Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f174f360-a3ca-4335-8414-4727cef110a8.roa
File: f174f360-a3ca-4335-8414-4727cef110a8.roa (raw, json)
Hash identifier: qw+cjDWNxBesBgyaIEqlv4IuzShXq5Iml9sl/fVi0Go=
Subject key identifier: 71:49:9E:C5:16:9F:E6:D1:63:C4:B3:AB:65:79:45:AB:A7:81:96:23
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 6F442CDF76245AB3F1A9B22F29235BDC5D2FF107
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f174f360-a3ca-4335-8414-4727cef110a8.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.249.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:44:2c:df:76:24:5a:b3:f1:a9:b2:2f:29:23:5b:dc:5d:2f:f1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=12a3ba567b9084a4fd64dabc51b2c90d3f1ddb341a7d6e93e34f54a2cf2d64f2, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:50:da:6a:c9:6a:e9:8e:fa:72:88:f6:3a:c8:
62:08:11:46:52:65:76:5c:af:be:2b:42:9f:ee:71:
1b:1c:5b:10:a7:4d:69:41:e0:3c:cf:ff:88:86:3d:
eb:68:78:3e:0e:4b:d8:a5:c6:79:54:ca:89:5c:a6:
05:b8:fc:50:25:02:fe:55:2a:89:48:18:b9:9b:47:
0d:78:96:da:f5:88:a7:e5:36:79:e7:93:28:3f:67:
fb:b0:bf:c4:6c:d6:ea:18:1d:41:2c:88:6c:fe:bc:
43:f3:24:ee:2f:f1:24:66:ea:36:9d:ac:f6:1b:e7:
d8:91:b2:31:92:ff:8f:bf:b7:c2:2f:a0:38:cb:c6:
f3:a4:d6:8e:2f:cb:7d:52:07:01:5c:c5:9f:c1:7e:
40:e7:dc:6d:79:bc:36:fe:8a:26:94:be:f4:0d:bc:
a7:2a:bd:31:7e:37:74:01:a5:b2:cd:87:1b:fc:53:
fe:95:2a:80:6a:c3:3e:dc:59:01:6a:e2:f2:4d:e9:
98:0f:91:e7:61:ee:48:4f:ae:c8:f4:34:62:fe:35:
c4:9a:06:1f:fb:2b:f9:09:d0:84:95:8e:58:9e:bf:
eb:19:b0:1f:0f:5c:8c:e0:50:b8:18:8f:7e:36:70:
02:bb:7d:80:fd:06:eb:20:5b:a1:b5:38:cd:53:f0:
83:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:49:9E:C5:16:9F:E6:D1:63:C4:B3:AB:65:79:45:AB:A7:81:96:23
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f174f360-a3ca-4335-8414-4727cef110a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.213.0/24
Signature Algorithm: sha256WithRSAEncryption
80:79:08:b3:1f:17:64:13:3d:bf:90:46:12:d6:d3:dd:01:cc:
33:8b:2b:3d:61:b0:0a:2d:48:95:3d:8e:fb:85:c9:1d:19:f2:
9a:af:f2:9d:48:35:a7:47:6f:95:b0:2d:0d:aa:b6:be:ab:71:
67:f8:b8:16:ac:38:bb:90:b5:00:66:6d:b0:8a:d0:ef:2b:d9:
bd:7a:a7:50:8c:72:ff:0e:53:9d:b1:a9:b8:4b:8a:9d:a3:30:
2d:04:af:33:3c:35:c8:a8:2f:63:4f:ea:e4:ce:f0:fc:23:69:
b6:d5:28:79:e2:d9:3e:bf:61:ed:28:80:42:8b:35:bb:63:d9:
1c:ae:ff:92:b5:87:7c:3b:38:07:b1:ee:a9:74:f0:25:07:5e:
70:ae:e3:48:19:5f:6a:d7:7a:98:33:8e:07:2e:ab:25:d5:3d:
2b:94:0a:d3:f0:bd:e0:d3:88:74:c6:58:88:fe:f5:79:be:49:
46:29:9b:7d:d2:3b:4d:64:83:c7:22:ca:51:33:6d:05:4b:54:
8a:2a:69:ed:f0:68:9f:4b:6f:62:9c:57:b9:2a:ba:1e:cc:4e:
9e:e6:a1:6e:ad:0d:99:f8:33:f1:66:b5:b7:94:a0:a6:15:d5:
c3:35:13:f5:bb:9b:0e:38:1e:eb:cc:ae:2a:51:36:39:d4:80:
81:fd:c5:3a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUb0Qs33YkWrPxqbIvKSNb3F0v8QcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMTI1MDAwMDAwWhcNMjUwMzAxMjM1OTU5
WjB6MUkwRwYDVQQFE0AxMmEzYmE1NjdiOTA4NGE0ZmQ2NGRhYmM1MWIyYzkwZDNm
MWRkYjM0MWE3ZDZlOTNlMzRmNTRhMmNmMmQ2NGYyMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDRUNpqyWrpjvpyiPY6yGIIEUZSZXZcr74rQp/ucRscWxCn
TWlB4DzP/4iGPetoeD4OS9ilxnlUyolcpgW4/FAlAv5VKolIGLmbRw14ltr1iKfl
Nnnnkyg/Z/uwv8Rs1uoYHUEsiGz+vEPzJO4v8SRm6jadrPYb59iRsjGS/4+/t8Iv
oDjLxvOk1o4vy31SBwFcxZ/BfkDn3G15vDb+iiaUvvQNvKcqvTF+N3QBpbLNhxv8
U/6VKoBqwz7cWQFq4vJN6ZgPkedh7khPrsj0NGL+NcSaBh/7K/kJ0ISVjliev+sZ
sB8PXIzgULgYj342cAK7fYD9BusgW6G1OM1T8IOhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUcUmexRaf5tFjxLOrZXlFq6eBliMwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkL2YxNzRmMzYwLWEzY2EtNDMzNS04NDE0LTQ3MjdjZWYxMTBhOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAX+dUwDQYJKoZIhvcNAQELBQADggEBAIB5CLMfF2QTPb+QRhLW090BzDOL
Kz1hsAotSJU9jvuFyR0Z8pqv8p1INadHb5WwLQ2qtr6rcWf4uBasOLuQtQBmbbCK
0O8r2b16p1CMcv8OU52xqbhLip2jMC0ErzM8NcioL2NP6uTO8PwjabbVKHni2T6/
Ye0ogEKLNbtj2Ryu/5K1h3w7OAex7ql08CUHXnCu40gZX2rXepgzjgcuqyXVPSuU
CtPwveDTiHTGWIj+9Xm+SUYpm33SO01kg8ciylEzbQVLVIoqae3waJ9Lb2KcV7kq
uh7MTp7moW6tDZn4M/FmtbeUoKYV1cM1E/W7mw44HuvMripRNjnUgIH9xTo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:11:57 2025 by rpki-client