Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2fe42512-0811-4c2e-8ec7-3eea59f47eb4.roa
File: 2fe42512-0811-4c2e-8ec7-3eea59f47eb4.roa (raw, json)
Hash identifier: Lx9vWtm0WddHjpyCadADi6eL2XGQOHTHSL0Wa5yke+c=
Subject key identifier: 2C:48:DF:B5:F9:85:5C:BE:4B:8C:3E:73:92:9B:D8:22:EF:6D:14:63
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2766E5E51646EF810F294562296E631F36C3C2EE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2fe42512-0811-4c2e-8ec7-3eea59f47eb4.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.94.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:66:e5:e5:16:46:ef:81:0f:29:45:62:29:6e:63:1f:36:c3:c2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=02cdef4efd3ce34a387a78265d564754fe8fac07cae23bc511b0dd3f2bfbe52c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:21:45:8d:9e:e3:6d:7a:b3:6f:4f:85:5b:37:
72:ec:dc:38:71:ba:dc:86:00:24:90:86:f8:88:03:
ca:51:18:b9:23:d5:c4:62:14:e7:6a:a9:93:c1:92:
f0:07:b8:c6:7a:7b:86:fe:54:39:78:36:c1:ee:84:
cd:46:5c:34:fd:a0:90:ce:d0:39:77:05:70:68:2e:
c3:d2:20:2f:ac:02:09:db:88:b4:21:7f:45:e9:92:
28:fd:c4:cc:40:05:18:0c:f9:fc:37:a5:f4:84:89:
2f:c6:0c:b6:f7:67:1c:17:84:8a:10:ef:c6:81:14:
df:91:aa:44:e5:fb:9b:27:16:5e:2f:1c:c8:ea:c9:
bf:78:6d:f6:1c:dd:25:a2:63:84:5f:25:a1:98:a0:
47:cb:51:99:89:83:ac:3c:ed:c5:36:ff:d2:6d:b6:
3a:81:ce:47:2c:d1:27:4b:78:70:10:d2:d2:84:51:
6a:b4:96:e7:05:b3:1f:64:ab:99:5b:cd:61:9c:01:
1d:db:9f:94:82:3f:ed:9f:d1:11:5a:a5:70:ba:51:
0e:b8:06:56:2e:d9:0c:3b:b1:80:7b:8c:b4:7d:76:
a3:a8:da:3e:65:e2:98:b5:47:50:48:d6:32:8c:5f:
5d:a0:21:e2:44:1f:a7:b0:45:ea:9a:c4:a2:5b:e2:
ed:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:48:DF:B5:F9:85:5C:BE:4B:8C:3E:73:92:9B:D8:22:EF:6D:14:63
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2fe42512-0811-4c2e-8ec7-3eea59f47eb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.94.199.0/24
Signature Algorithm: sha256WithRSAEncryption
65:98:9e:ab:71:8c:b3:f3:80:c7:16:9a:0b:84:9c:e6:3b:72:
3a:91:67:8f:8d:c8:71:43:4e:06:90:a2:85:08:e6:be:43:2d:
ce:09:99:09:51:f7:76:9b:92:d0:b4:cb:4d:b2:63:00:f4:f4:
be:c1:15:62:dd:cb:b3:8e:89:ba:0a:87:46:5c:39:02:89:f1:
d5:ed:0c:99:0a:6e:7a:6c:02:05:9b:82:26:ea:20:f1:ce:68:
dd:35:e4:65:43:64:e4:ee:00:28:3b:83:a3:6c:97:75:9f:56:
cc:ad:8a:d6:97:a7:f0:b5:88:a1:b0:37:2d:cb:c3:ef:76:2b:
81:67:be:f6:74:d2:f7:68:92:7a:88:64:46:bc:9c:d2:86:dd:
13:5b:45:ab:1c:51:4b:f7:1d:0c:a5:61:66:bd:9d:77:8f:f7:
46:13:f4:c3:03:0c:11:ae:13:70:96:90:42:17:99:e2:a0:f8:
01:47:39:34:96:63:ea:cc:04:20:dd:51:56:de:ca:ed:42:4b:
83:99:c1:c5:d7:61:ec:74:10:53:20:9c:5f:2e:82:3b:66:70:
ea:76:25:63:e5:8a:ee:12:dc:9a:86:5c:d7:89:dc:6d:4b:5a:
68:a5:b5:fc:bd:3d:22:6a:f9:fc:93:f6:96:bc:89:e6:a9:c7:
2e:4e:8f:8a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJ2bl5RZG74EPKUViKW5jHzbDwu4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTA3MDAwMDAwWhcNMjUwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0AwMmNkZWY0ZWZkM2NlMzRhMzg3YTc4MjY1ZDU2NDc1NGZl
OGZhYzA3Y2FlMjNiYzUxMWIwZGQzZjJiZmJlNTJjMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDXIUWNnuNterNvT4VbN3Ls3DhxutyGACSQhviIA8pRGLkj
1cRiFOdqqZPBkvAHuMZ6e4b+VDl4NsHuhM1GXDT9oJDO0Dl3BXBoLsPSIC+sAgnb
iLQhf0Xpkij9xMxABRgM+fw3pfSEiS/GDLb3ZxwXhIoQ78aBFN+RqkTl+5snFl4v
HMjqyb94bfYc3SWiY4RfJaGYoEfLUZmJg6w87cU2/9JttjqBzkcs0SdLeHAQ0tKE
UWq0lucFsx9kq5lbzWGcAR3bn5SCP+2f0RFapXC6UQ64BlYu2Qw7sYB7jLR9dqOo
2j5l4pi1R1BI1jKMX12gIeJEH6ewReqaxKJb4u3XAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQULEjftfmFXL5LjD5zkpvYIu9tFGMwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzJmZTQyNTEyLTA4MTEtNGMyZS04ZWM3LTNlZWE1OWY0N2ViNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA0XscwDQYJKoZIhvcNAQELBQADggEBAGWYnqtxjLPzgMcWmguEnOY7cjqR
Z4+NyHFDTgaQooUI5r5DLc4JmQlR93abktC0y02yYwD09L7BFWLdy7OOiboKh0Zc
OQKJ8dXtDJkKbnpsAgWbgibqIPHOaN015GVDZOTuACg7g6Nsl3WfVsytitaXp/C1
iKGwNy3Lw+92K4FnvvZ00vdoknqIZEa8nNKG3RNbRascUUv3HQylYWa9nXeP90YT
9MMDDBGuE3CWkEIXmeKg+AFHOTSWY+rMBCDdUVbeyu1CS4OZwcXXYex0EFMgnF8u
gjtmcOp2JWPliu4S3JqGXNeJ3G1LWmiltfy9PSJq+fyT9pa8ieapxy5Oj4o=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:24:29 2025 by rpki-client