Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20dfdb8e-82f9-432c-9d09-08b35b26e968.roa
File: 20dfdb8e-82f9-432c-9d09-08b35b26e968.roa (raw, json)
Hash identifier: oJHH5hcwEZOZ/QLEcrWOs3cmI63H2n/KBIN2zQfM8io=
Subject key identifier: 73:AC:26:8B:0C:7A:62:63:3A:DB:85:56:5D:DC:5A:5F:88:C0:AB:94
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 30B31F0E2EEB9ECDEA28C82006363DBE680DA9AD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20dfdb8e-82f9-432c-9d09-08b35b26e968.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.95.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:b3:1f:0e:2e:eb:9e:cd:ea:28:c8:20:06:36:3d:be:68:0d:a9:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=d4a14d41cfc442b3d137c81b42f94e3ed8cd089d19757c6733753cb7b6fbd6fb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4f:78:39:b7:a2:56:d0:03:ad:5e:75:ac:e6:
83:e5:a9:a7:00:e8:a4:d1:4e:28:cb:d7:6b:e0:5f:
9f:f2:ad:f0:da:2d:b7:6e:4d:b6:1e:49:b1:2f:5b:
d2:0b:39:40:01:a8:9c:a1:d1:18:ac:a6:43:f1:07:
5d:05:6d:b3:5a:f7:13:26:08:8f:1d:d7:df:33:2a:
3c:8f:76:3b:0a:75:7a:a7:9e:bb:32:df:87:27:87:
05:60:d5:35:0d:d9:e8:63:de:c7:8b:a0:27:76:3d:
bf:52:7a:11:bf:19:c8:a6:5f:73:63:bd:71:1c:2a:
d7:9a:ba:17:94:17:b4:2f:92:8f:7e:ce:54:ee:cb:
00:d7:ca:0d:37:bb:ad:2a:af:ed:83:f5:e8:dd:cc:
c4:33:d3:91:ed:3d:70:84:0e:06:9b:67:df:81:4e:
ff:80:a4:cb:9e:72:b4:07:d9:4b:dc:33:16:2b:4a:
e2:a1:6c:0f:fa:ef:e9:a2:08:1d:39:53:51:08:a6:
1b:56:c5:c4:c9:94:03:eb:65:d5:9d:40:45:26:1f:
14:e3:6c:b5:95:52:e4:fc:5e:8d:16:8a:47:cf:c8:
4a:cc:f5:05:f6:71:9c:b0:bd:c2:83:46:dd:d3:25:
18:cc:58:35:57:bf:49:83:e7:75:26:23:66:02:93:
e0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AC:26:8B:0C:7A:62:63:3A:DB:85:56:5D:DC:5A:5F:88:C0:AB:94
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20dfdb8e-82f9-432c-9d09-08b35b26e968.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.95.46.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:f6:41:67:ac:a7:ba:46:64:37:bf:91:a9:09:26:8f:ef:2c:
4f:77:9f:c9:47:26:48:ea:f9:55:2a:09:6a:db:e9:4d:1b:4e:
44:13:73:09:b5:19:57:b8:71:78:0b:45:65:7a:4a:c4:3a:aa:
86:0a:8b:2b:0e:c3:f6:7d:5c:b3:81:c0:63:e7:9a:ca:42:ef:
e5:a1:ba:0c:53:c8:f8:4d:ba:78:69:f0:10:46:d5:e4:5b:be:
02:67:0b:3b:2b:7c:37:cd:5b:be:dc:97:7f:40:0d:cc:46:94:
2f:88:74:fa:a6:bf:c4:88:cd:17:a4:fd:e9:c6:52:5c:0a:a7:
97:74:49:42:de:12:da:08:0a:7e:24:91:cd:79:27:eb:26:e1:
d6:df:06:c8:81:00:f8:51:3e:e4:60:d8:65:00:51:ff:70:09:
f4:e3:63:ca:f2:29:e7:f5:d2:10:d2:39:ef:80:22:36:cf:e2:
36:c2:a5:ec:36:a3:7b:fa:c3:4c:14:78:ba:6d:ce:aa:06:80:
f3:72:50:27:37:e5:63:7f:42:1f:d5:4d:0a:86:3f:ec:75:a8:
54:23:19:c1:d6:10:8d:19:1d:30:75:5a:be:9e:6d:c1:f3:d0:
0b:a7:b3:7f:37:07:f0:6d:26:47:4f:84:47:10:1f:05:77:93:
9a:c9:c6:0c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUMLMfDi7rns3qKMggBjY9vmgNqa0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BkNGExNGQ0MWNmYzQ0MmIzZDEzN2M4MWI0MmY5NGUzZWQ4
Y2QwODlkMTk3NTdjNjczMzc1M2NiN2I2ZmJkNmZiMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNT3g5t6JW0AOtXnWs5oPlqacA6KTRTijL12vgX5/yrfDa
LbduTbYeSbEvW9ILOUABqJyh0RispkPxB10FbbNa9xMmCI8d198zKjyPdjsKdXqn
nrsy34cnhwVg1TUN2ehj3seLoCd2Pb9SehG/GcimX3NjvXEcKteauheUF7Qvko9+
zlTuywDXyg03u60qr+2D9ejdzMQz05HtPXCEDgabZ9+BTv+ApMuecrQH2UvcMxYr
SuKhbA/67+miCB05U1EIphtWxcTJlAPrZdWdQEUmHxTjbLWVUuT8Xo0WikfPyErM
9QX2cZywvcKDRt3TJRjMWDVXv0mD53UmI2YCk+D3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUc6wmiwx6YmM624VWXdxaX4jAq5QwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzIwZGZkYjhlLTgyZjktNDMyYy05ZDA5LTA4YjM1YjI2ZTk2OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA0Xy4wDQYJKoZIhvcNAQELBQADggEBAE32QWesp7pGZDe/kakJJo/vLE93
n8lHJkjq+VUqCWrb6U0bTkQTcwm1GVe4cXgLRWV6SsQ6qoYKiysOw/Z9XLOBwGPn
mspC7+WhugxTyPhNunhp8BBG1eRbvgJnCzsrfDfNW77cl39ADcxGlC+IdPqmv8SI
zRek/enGUlwKp5d0SULeEtoICn4kkc15J+sm4dbfBsiBAPhRPuRg2GUAUf9wCfTj
Y8ryKef10hDSOe+AIjbP4jbCpew2o3v6w0wUeLptzqoGgPNyUCc35WN/Qh/VTQqG
P+x1qFQjGcHWEI0ZHTB1Wr6ebcHz0Auns383B/BtJkdPhEcQHwV3k5rJxgw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:35 2025 by rpki-client