Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa
File: e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa (raw, json)
Hash identifier: /sNcjp6HJMBB2xae4v2f38Z1N4fuPpgERvIn47xyXPU=
Subject key identifier: 2F:C6:26:53:83:B7:40:0A:5C:4F:69:78:EC:DB:98:43:03:E0:B3:26
Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial: 22562909D5A793E5386D3D4EB0EEB950460D78E2
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.112.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:56:29:09:d5:a7:93:e5:38:6d:3d:4e:b0:ee:b9:50:46:0d:78:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=1cc67d6806dd406281df7c61ab118a4b8e7cc347e3fcf106be5f80cf739ad439, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:57:a6:29:cd:42:bc:47:7f:80:0b:4d:20:5c:
f4:87:17:66:91:c6:45:88:a5:b5:b4:8e:eb:d4:b9:
5f:34:63:6e:70:c0:b2:e5:80:04:72:4e:4e:83:33:
62:73:ee:9f:ca:22:ea:ae:a4:23:db:c3:f8:da:37:
c3:73:70:a2:c5:48:67:3a:ef:79:97:7b:c9:9f:1b:
6a:36:67:44:ea:99:cd:1a:84:15:f8:8b:37:94:13:
31:e8:60:26:b0:05:1b:37:60:60:64:f3:e9:fd:92:
f3:e4:4e:76:2f:62:ba:7d:e3:c4:d1:5d:c0:53:de:
c9:89:71:40:08:fb:6e:56:0f:a3:b6:36:5c:25:f3:
4e:43:b1:49:45:42:32:e3:e3:10:11:d1:c6:c7:8a:
ac:c9:12:aa:d6:c7:ea:66:2b:a5:cb:b8:78:94:da:
73:1e:85:65:bd:6d:ee:7b:dc:4c:06:41:93:35:18:
6b:1b:30:c6:14:5a:1c:a8:48:c4:71:98:09:a7:a4:
f0:0c:97:31:81:77:7c:37:37:d1:a6:6e:09:b7:82:
d1:41:ff:8c:8a:73:58:3f:6f:45:4b:0f:4d:9d:31:
ef:3e:d4:a1:3d:50:0d:1e:fa:22:5a:cd:3e:66:d5:
b5:69:aa:37:29:16:e2:0a:b6:8c:ed:0a:12:1d:44:
78:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C6:26:53:83:B7:40:0A:5C:4F:69:78:EC:DB:98:43:03:E0:B3:26
X509v3 Authority Key Identifier:
keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.112.128.0/18
Signature Algorithm: sha256WithRSAEncryption
3c:e2:f0:28:7d:7a:6d:f6:83:dc:73:0c:20:c9:1b:81:9a:21:
53:bf:0c:06:7b:e7:d9:77:17:f7:4a:48:15:f0:08:fb:68:4a:
9b:77:eb:1a:1b:6d:2a:7b:2e:01:26:e1:bf:dd:ba:01:a3:ae:
4a:3b:fa:0d:4f:1f:97:63:d1:78:2f:42:d6:a3:66:47:af:0f:
83:69:6c:49:82:db:ff:bc:33:0f:82:51:7a:62:ad:4f:e1:51:
f8:22:ec:d4:f3:3e:bd:fb:5b:19:3a:ff:05:43:e1:1f:72:80:
8e:5b:35:00:cb:a0:7d:11:e6:69:74:be:c0:1b:08:08:17:1d:
ff:32:39:8e:5c:18:f9:7f:6a:83:ba:c9:74:89:a5:3e:1c:48:
de:db:e8:b7:75:ac:ae:23:29:c8:02:d4:76:ac:f8:5e:65:7a:
48:bd:ed:33:82:85:fa:11:d1:b6:7e:9c:e1:36:02:2c:82:63:
6c:f7:05:68:f9:ad:85:df:3c:29:d8:d5:64:ff:f3:8e:7a:e5:
21:40:7c:e3:2f:43:50:1a:14:5c:15:d4:31:b9:5a:c2:37:e6:
18:98:a5:20:21:8f:10:b0:f7:da:db:9c:f5:d0:58:51:ca:db:
36:12:fc:08:f6:31:88:7e:29:d1:85:50:4e:0b:15:1f:7c:37:
9a:5f:67:89
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIlYpCdWnk+U4bT1OsO65UEYNeOIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj
Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0AxY2M2N2Q2ODA2ZGQ0MDYyODFkZjdjNjFhYjExOGE0Yjhl
N2NjMzQ3ZTNmY2YxMDZiZTVmODBjZjczOWFkNDM5MS0wKwYDVQQDEyRkZGZiYzk3
Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCnV6YpzUK8R3+AC00gXPSHF2aRxkWIpbW0juvUuV80Y25w
wLLlgARyTk6DM2Jz7p/KIuqupCPbw/jaN8NzcKLFSGc673mXe8mfG2o2Z0Tqmc0a
hBX4izeUEzHoYCawBRs3YGBk8+n9kvPkTnYvYrp948TRXcBT3smJcUAI+25WD6O2
Nlwl805DsUlFQjLj4xAR0cbHiqzJEqrWx+pmK6XLuHiU2nMehWW9be573EwGQZM1
GGsbMMYUWhyoSMRxmAmnpPAMlzGBd3w3N9Gmbgm3gtFB/4yKc1g/b0VLD02dMe8+
1KE9UA0e+iJazT5m1bVpqjcpFuIKtoztChIdRHhVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUL8YmU4O3QApcT2l47NuYQwPgsyYwHwYDVR0jBBgwFoAUkS3GDddkKYK8
rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w
OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy
Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4
OTE0OTBkOWM5L2UzZjhhMjM3LTVkOGItNGQ2MS1hYmM4LWMxMjkxOTJmYjdjMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw
LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAYycIAwDQYJKoZIhvcNAQELBQADggEBADzi8Ch9em32g9xzDCDJG4GaIVO/
DAZ759l3F/dKSBXwCPtoSpt36xobbSp7LgEm4b/dugGjrko7+g1PH5dj0XgvQtaj
ZkevD4NpbEmC2/+8Mw+CUXpirU/hUfgi7NTzPr37Wxk6/wVD4R9ygI5bNQDLoH0R
5ml0vsAbCAgXHf8yOY5cGPl/aoO6yXSJpT4cSN7b6Ld1rK4jKcgC1Has+F5leki9
7TOChfoR0bZ+nOE2AiyCY2z3BWj5rYXfPCnY1WT/84565SFAfOMvQ1AaFFwV1DG5
WsI35hiYpSAhjxCw99rbnPXQWFHK2zYS/Aj2MYh+KdGFUE4LFR98N5pfZ4k=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:40 2025 by rpki-client