Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25b05f93-809c-4019-867c-2ca414c30ff7.roa
File: 25b05f93-809c-4019-867c-2ca414c30ff7.roa (raw, json)
Hash identifier: S5FPmqgblcwLI5CHsnyXZfZRR3TN56Fbdm6FSJp37ew=
Subject key identifier: 1C:4A:F7:18:AD:8D:78:B6:E7:3C:68:F8:60:F5:F6:79:6C:43:DD:CB
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 24AA187A63AF46A6033F9923BC837E8D0B4ACBA0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25b05f93-809c-4019-867c-2ca414c30ff7.roa
Signing time: Fri 31 Jan 2025 00:00:00 +0000
ROA not before: Fri 31 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.230.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:aa:18:7a:63:af:46:a6:03:3f:99:23:bc:83:7e:8d:0b:4a:cb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 31 00:00:00 2025 GMT
Not After : Mar 7 23:59:59 2025 GMT
Subject: serialNumber=d92a73e8cd7811fe8a4fae5fa3923e894ee38168d234fb9c4221d2e8a6223a30, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:19:e3:dd:0e:fb:a4:ba:d1:e5:aa:20:70:0e:
86:01:a0:8c:1b:16:6a:77:01:f8:28:c5:eb:6f:0b:
5d:48:c4:dc:69:41:b0:68:3a:3e:64:80:20:e4:a2:
fc:a2:5d:a8:05:06:35:b5:8f:b8:25:af:54:2b:7d:
bd:73:a2:8e:f2:cb:ca:fa:5f:ee:33:96:ba:ed:e6:
79:c1:01:67:5e:7e:15:d1:31:88:88:d8:e8:f3:f5:
c1:80:ce:8e:f0:fb:90:14:b2:40:ac:88:3f:f4:3d:
85:b1:1d:35:f5:bf:2a:dc:78:0c:69:14:0d:a3:d0:
cc:68:7b:94:91:52:92:87:ba:64:e3:8c:e0:01:87:
35:12:82:3d:71:7a:f2:ac:24:0c:b2:c1:a0:61:7d:
7e:22:3c:9c:c1:7f:7d:fc:8d:27:dc:21:9d:34:22:
0e:b2:1d:43:32:e3:55:5e:f3:b6:ef:23:fd:6c:8c:
ee:0c:86:4d:88:16:a0:d3:05:24:dd:00:1a:ee:36:
86:c9:7b:af:1a:fb:f7:03:cd:bd:0d:3d:78:4d:3b:
13:c2:3c:28:13:85:09:31:de:03:0c:55:9f:e1:9d:
6a:ee:6e:f9:a7:46:e0:7f:11:af:d8:15:f0:0d:21:
fa:ba:1c:b5:aa:b3:f4:78:36:ce:3c:29:41:a4:0f:
e8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4A:F7:18:AD:8D:78:B6:E7:3C:68:F8:60:F5:F6:79:6C:43:DD:CB
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25b05f93-809c-4019-867c-2ca414c30ff7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.230.137.0/24
Signature Algorithm: sha256WithRSAEncryption
79:28:e6:36:42:3d:80:34:68:62:de:b3:60:3d:dc:ca:a5:13:
67:30:71:f5:21:16:d2:5c:1e:6e:42:bf:77:a5:8c:2c:ef:a2:
13:f8:3d:90:b7:9d:b0:38:87:9e:f7:d5:8e:b2:1e:9d:6c:d0:
26:28:19:92:2d:38:26:52:cf:28:28:9a:d8:9e:f8:e9:3e:cc:
12:dc:a5:ac:11:ae:2a:95:c9:cf:1f:5b:89:dd:ee:c1:eb:96:
2c:54:5d:32:16:bf:ad:6d:30:fb:30:72:70:a8:a7:12:c3:d8:
89:69:6c:4c:be:24:e3:ba:7f:72:44:43:21:bd:c2:e9:ae:74:
63:9f:2b:43:be:f1:e7:ec:06:6e:04:b5:67:b2:d8:a0:6a:83:
f9:8a:c4:25:44:4c:4c:63:e9:d1:15:75:4a:32:32:e9:7d:26:
ce:25:9a:de:84:53:48:f4:de:c6:97:36:ec:2f:85:cd:4e:b2:
98:21:17:b8:6b:83:d0:e5:5f:9c:fe:b7:ec:81:f0:94:9e:fb:
71:bf:5e:75:7e:77:bf:d8:38:c1:c7:4f:4b:27:1d:4f:8c:32:
8d:55:91:f8:f3:1f:f1:ef:a3:18:9c:20:23:e8:b8:d7:99:8d:
92:45:25:24:eb:2e:a2:10:aa:f4:22:a3:c2:6a:9f:4a:ae:65:
d3:00:26:23
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJKoYemOvRqYDP5kjvIN+jQtKy6AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BkOTJhNzNlOGNkNzgxMWZlOGE0ZmFlNWZhMzkyM2U4OTRl
ZTM4MTY4ZDIzNGZiOWM0MjIxZDJlOGE2MjIzYTMwMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDEGePdDvukutHlqiBwDoYBoIwbFmp3AfgoxetvC11IxNxp
QbBoOj5kgCDkovyiXagFBjW1j7glr1Qrfb1zoo7yy8r6X+4zlrrt5nnBAWdefhXR
MYiI2Ojz9cGAzo7w+5AUskCsiD/0PYWxHTX1vyrceAxpFA2j0Mxoe5SRUpKHumTj
jOABhzUSgj1xevKsJAyywaBhfX4iPJzBf338jSfcIZ00Ig6yHUMy41Ve87bvI/1s
jO4Mhk2IFqDTBSTdABruNobJe68a+/cDzb0NPXhNOxPCPCgThQkx3gMMVZ/hnWru
bvmnRuB/Ea/YFfANIfq6HLWqs/R4Ns48KUGkD+h7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUHEr3GK2NeLbnPGj4YPX2eWxD3cswHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzI1YjA1ZjkzLTgwOWMtNDAxOS04NjdjLTJjYTQxNGMzMGZmNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAP5okwDQYJKoZIhvcNAQELBQADggEBAHko5jZCPYA0aGLes2A93MqlE2cw
cfUhFtJcHm5Cv3eljCzvohP4PZC3nbA4h5731Y6yHp1s0CYoGZItOCZSzygomtie
+Ok+zBLcpawRriqVyc8fW4nd7sHrlixUXTIWv61tMPswcnCopxLD2IlpbEy+JOO6
f3JEQyG9wumudGOfK0O+8efsBm4EtWey2KBqg/mKxCVETExj6dEVdUoyMul9Js4l
mt6EU0j03saXNuwvhc1OspghF7hrg9DlX5z+t+yB8JSe+3G/XnV+d7/YOMHHT0sn
HU+MMo1VkfjzH/HvoxicICPouNeZjZJFJSTrLqIQqvQio8Jqn0quZdMAJiM=
-----END CERTIFICATE-----
Generated at Sat May 3 02:56:40 2025 by rpki-client