Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/154534d5-da69-43fe-9f0c-aad88b97483b.roa
File: 154534d5-da69-43fe-9f0c-aad88b97483b.roa (raw, json)
Hash identifier: 2xlBOfgeqhUvF3+j8j1V+/EmRUI4iHMK+dpe2JP3XnU=
Subject key identifier: C0:52:4A:46:B6:1F:E2:2F:05:20:E2:83:9A:63:CA:B1:9B:2F:FE:97
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 5BBC6F48E06218C69A7C9F0FB2112962642B2A8E
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/154534d5-da69-43fe-9f0c-aad88b97483b.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.251.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:bc:6f:48:e0:62:18:c6:9a:7c:9f:0f:b2:11:29:62:64:2b:2a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=c82b4f4bdf2b3624862cdfac3e308be371663651b9e39572da400c9b2df0d1ac, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c8:9d:b5:35:d4:aa:31:c6:00:b9:ca:30:c1:
d3:19:ee:fe:85:c2:1a:87:f3:0c:ba:77:76:5e:a2:
f6:5a:c0:cc:f8:36:8c:53:54:4b:a0:dc:4e:47:a9:
76:24:95:0c:c6:bb:c1:dc:a7:75:b7:9d:1e:ce:a3:
9d:cf:d2:23:e8:19:88:a9:5e:8e:8d:cd:c5:94:de:
50:73:58:43:91:0f:92:75:63:06:d6:96:e5:fa:da:
b7:54:27:15:11:28:c9:24:86:1c:0f:35:de:5a:3d:
9f:6c:b4:b1:f0:ea:12:af:5e:a8:02:9f:1f:88:45:
f8:3c:ce:65:74:f1:d7:51:fc:c9:d6:f9:e1:09:cd:
3b:cb:83:53:99:fb:d9:f1:46:d9:72:9f:c0:43:86:
20:40:5a:78:29:b7:92:74:45:fc:fd:ba:97:6e:14:
b7:4f:66:8e:08:4b:a3:1e:29:a6:a0:a8:e3:bb:da:
10:b3:c8:e1:f2:5d:34:36:08:ca:bb:83:60:f2:9d:
dd:8f:21:d6:34:94:46:2b:44:ea:08:3a:e2:ac:56:
a2:f9:19:e9:fe:ac:98:6d:01:47:3e:a9:a7:3c:9e:
ef:eb:a0:f2:0c:bf:d9:3b:f3:1a:55:92:e8:57:af:
48:9b:f2:e2:84:de:c9:f1:92:92:41:24:6b:46:70:
e5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:52:4A:46:B6:1F:E2:2F:05:20:E2:83:9A:63:CA:B1:9B:2F:FE:97
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/154534d5-da69-43fe-9f0c-aad88b97483b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.250.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:06:29:0c:c4:24:6d:18:97:2e:ae:53:39:ea:36:67:56:35:
ae:86:29:38:ef:b3:6f:13:ca:93:0b:98:05:75:2e:0a:97:2d:
58:f6:f4:bb:bb:db:ac:db:da:09:54:db:0c:1f:bd:5c:a3:b7:
76:28:8f:00:e3:28:70:f2:0d:a0:14:96:a1:7d:fb:e1:90:4c:
7f:c7:d9:65:15:08:93:09:63:12:fd:d0:4c:4a:66:d2:7a:4b:
5c:a0:5d:ea:a6:62:33:85:52:67:ca:ad:c9:e1:d0:34:05:e5:
8d:18:9c:03:ef:a7:6e:b0:6e:ef:1c:c3:eb:28:fa:9e:4b:33:
30:76:09:02:90:e9:c1:e6:c5:ae:71:f9:a0:1d:12:2c:40:50:
b3:15:31:56:70:3e:15:82:58:5b:32:00:29:68:bd:fb:12:ab:
2e:ec:0e:65:4b:22:2b:8f:ac:fc:bf:44:07:bc:de:2b:02:ac:
2b:d9:21:dd:91:a2:45:c3:90:4a:b2:ac:1e:f0:ce:0c:5d:15:
0e:90:bb:14:13:ef:6b:f0:88:07:6b:c3:eb:a8:36:21:ca:a8:
ef:51:84:cb:f7:32:5d:13:31:3c:15:98:f1:a9:7f:20:ab:95:
77:96:42:21:d9:05:35:72:9c:1b:0f:6a:5a:7f:1d:02:cb:14:
83:d6:42:bf
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUW7xvSOBiGMaafJ8PshEpYmQrKo4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BjODJiNGY0YmRmMmIzNjI0ODYyY2RmYWMzZTMwOGJlMzcx
NjYzNjUxYjllMzk1NzJkYTQwMGM5YjJkZjBkMWFjMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDDyJ21NdSqMcYAucowwdMZ7v6FwhqH8wy6d3ZeovZawMz4
NoxTVEug3E5HqXYklQzGu8Hcp3W3nR7Oo53P0iPoGYipXo6NzcWU3lBzWEORD5J1
YwbWluX62rdUJxURKMkkhhwPNd5aPZ9stLHw6hKvXqgCnx+IRfg8zmV08ddR/MnW
+eEJzTvLg1OZ+9nxRtlyn8BDhiBAWngpt5J0Rfz9upduFLdPZo4IS6MeKaagqOO7
2hCzyOHyXTQ2CMq7g2Dynd2PIdY0lEYrROoIOuKsVqL5Gen+rJhtAUc+qac8nu/r
oPIMv9k78xpVkuhXr0ib8uKE3snxkpJBJGtGcOW7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUwFJKRrYf4i8FIOKDmmPKsZsv/pcwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkLzE1NDUzNGQ1LWRhNjktNDNmZS05ZjBjLWFhZDg4Yjk3NDgzYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEX+/owDQYJKoZIhvcNAQELBQADggEBAEsGKQzEJG0Yly6uUznqNmdWNa6G
KTjvs28TypMLmAV1LgqXLVj29Lu726zb2glU2wwfvVyjt3YojwDjKHDyDaAUlqF9
++GQTH/H2WUVCJMJYxL90ExKZtJ6S1ygXeqmYjOFUmfKrcnh0DQF5Y0YnAPvp26w
bu8cw+so+p5LMzB2CQKQ6cHmxa5x+aAdEixAULMVMVZwPhWCWFsyAClovfsSqy7s
DmVLIiuPrPy/RAe83isCrCvZId2RokXDkEqyrB7wzgxdFQ6QuxQT72vwiAdrw+uo
NiHKqO9RhMv3Ml0TMTwVmPGpfyCrlXeWQiHZBTVynBsPalp/HQLLFIPWQr8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:29 2025 by rpki-client