Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa
File: efff1c41-4813-4726-a794-2bd64d641531.roa (raw, json)
Hash identifier: GWxiCFHjDusI4l2LBcibdeyzMt+m8DWrr3OdAFw7Kf0=
Subject key identifier: 26:9B:B4:98:50:CE:44:FB:73:70:07:55:DC:21:18:49:21:05:0E:7A
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 09B438FD57557843E0880BBE98F953769F9B1C65
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.251.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:b4:38:fd:57:55:78:43:e0:88:0b:be:98:f9:53:76:9f:9b:1c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=452f2a9b70366987c0f343f5b190d24c907373ce944c02f7159e06ac40729954, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:f8:3c:df:69:85:c2:6a:b4:d7:51:1c:d3:
5b:96:39:88:e9:f2:c3:0a:fb:9e:16:46:b9:66:50:
74:51:a3:ec:a9:9a:14:00:ab:34:7a:c2:f2:b8:25:
be:91:6b:ce:9a:0d:cc:55:b2:8d:d9:7a:7d:42:4a:
41:a2:be:de:84:70:51:27:dc:ec:d8:3e:a2:28:47:
f5:e7:20:6e:01:d0:78:66:61:44:3c:27:42:6e:55:
dd:16:c4:dc:19:93:06:4a:3c:62:c8:c1:5a:3a:07:
99:18:bc:7c:7e:0a:e2:0e:02:a7:5e:c4:55:01:05:
56:4a:06:f0:11:95:60:6b:dc:8b:81:0f:59:1a:69:
92:d1:de:21:37:62:0b:e5:0c:38:61:2b:e0:b8:83:
4d:a3:c7:59:08:74:d8:4f:75:4b:a0:b0:92:43:a6:
d2:f9:58:72:fa:3d:5a:79:27:19:72:19:10:6a:b2:
51:ca:25:81:49:6b:2f:47:e1:89:d2:4e:fd:75:e6:
93:07:30:49:81:7e:7e:8a:0d:d8:b2:11:ea:da:1c:
66:b1:8f:3b:78:12:5f:c6:31:f6:12:75:9b:c1:b9:
03:7f:4a:40:6d:36:d4:c7:3f:e9:cf:b9:df:45:84:
c5:64:7d:ba:e0:39:d5:12:8e:ba:83:21:bc:f6:8e:
c2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9B:B4:98:50:CE:44:FB:73:70:07:55:DC:21:18:49:21:05:0E:7A
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.235.0/24
Signature Algorithm: sha256WithRSAEncryption
49:7e:f3:f9:14:63:ba:07:b2:61:21:30:3a:4c:1f:6e:01:d6:
5e:b5:4f:0b:71:1d:d2:06:81:fa:5c:2a:6e:ee:be:07:0d:0a:
0e:e5:3f:11:a5:df:c9:a8:1d:0d:3f:88:d2:96:77:10:39:1e:
7b:27:77:a3:81:2f:b5:82:4a:15:66:93:32:30:27:b5:b7:a7:
9e:e4:25:24:1a:66:06:16:1a:73:d9:71:9c:56:5e:14:93:f1:
c4:cd:04:b9:78:93:0f:05:bc:f3:25:29:ae:5e:0f:21:e2:39:
14:39:91:41:dd:31:5e:ba:60:a7:9b:bf:fd:d8:59:8d:9c:c8:
4c:19:9e:23:ec:10:ba:18:5a:fc:37:55:da:63:9a:a0:61:8d:
fb:ff:90:48:a6:f6:38:b2:e1:40:a8:44:a0:d5:ad:b0:1a:02:
76:9f:9d:63:60:a4:a4:00:62:a7:d7:e1:26:3e:69:96:09:11:
1e:e3:c8:ac:70:52:16:9f:88:74:4c:d2:5e:51:d2:62:05:d3:
ee:cb:20:86:45:0a:19:84:ec:e8:82:34:3d:8c:4a:f6:ad:7c:
c8:78:b3:cd:c8:93:1e:19:90:18:b3:de:7d:4d:01:f3:3f:61:
1f:8a:a7:85:12:e5:a8:bb:9d:97:de:e6:48:a8:93:1d:73:21:
10:0a:0f:ba
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCbQ4/VdVeEPgiAu+mPlTdp+bHGUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMTI1MDAwMDAwWhcNMjUwMzAxMjM1OTU5
WjB6MUkwRwYDVQQFE0A0NTJmMmE5YjcwMzY2OTg3YzBmMzQzZjViMTkwZDI0Yzkw
NzM3M2NlOTQ0YzAyZjcxNTllMDZhYzQwNzI5OTU0MS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqE/g832mFwmq011Ec01uWOYjp8sMK+54WRrlmUHRRo+yp
mhQAqzR6wvK4Jb6Ra86aDcxVso3Zen1CSkGivt6EcFEn3OzYPqIoR/XnIG4B0Hhm
YUQ8J0JuVd0WxNwZkwZKPGLIwVo6B5kYvHx+CuIOAqdexFUBBVZKBvARlWBr3IuB
D1kaaZLR3iE3YgvlDDhhK+C4g02jx1kIdNhPdUugsJJDptL5WHL6PVp5JxlyGRBq
slHKJYFJay9H4YnSTv115pMHMEmBfn6KDdiyEeraHGaxjzt4El/GMfYSdZvBuQN/
SkBtNtTHP+nPud9FhMVkfbrgOdUSjrqDIbz2jsKDAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUJpu0mFDORPtzcAdV3CEYSSEFDnowHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkL2VmZmYxYzQxLTQ4MTMtNDcyNi1hNzk0LTJiZDY0ZDY0MTUzMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAX++swDQYJKoZIhvcNAQELBQADggEBAEl+8/kUY7oHsmEhMDpMH24B1l61
TwtxHdIGgfpcKm7uvgcNCg7lPxGl38moHQ0/iNKWdxA5Hnsnd6OBL7WCShVmkzIw
J7W3p57kJSQaZgYWGnPZcZxWXhST8cTNBLl4kw8FvPMlKa5eDyHiORQ5kUHdMV66
YKebv/3YWY2cyEwZniPsELoYWvw3VdpjmqBhjfv/kEim9jiy4UCoRKDVrbAaAnaf
nWNgpKQAYqfX4SY+aZYJER7jyKxwUhafiHRM0l5R0mIF0+7LIIZFChmE7OiCND2M
SvatfMh4s83Ikx4ZkBiz3n1NAfM/YR+Kp4US5ai7nZfe5kiokx1zIRAKD7o=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:09:42 2025 by rpki-client