Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09ca1027-30ab-4d6b-ba5d-ad69866619cf.roa
File: 09ca1027-30ab-4d6b-ba5d-ad69866619cf.roa (raw, json)
Hash identifier: FxAkLgU4e1g2p04LXP5+ew6TDSmwjXmAEGiNOtYErj4=
Subject key identifier: C0:DF:C0:34:1D:0C:3C:A9:96:7D:BB:C5:C1:58:20:C8:71:31:F3:CE
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3BDE2DC9CC309CDF082D507208B028C61A505455
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09ca1027-30ab-4d6b-ba5d-ad69866619cf.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.177.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:de:2d:c9:cc:30:9c:df:08:2d:50:72:08:b0:28:c6:1a:50:54:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=3a17066769b95b7fb19c442cae4d50174a36b38b77e59bc654a511840006ee29, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:78:97:da:6f:8b:b7:bc:37:46:ec:17:51:99:
8c:0b:6a:4c:33:19:9b:77:db:17:5a:ac:fc:f1:79:
12:d3:df:4c:f0:45:85:c7:52:df:ad:eb:1a:00:4e:
52:49:6e:4c:58:82:cb:fc:96:06:31:b2:3b:ca:40:
1d:a1:29:40:bb:da:fd:6b:90:60:17:b1:3f:40:93:
fd:1c:4b:2b:5a:2e:06:62:60:42:d1:13:0d:4d:0c:
36:e4:12:18:7a:ac:48:42:6f:bb:5f:5c:9c:52:4b:
a2:47:d0:b1:3d:79:0f:1b:0c:c8:f2:f3:25:20:e8:
1e:6d:af:91:f4:69:53:a2:50:d5:39:b6:08:87:d5:
4e:b8:1c:c3:17:a5:0a:90:31:9e:09:24:1b:7b:94:
96:9a:b2:28:1e:35:47:58:b1:f6:1d:4d:2c:5a:18:
ab:13:d0:59:2e:aa:f0:61:0c:72:e5:64:92:48:3b:
f4:ab:f9:55:a7:91:2e:64:91:62:c4:d9:76:fa:71:
ba:07:18:c0:81:c9:1a:60:fc:67:64:f1:14:8c:f6:
26:36:54:e2:7f:19:3b:d4:bf:4d:f7:62:95:c6:18:
f0:df:20:66:a4:fb:f3:9e:ea:74:b8:4c:e5:4c:1c:
77:43:09:a3:d3:65:a2:92:a3:54:d1:83:1a:04:cd:
40:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DF:C0:34:1D:0C:3C:A9:96:7D:BB:C5:C1:58:20:C8:71:31:F3:CE
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09ca1027-30ab-4d6b-ba5d-ad69866619cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.177.72.0/24
Signature Algorithm: sha256WithRSAEncryption
05:29:c6:dc:a6:88:18:78:18:cd:e6:ab:b4:aa:2a:28:10:a4:
6d:2d:29:ab:03:e4:03:d1:93:1d:0c:59:7e:95:ad:55:22:bd:
1b:d4:a1:56:96:94:20:0a:b6:bc:6d:87:ad:aa:48:d7:0c:c3:
20:72:b8:7b:17:e6:a6:bc:0f:91:40:0f:3b:dc:a2:c1:00:d8:
e7:3a:25:2d:76:f3:39:38:a7:f6:e7:8d:90:1d:23:0f:8a:26:
af:9c:0d:af:9d:2d:d4:f2:98:76:6f:84:51:4b:4c:06:92:fc:
de:88:93:90:4e:73:ed:5f:aa:f4:fd:32:b6:d5:59:7a:25:3f:
b8:a5:6b:c7:59:38:cc:e3:93:92:3d:ba:b4:e9:92:4f:43:6e:
c9:70:49:8d:10:cd:ea:2d:65:e2:a6:1a:bd:98:fe:ec:0a:d3:
76:05:be:73:37:34:a9:c0:5f:23:68:17:f3:9b:3c:72:fc:e9:
f9:9c:92:95:b0:49:de:16:4c:29:e0:5b:34:9d:fb:2a:e2:e4:
07:c7:42:98:a4:db:07:a2:b6:01:5a:18:57:46:29:4c:8b:81:
d6:8a:a5:35:9e:05:26:e7:90:c4:a5:84:df:30:c9:b0:dc:eb:
89:c3:12:8e:d7:4a:18:db:59:85:0b:fc:17:fc:db:ef:43:08:
2d:0b:95:f4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUO94tycwwnN8ILVByCLAoxhpQVFUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0AzYTE3MDY2NzY5Yjk1YjdmYjE5YzQ0MmNhZTRkNTAxNzRh
MzZiMzhiNzdlNTliYzY1NGE1MTE4NDAwMDZlZTI5MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDSeJfab4u3vDdG7BdRmYwLakwzGZt32xdarPzxeRLT30zw
RYXHUt+t6xoATlJJbkxYgsv8lgYxsjvKQB2hKUC72v1rkGAXsT9Ak/0cSytaLgZi
YELREw1NDDbkEhh6rEhCb7tfXJxSS6JH0LE9eQ8bDMjy8yUg6B5tr5H0aVOiUNU5
tgiH1U64HMMXpQqQMZ4JJBt7lJaasigeNUdYsfYdTSxaGKsT0FkuqvBhDHLlZJJI
O/Sr+VWnkS5kkWLE2Xb6cboHGMCByRpg/Gdk8RSM9iY2VOJ/GTvUv033YpXGGPDf
IGak+/Oe6nS4TOVMHHdDCaPTZaKSo1TRgxoEzUDRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUwN/ANB0MPKmWfbvFwVggyHEx884wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzA5Y2ExMDI3LTMwYWItNGQ2Yi1iYTVkLWFkNjk4NjY2MTljZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAPsUgwDQYJKoZIhvcNAQELBQADggEBAAUpxtymiBh4GM3mq7SqKigQpG0t
KasD5APRkx0MWX6VrVUivRvUoVaWlCAKtrxth62qSNcMwyByuHsX5qa8D5FADzvc
osEA2Oc6JS128zk4p/bnjZAdIw+KJq+cDa+dLdTymHZvhFFLTAaS/N6Ik5BOc+1f
qvT9MrbVWXolP7ila8dZOMzjk5I9urTpkk9DbslwSY0QzeotZeKmGr2Y/uwK03YF
vnM3NKnAXyNoF/ObPHL86fmckpWwSd4WTCngWzSd+yri5AfHQpik2weitgFaGFdG
KUyLgdaKpTWeBSbnkMSlhN8wybDc64nDEo7XShjbWYUL/Bf82+9DCC0LlfQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:16 2025 by rpki-client