Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1da3f1fb-2590-422d-9b28-4bd14d22f09b.roa
File: 1da3f1fb-2590-422d-9b28-4bd14d22f09b.roa (raw, json)
Hash identifier: FVl5TyGLwx1Z0Bb5LTaNOTII9SRjlR8svPP0CDAlF0w=
Subject key identifier: DC:F6:F9:42:5F:15:64:5A:A3:C5:EF:73:0F:B3:1C:1D:69:E0:48:D8
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 78462311B511B97FED8726D44AF4BC3BD74B998D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1da3f1fb-2590-422d-9b28-4bd14d22f09b.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.239.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:46:23:11:b5:11:b9:7f:ed:87:26:d4:4a:f4:bc:3b:d7:4b:99:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=579557493473bb79d0cff89700b4b85e6bcc8e6686cdd06a3b7f6a030dc8a3d8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ff:fb:66:a3:a9:d1:26:0d:5c:83:7d:2d:c0:
84:c2:fb:47:bd:29:4b:d8:a8:62:79:dd:ef:ea:72:
1f:8d:2f:ad:90:7f:ef:a7:80:33:7e:7c:0a:c8:d9:
ea:45:03:8c:27:2a:13:fa:0b:9c:fa:2c:58:1a:ad:
91:95:11:27:4d:e4:2c:55:34:47:e9:e6:d4:14:ce:
81:72:35:4a:9e:8e:60:a5:90:e8:42:74:11:49:94:
7d:92:4b:6f:e0:64:53:e7:f4:16:10:ac:1a:79:30:
8f:46:54:5b:64:0e:40:79:1f:8d:a6:d6:b0:43:7e:
50:73:75:d9:88:1d:b1:f5:c2:8c:1b:65:10:01:fa:
40:1e:f7:cd:98:94:4e:13:97:d1:49:5e:0f:fe:4d:
b4:a4:f0:4e:27:95:46:f4:f0:e9:68:c2:46:14:d0:
4a:6a:c0:0e:36:f0:b8:53:a0:16:dc:e8:1b:e2:40:
3f:35:34:3d:9e:7d:d7:67:7a:b4:83:a5:3d:14:1a:
a6:d5:d1:f3:9e:5b:fe:75:14:0e:71:c6:01:c6:83:
64:f5:c1:b2:dc:78:66:83:14:e8:93:28:83:c5:3f:
f5:dc:29:0b:af:83:9e:c5:18:d5:0d:d1:dc:b6:f0:
4e:bd:6d:04:a6:7b:96:26:26:2c:de:ce:9e:64:c0:
a8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F6:F9:42:5F:15:64:5A:A3:C5:EF:73:0F:B3:1C:1D:69:E0:48:D8
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1da3f1fb-2590-422d-9b28-4bd14d22f09b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.239.113.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:c2:94:d9:82:28:eb:b0:b1:f1:f8:0e:cc:36:ee:2c:ac:54:
b9:66:8b:29:d1:f4:35:ad:3a:43:67:2d:9f:d8:29:e0:1a:6f:
96:0c:20:e7:a9:50:5e:46:01:14:de:1f:8e:89:e7:6c:5d:ef:
a3:4c:0c:5e:bb:43:ee:66:22:62:d8:b7:8a:89:20:b0:27:8f:
b5:87:57:04:d8:ae:9e:6a:ed:8c:31:9d:aa:49:92:6a:62:d7:
8f:eb:ad:95:d4:48:cb:1d:23:7c:0b:5b:64:c9:c1:2c:18:f0:
09:e3:32:8c:7e:c3:22:6b:91:25:47:25:25:94:5b:17:12:3e:
98:81:3a:10:17:d7:d5:a8:b0:55:e2:89:4d:b1:a9:96:cb:17:
51:68:27:f4:98:eb:0b:d1:9b:92:80:3c:0a:74:44:81:1f:58:
4e:4b:9d:19:91:1d:52:41:20:52:ee:d7:f1:a3:2a:d3:79:db:
7d:fe:f3:7b:60:fd:cd:c3:3f:2a:bb:bb:12:b7:08:11:4a:dc:
f3:65:7a:6e:4e:ff:35:01:f1:c2:db:c8:b7:bb:ac:e3:1d:f6:
ec:ba:52:18:94:d4:f2:b3:51:3b:4e:23:45:00:69:a7:64:38:
69:a0:3e:08:42:95:5a:06:82:0d:96:3d:15:0d:29:d1:6c:2e:
b8:e6:2f:88
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUeEYjEbURuX/thybUSvS8O9dLmY0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTE0MDAwMDAwWhcNMjUwMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A1Nzk1NTc0OTM0NzNiYjc5ZDBjZmY4OTcwMGI0Yjg1ZTZi
Y2M4ZTY2ODZjZGQwNmEzYjdmNmEwMzBkYzhhM2Q4MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDB//tmo6nRJg1cg30twITC+0e9KUvYqGJ53e/qch+NL62Q
f++ngDN+fArI2epFA4wnKhP6C5z6LFgarZGVESdN5CxVNEfp5tQUzoFyNUqejmCl
kOhCdBFJlH2SS2/gZFPn9BYQrBp5MI9GVFtkDkB5H42m1rBDflBzddmIHbH1wowb
ZRAB+kAe982YlE4Tl9FJXg/+TbSk8E4nlUb08OlowkYU0EpqwA428LhToBbc6Bvi
QD81ND2efddnerSDpT0UGqbV0fOeW/51FA5xxgHGg2T1wbLceGaDFOiTKIPFP/Xc
KQuvg57FGNUN0dy28E69bQSme5YmJizezp5kwKhBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU3Pb5Ql8VZFqjxe9zD7McHWngSNgwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzFkYTNmMWZiLTI1OTAtNDIyZC05YjI4LTRiZDE0ZDIyZjA5Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA273EwDQYJKoZIhvcNAQELBQADggEBAA/ClNmCKOuwsfH4Dsw27iysVLlm
iynR9DWtOkNnLZ/YKeAab5YMIOepUF5GARTeH46J52xd76NMDF67Q+5mImLYt4qJ
ILAnj7WHVwTYrp5q7YwxnapJkmpi14/rrZXUSMsdI3wLW2TJwSwY8AnjMox+wyJr
kSVHJSWUWxcSPpiBOhAX19WosFXiiU2xqZbLF1FoJ/SY6wvRm5KAPAp0RIEfWE5L
nRmRHVJBIFLu1/GjKtN5233+83tg/c3DPyq7uxK3CBFK3PNlem5O/zUB8cLbyLe7
rOMd9uy6UhiU1PKzUTtOI0UAaadkOGmgPghClVoGgg2WPRUNKdFsLrjmL4g=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:14:48 2025 by rpki-client