Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8f549665-8398-44a1-8d57-5658d76e1c61.roa
File: 8f549665-8398-44a1-8d57-5658d76e1c61.roa (raw, json)
Hash identifier: qrdJnVwXb1aoNoQRitvz/nwdhwr9U3LvJY58mHsgpNQ=
Subject key identifier: 7B:1C:B1:B3:19:30:B7:45:08:DF:1F:B5:26:E7:51:4B:AD:A8:4D:44
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 395A28DEDE02744D666B19EB7C63669A52106B17
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8f549665-8398-44a1-8d57-5658d76e1c61.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 69.169.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:5a:28:de:de:02:74:4d:66:6b:19:eb:7c:63:66:9a:52:10:6b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=02b17832517fd06c5b6404459d15d27b7e83b32cf01260128868a57b4459bc7a, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:d8:ee:00:0f:2f:20:e9:00:75:be:6d:ae:
1e:42:a4:67:c9:2f:38:28:ac:2d:24:66:e2:4c:e7:
51:83:58:a2:b5:5c:4f:49:75:85:e5:58:ca:9e:c0:
fd:ac:e3:0d:a2:1c:04:b8:eb:01:0c:fa:4e:c4:02:
32:61:2f:17:29:cd:26:8e:63:cb:a5:9d:05:83:75:
c0:ac:04:37:54:93:da:05:d2:0a:77:42:8e:ed:d4:
73:a0:3e:7a:57:0a:1b:e0:e9:61:8e:3f:81:3e:78:
42:34:46:0f:83:4a:0f:81:a7:0c:6d:18:06:60:34:
ec:c4:3e:01:6f:20:e0:06:7f:78:23:0e:30:9d:f2:
17:ae:ff:da:23:dc:8e:2a:b2:d4:bb:da:b7:ae:00:
b1:db:31:7e:fc:79:44:b8:fd:55:29:a8:4e:63:6a:
ee:42:1e:00:16:cd:fa:2a:c5:35:a5:93:04:c5:61:
8f:97:5c:c1:25:ce:cd:22:c0:93:9f:64:be:ff:32:
05:b3:f1:19:b9:d5:3a:25:12:05:8a:4b:af:20:88:
f5:8b:62:53:8a:df:7b:2b:83:76:1c:68:49:45:3a:
d5:64:c2:d9:7d:37:9a:0f:6b:7e:44:ad:57:ff:a8:
f5:ad:73:44:5f:e9:8b:4b:87:ec:92:2b:32:f6:74:
02:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1C:B1:B3:19:30:B7:45:08:DF:1F:B5:26:E7:51:4B:AD:A8:4D:44
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8f549665-8398-44a1-8d57-5658d76e1c61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.169.234.0/24
Signature Algorithm: sha256WithRSAEncryption
87:e2:2e:48:27:52:35:8a:2d:79:c6:bb:d4:ae:7e:cb:65:df:
4c:57:da:a5:a3:4c:76:72:05:e8:94:19:f9:b1:b7:52:85:13:
21:cf:c0:bb:b9:c1:7f:46:96:c0:9a:56:7c:f5:95:63:04:6e:
b4:08:07:b2:ef:46:ec:7d:9c:d5:6a:47:ca:a7:ce:51:30:09:
68:db:f3:b6:89:56:04:75:db:00:b0:85:d4:d9:61:05:8a:f9:
34:3a:c3:2b:82:a9:bb:9e:b4:45:e1:e4:43:23:84:ed:52:46:
2d:b8:37:ff:74:7b:f6:74:d6:f4:4f:b5:dc:4a:f0:af:f4:48:
64:49:4e:af:4b:db:a7:86:d0:0a:60:c2:64:7d:d2:09:cb:da:
8f:81:6e:b2:28:ec:99:f8:67:e5:57:43:0e:fc:22:6e:5e:2f:
fb:16:4c:a1:28:9b:7f:4d:0a:bb:16:87:2a:f6:7c:9a:a4:44:
0c:65:04:21:d3:32:e5:50:fa:cd:77:b2:4f:35:a8:6e:46:4c:
3d:5c:34:c4:24:1e:e1:4c:e3:44:a8:d3:60:88:41:52:01:24:
26:03:3d:ff:0c:5c:56:61:1f:77:9c:1f:1d:18:3f:1c:36:86:
49:ab:ef:a5:28:9b:0d:b5:ed:f6:fa:fe:a6:4d:71:4b:e3:4a:
ad:44:1c:a8
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOVoo3t4CdE1maxnrfGNmmlIQaxcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0AwMmIxNzgzMjUxN2ZkMDZjNWI2NDA0NDU5ZDE1ZDI3Yjdl
ODNiMzJjZjAxMjYwMTI4ODY4YTU3YjQ0NTliYzdhMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJZtjuAA8vIOkAdb5trh5CpGfJLzgorC0kZuJM51GDWKK1
XE9JdYXlWMqewP2s4w2iHAS46wEM+k7EAjJhLxcpzSaOY8ulnQWDdcCsBDdUk9oF
0gp3Qo7t1HOgPnpXChvg6WGOP4E+eEI0Rg+DSg+BpwxtGAZgNOzEPgFvIOAGf3gj
DjCd8heu/9oj3I4qstS72reuALHbMX78eUS4/VUpqE5jau5CHgAWzfoqxTWlkwTF
YY+XXMElzs0iwJOfZL7/MgWz8Rm51TolEgWKS68giPWLYlOK33srg3YcaElFOtVk
wtl9N5oPa35ErVf/qPWtc0Rf6YtLh+ySKzL2dAL7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUexyxsxkwt0UI3x+1JudRS62oTUQwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkLzhmNTQ5NjY1LTgzOTgtNDRhMS04ZDU3LTU2NThkNzZlMWM2MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABFqeowDQYJKoZIhvcNAQELBQADggEBAIfiLkgnUjWKLXnGu9Sufstl30xX
2qWjTHZyBeiUGfmxt1KFEyHPwLu5wX9GlsCaVnz1lWMEbrQIB7LvRux9nNVqR8qn
zlEwCWjb87aJVgR12wCwhdTZYQWK+TQ6wyuCqbuetEXh5EMjhO1SRi24N/90e/Z0
1vRPtdxK8K/0SGRJTq9L26eG0ApgwmR90gnL2o+BbrIo7Jn4Z+VXQw78Im5eL/sW
TKEom39NCrsWhyr2fJqkRAxlBCHTMuVQ+s13sk81qG5GTD1cNMQkHuFM40So02CI
QVIBJCYDPf8MXFZhH3ecHx0YPxw2hkmr76Uomw217fb6/qZNcUvjSq1EHKg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:17:41 2025 by rpki-client