Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/53ebdc18-8f5d-4119-b14e-730702513e1b.roa
File: 53ebdc18-8f5d-4119-b14e-730702513e1b.roa (raw, json)
Hash identifier: 4Dn0PFQ3UWsvbO6t7aURtZSREA/8m+L/HpQJ9E1lsr0=
Subject key identifier: C2:A0:EF:7C:F3:22:79:86:84:00:A1:15:8E:A0:32:CD:CD:08:86:42
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 16C42B5A10325141875066F306158F02A61999C0
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/53ebdc18-8f5d-4119-b14e-730702513e1b.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.221.166.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:c4:2b:5a:10:32:51:41:87:50:66:f3:06:15:8f:02:a6:19:99:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=791e8d66c697fdce0c66b5605724b31c1ff923a1239d584effa81a23a8f10df9, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:83:a0:b6:51:73:01:c0:5c:90:34:8b:04:78:
b3:7f:29:32:e9:01:75:6e:d1:f5:74:6f:4d:15:c5:
a1:af:0c:8d:7d:f6:2d:57:92:78:d3:53:0b:c1:7d:
a3:ee:9c:c0:4d:cd:30:58:e8:9c:5e:3a:41:f0:48:
de:dd:dd:8e:86:a9:4f:31:38:f9:3e:60:b4:9a:db:
10:00:9b:38:0d:c4:c0:76:32:25:b7:ea:e5:26:7e:
94:71:8e:d6:35:43:e4:e1:dd:60:40:e5:4b:fb:c0:
6d:10:56:fe:92:c3:75:59:c9:04:66:37:24:3e:8a:
8e:3c:2f:a6:13:13:2d:8d:94:fa:97:17:c2:6f:d7:
30:78:ce:e0:18:c0:77:a5:48:e2:be:3e:a8:76:45:
80:9d:36:5e:b7:4d:07:06:3b:93:6d:54:6c:34:32:
55:11:4d:76:cd:43:a0:35:53:06:35:08:a5:12:ea:
42:6c:c1:d3:53:75:bf:be:15:0d:8a:f0:d3:ba:3f:
5e:de:ac:a3:e7:55:1c:07:d0:17:ef:f4:7f:cb:5e:
46:d2:09:c0:a2:f0:87:b8:3c:46:07:77:e1:63:00:
23:73:8b:62:bc:82:47:2a:1b:38:d4:1d:f8:33:5b:
ba:2f:ea:08:14:de:0d:b8:c4:48:dd:48:2a:26:85:
20:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A0:EF:7C:F3:22:79:86:84:00:A1:15:8E:A0:32:CD:CD:08:86:42
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/53ebdc18-8f5d-4119-b14e-730702513e1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.221.166.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:f9:fa:8a:3e:9d:af:87:a1:2e:b2:b7:9e:35:6f:a9:cc:7a:
0b:57:7b:fc:c5:65:d7:70:ca:8f:51:e1:7e:db:de:81:09:1f:
3f:6f:f9:4a:4c:4c:37:f2:07:3f:a0:b1:fc:ae:d6:85:00:0c:
84:0d:f4:7d:a3:fd:e1:0b:36:a3:98:2f:67:c9:66:fd:a0:00:
a6:a6:8a:19:ad:8b:62:11:7f:f0:55:34:ed:65:4f:51:42:fc:
ee:e5:66:31:ef:b9:76:a9:55:79:29:d6:73:ed:4e:86:ac:d7:
31:e2:2f:63:11:93:bf:fa:79:ef:9a:34:c4:77:cc:a6:98:e8:
11:b9:f5:d0:e8:45:ef:f4:9b:1a:82:fe:e4:c4:81:04:b1:17:
7f:d4:6d:b0:4b:da:75:85:b6:de:56:3c:bc:6c:7e:76:63:69:
20:5f:33:3f:fa:47:aa:fd:bd:5f:da:22:3f:8f:3e:86:36:ab:
87:c7:f9:e4:dc:dc:3c:20:f2:89:31:58:d4:78:2e:12:7e:64:
e4:e5:89:28:9b:27:b7:00:96:42:4a:8e:37:4b:08:17:ce:c5:
aa:b7:96:56:33:c5:37:1b:35:29:9d:fd:1a:5e:92:c4:47:e4:
0a:f3:93:90:9a:19:7d:38:04:a6:29:44:60:16:20:19:6d:a1:
06:1d:8c:04
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFsQrWhAyUUGHUGbzBhWPAqYZmcAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMTI0MDAwMDAwWhcNMjUwMjI4MjM1OTU5
WjB6MUkwRwYDVQQFE0A3OTFlOGQ2NmM2OTdmZGNlMGM2NmI1NjA1NzI0YjMxYzFm
ZjkyM2ExMjM5ZDU4NGVmZmE4MWEyM2E4ZjEwZGY5MS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDWg6C2UXMBwFyQNIsEeLN/KTLpAXVu0fV0b00VxaGvDI19
9i1XknjTUwvBfaPunMBNzTBY6JxeOkHwSN7d3Y6GqU8xOPk+YLSa2xAAmzgNxMB2
MiW36uUmfpRxjtY1Q+Th3WBA5Uv7wG0QVv6Sw3VZyQRmNyQ+io48L6YTEy2NlPqX
F8Jv1zB4zuAYwHelSOK+Pqh2RYCdNl63TQcGO5NtVGw0MlURTXbNQ6A1UwY1CKUS
6kJswdNTdb++FQ2K8NO6P17erKPnVRwH0Bfv9H/LXkbSCcCi8Ie4PEYHd+FjACNz
i2K8gkcqGzjUHfgzW7ov6ggU3g24xEjdSComhSCBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUwqDvfPMieYaEAKEVjqAyzc0IhkIwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkLzUzZWJkYzE4LThmNWQtNDExOS1iMTRlLTczMDcwMjUxM2UxYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHY3aYwDQYJKoZIhvcNAQELBQADggEBADz5+oo+na+HoS6yt541b6nMegtX
e/zFZddwyo9R4X7b3oEJHz9v+UpMTDfyBz+gsfyu1oUADIQN9H2j/eELNqOYL2fJ
Zv2gAKamihmti2IRf/BVNO1lT1FC/O7lZjHvuXapVXkp1nPtToas1zHiL2MRk7/6
ee+aNMR3zKaY6BG59dDoRe/0mxqC/uTEgQSxF3/UbbBL2nWFtt5WPLxsfnZjaSBf
Mz/6R6r9vV/aIj+PPoY2q4fH+eTc3Dwg8okxWNR4LhJ+ZOTliSibJ7cAlkJKjjdL
CBfOxaq3llYzxTcbNSmd/RpeksRH5Arzk5CaGX04BKYpRGAWIBltoQYdjAQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:20 2025 by rpki-client