Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/946aec0a-dddf-49ab-b5bf-ec7281eb1e7e.roa
File: 946aec0a-dddf-49ab-b5bf-ec7281eb1e7e.roa (raw, json)
Hash identifier: 6MFNheNHY06104DeyEYKp8Aae7A7iW53PWrwR8VbuC4=
Subject key identifier: 71:9B:C1:91:62:B7:3F:B8:93:68:5D:C4:43:3E:43:B5:A9:0B:F2:08
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 68D5BC7F32CBF07A050619F964624A09A6F7F270
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/946aec0a-dddf-49ab-b5bf-ec7281eb1e7e.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.251.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:d5:bc:7f:32:cb:f0:7a:05:06:19:f9:64:62:4a:09:a6:f7:f2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=85c72f6393126c81594eacbda670b629fc5fbc1d8b517d1bd76646e6f00bf611, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:a4:86:a8:8e:22:89:6f:09:48:9d:ac:d0:
a2:81:a1:72:44:ed:41:e2:bf:2c:72:55:59:14:35:
43:1b:d6:15:22:48:c5:ea:65:53:ca:d4:98:67:cf:
fd:c1:05:81:30:40:62:79:57:4a:6a:7e:fb:a3:52:
d8:72:87:a6:1f:53:1d:b4:4b:06:41:3d:b8:ad:d7:
0d:9f:42:fe:c5:33:d7:a1:0f:63:b2:41:10:5a:f3:
37:3d:5a:6f:6e:61:e8:33:d0:f6:ac:06:4c:f1:fd:
39:71:11:90:3f:f4:5b:42:98:1b:5e:0e:07:9a:56:
ac:fb:ac:bc:51:5a:dc:ec:cc:24:4e:ea:6f:56:16:
50:e3:2e:3d:5d:49:0c:0d:92:15:32:cf:8e:e2:21:
8f:49:46:ca:02:2d:b6:3f:e6:a5:44:e8:fa:c2:2a:
53:7c:dd:21:8c:6a:08:44:c9:72:0f:35:1d:11:14:
a0:83:fc:fb:a1:7f:ad:b5:70:51:0e:2e:a7:eb:d8:
e1:f5:9d:11:27:b9:e5:88:1b:25:cc:c9:ef:61:6e:
4d:52:86:5d:9c:62:34:74:e9:d9:82:c7:9a:0e:e1:
8c:30:ac:6a:82:4d:f0:b5:32:09:5e:86:31:d2:09:
eb:63:da:27:af:24:29:8c:60:b4:18:af:76:59:88:
13:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9B:C1:91:62:B7:3F:B8:93:68:5D:C4:43:3E:43:B5:A9:0B:F2:08
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/946aec0a-dddf-49ab-b5bf-ec7281eb1e7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.225.0/24
Signature Algorithm: sha256WithRSAEncryption
88:5d:e5:66:01:f0:27:57:b1:a3:7b:29:7a:f8:4e:3a:db:53:
72:6b:68:f2:75:6a:40:a6:82:a5:a7:14:3f:6c:a6:eb:28:3e:
fb:14:44:5a:14:65:9b:72:f5:0e:a9:3b:28:be:3c:87:1e:54:
13:fe:65:be:44:3c:bb:cf:37:78:25:6c:f9:87:47:c5:ef:5e:
a0:84:c6:c8:aa:16:2f:1f:50:0e:33:28:b7:4f:13:eb:9f:58:
58:6e:a6:cd:8c:21:79:3d:7c:cb:2e:8d:01:da:e4:09:8a:3a:
4e:f5:42:67:54:32:1e:d3:93:a1:d6:cb:1c:1b:10:f1:2a:da:
54:59:9e:80:f7:a5:e2:7f:8c:0b:48:d4:57:23:d4:4c:5c:f5:
42:5a:ef:6c:a9:de:f1:73:07:11:a2:08:bd:34:e0:7e:dc:b9:
b4:d0:7d:c3:73:26:c2:89:59:7b:55:02:5c:0c:6d:ee:83:77:
34:fc:5c:16:70:5f:09:e6:ec:04:dc:fb:01:bc:27:d7:c5:30:
ff:9d:cb:91:0e:44:c1:69:43:46:d6:64:fc:1a:4b:7b:5a:eb:
0f:2b:a4:e6:ab:00:56:2b:2c:59:13:14:e5:40:bb:87:cc:5d:
0f:a0:18:64:4f:ed:8c:e5:09:cc:34:a8:2d:3c:53:dc:2c:cb:
45:54:08:c0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUaNW8fzLL8HoFBhn5ZGJKCab38nAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMTI1MDAwMDAwWhcNMjUwMzAxMjM1OTU5
WjB6MUkwRwYDVQQFE0A4NWM3MmY2MzkzMTI2YzgxNTk0ZWFjYmRhNjcwYjYyOWZj
NWZiYzFkOGI1MTdkMWJkNzY2NDZlNmYwMGJmNjExMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCyZqSGqI4iiW8JSJ2s0KKBoXJE7UHivyxyVVkUNUMb1hUi
SMXqZVPK1Jhnz/3BBYEwQGJ5V0pqfvujUthyh6YfUx20SwZBPbit1w2fQv7FM9eh
D2OyQRBa8zc9Wm9uYegz0PasBkzx/TlxEZA/9FtCmBteDgeaVqz7rLxRWtzszCRO
6m9WFlDjLj1dSQwNkhUyz47iIY9JRsoCLbY/5qVE6PrCKlN83SGMaghEyXIPNR0R
FKCD/Puhf621cFEOLqfr2OH1nREnueWIGyXMye9hbk1Shl2cYjR06dmCx5oO4Yww
rGqCTfC1MglehjHSCetj2ievJCmMYLQYr3ZZiBPXAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUcZvBkWK3P7iTaF3EQz5DtakL8ggwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkLzk0NmFlYzBhLWRkZGYtNDlhYi1iNWJmLWVjNzI4MWViMWU3ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAX++EwDQYJKoZIhvcNAQELBQADggEBAIhd5WYB8CdXsaN7KXr4TjrbU3Jr
aPJ1akCmgqWnFD9spusoPvsURFoUZZty9Q6pOyi+PIceVBP+Zb5EPLvPN3glbPmH
R8XvXqCExsiqFi8fUA4zKLdPE+ufWFhups2MIXk9fMsujQHa5AmKOk71QmdUMh7T
k6HWyxwbEPEq2lRZnoD3peJ/jAtI1Fcj1Exc9UJa72yp3vFzBxGiCL004H7cubTQ
fcNzJsKJWXtVAlwMbe6DdzT8XBZwXwnm7ATc+wG8J9fFMP+dy5EORMFpQ0bWZPwa
S3ta6w8rpOarAFYrLFkTFOVAu4fMXQ+gGGRP7YzlCcw0qC08U9wsy0VUCMA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:26:56 2025 by rpki-client