699b887762c8afc3ad1523dc4fdebb0555c525, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5a:a9:4b:c9:6a:3a:43:b3:3f:27:8c:96:42:
e1:3b:f4:e8:11:74:81:bd:fd:66:6b:9a:5c:20:ed:
7e:f4:f7:f8:b8:5c:cb:7a:e9:4b:0e:33:0e:ab:c9:
e9:fd:65:1f:b2:3c:53:1d:83:95:36:41:21:d8:b1:
44:cf:90:ec:0f:a2:a4:8b:79:76:8e:fc:28:0f:84:
cb:20:68:c2:5a:8a:63:d5:b2:58:c0:da:02:80:55:
d9:68:79:46:32:42:1a:13:82:ca:a1:4c:79:29:41:
02:fb:c6:bb:a3:7a:c9:94:28:03:b1:2d:48:cb:37:
e7:58:43:0f:aa:b3:ed:52:27:df:ff:43:13:53:fb:
5b:d4:2a:38:02:f1:89:25:ad:22:01:6b:4c:58:a5:
80:87:52:97:18:04:9f:5d:d5:6c:6c:98:f9:a5:5e:
92:aa:a4:d3:af:a8:9c:9e:31:82:bd:2d:ea:f2:12:
4d:d2:0f:e3:da:da:ed:23:a1:92:a9:ea:a5:0c:b3:
47:9e:60:1c:1a:e7:23:96:eb:31:88:4a:1e:be:34:
62:a7:08:53:4a:41:81:62:9b:16:e1:c7:6d:d2:4b:
03:e2:c3:ba:f8:ec:49:5d:87:79:16:76:1e:c7:27:
21:5b:d9:13:a3:83:43:03:9f:d8:cc:ea:cf:b9:f3:
d2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E1:54:A6:FE:1A:E5:F9:4C:04:2D:B6:4E:AF:A9:17:63:98:75:04
X509v3 Authority Key Identifier:
keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/b1121dfe-8b77-4852-8504-3b11c27ee5f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.112.92.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:b7:7c:9c:de:fc:c2:53:fb:53:83:a2:21:df:6b:a4:f4:5a:
e3:b2:cf:37:05:70:ea:5d:65:64:e2:b2:26:7c:d2:95:fa:14:
06:73:9a:1e:1b:e3:c8:59:0a:7a:6c:7e:e9:ee:c5:62:f2:54:
cb:fd:98:f3:e3:2f:7b:48:a9:82:5e:18:b7:ef:25:f3:a0:aa:
cb:94:cf:95:59:10:48:3c:fb:7a:79:4c:b6:9a:c1:0b:0b:34:
07:89:3a:e9:7c:bb:d9:e3:f4:41:7e:d6:b4:89:7e:79:ab:3d:
9d:e4:47:1a:7e:02:39:b4:5f:69:c3:eb:c6:65:84:ef:ae:1c:
32:89:cc:79:a2:99:c6:62:ce:74:25:37:0c:df:47:06:15:5f:
dc:04:e9:8f:61:70:fc:4d:43:3b:e2:4b:ef:c8:92:41:4a:d1:
db:c9:20:6a:09:fa:7f:c8:18:34:ea:ca:99:2c:bd:fc:27:a9:
f3:ce:aa:12:4a:f0:0e:9e:91:95:50:c1:43:22:43:b6:f6:28:
1b:f7:58:e6:94:43:82:29:5a:29:b3:66:a1:9f:77:01:1e:b9:
9a:4b:db:15:1c:5e:d5:c4:bc:60:38:7e:53:c0:c9:db:be:38:
4b:3f:81:27:47:5b:48:52:56:b6:3e:f7:33:98:a7:bb:f6:78:
41:84:a1:d1
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWPqsbycOyqSwPR6A1dQJhAeRvY0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj
Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BlYTYxMmNmMDdlNWYwMDc1NWU1YTg1NWM4MDY5OWI4ODc3
NjJjOGFmYzNhZDE1MjNkYzRmZGViYjA1NTVjNTI1MS0wKwYDVQQDEyRkZGZiYzk3
Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCiWqlLyWo6Q7M/J4yWQuE79OgRdIG9/WZrmlwg7X709/i4
XMt66UsOMw6ryen9ZR+yPFMdg5U2QSHYsUTPkOwPoqSLeXaO/CgPhMsgaMJaimPV
sljA2gKAVdloeUYyQhoTgsqhTHkpQQL7xrujesmUKAOxLUjLN+dYQw+qs+1SJ9//
QxNT+1vUKjgC8YklrSIBa0xYpYCHUpcYBJ9d1WxsmPmlXpKqpNOvqJyeMYK9Lery
Ek3SD+Pa2u0joZKp6qUMs0eeYBwa5yOW6zGISh6+NGKnCFNKQYFimxbhx23SSwPi
w7r47Eldh3kWdh7HJyFb2ROjg0MDn9jM6s+589KbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUJ+FUpv4a5flMBC22Tq+pF2OYdQQwHwYDVR0jBBgwFoAUkS3GDddkKYK8
rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w
OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy
Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4
OTE0OTBkOWM5L2IxMTIxZGZlLThiNzctNDg1Mi04NTA0LTNiMTFjMjdlZTVmMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw
LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIycFwwDQYJKoZIhvcNAQELBQADggEBAHq3fJze/MJT+1ODoiHfa6T0WuOy
zzcFcOpdZWTisiZ80pX6FAZzmh4b48hZCnpsfunuxWLyVMv9mPPjL3tIqYJeGLfv
JfOgqsuUz5VZEEg8+3p5TLaawQsLNAeJOul8u9nj9EF+1rSJfnmrPZ3kRxp+Ajm0
X2nD68ZlhO+uHDKJzHmimcZiznQlNwzfRwYVX9wE6Y9hcPxNQzviS+/IkkFK0dvJ
IGoJ+n/IGDTqypksvfwnqfPOqhJK8A6ekZVQwUMiQ7b2KBv3WOaUQ4IpWimzZqGf
dwEeuZpL2xUcXtXEvGA4flPAydu+OEs/gSdHW0hSVrY+9zOYp7v2eEGEodE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:35:08 2025 by rpki-client