Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34ccc723-ca9a-4126-8878-c4bec73be18d.roa
File: 34ccc723-ca9a-4126-8878-c4bec73be18d.roa (raw, json)
Hash identifier: SFUjHInTZBQxIuARZyXxNlc47jDeuUmR9fN3v7kYTyc=
Subject key identifier: E5:D9:AD:13:70:A6:C0:75:9F:3B:03:4B:C2:99:12:A6:DB:0A:1D:CA
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0BCCB18CBD807985277575EFD5A9A095039FD890
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34ccc723-ca9a-4126-8878-c4bec73be18d.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.220.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:cc:b1:8c:bd:80:79:85:27:75:75:ef:d5:a9:a0:95:03:9f:d8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=394be4376d0cb40ada256b8ac2f371637b3dc491367f814973b222872a8e253e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:15:6a:38:0f:8d:ae:55:7f:42:97:7e:57:c9:
65:df:b9:77:d2:c1:be:8f:fd:d1:48:25:b7:c4:13:
dc:66:4b:0e:64:62:ed:b2:b9:c9:c7:c4:a4:5a:21:
47:65:09:ef:87:66:89:e8:cd:97:f9:be:9b:5b:2e:
45:b4:89:cd:59:7c:0e:c0:40:ef:41:de:19:93:7f:
a9:f3:45:b3:0f:ff:47:bf:9b:36:c6:80:8d:9c:1e:
e7:c5:09:75:65:f8:97:a0:05:88:5d:e5:c1:f4:fe:
ad:c5:b9:48:5f:9d:ca:6b:46:df:81:76:89:c3:10:
c5:92:b5:a2:e1:c4:67:af:ff:c3:e5:c5:07:13:ff:
b2:eb:c2:79:0a:fe:3c:2f:86:13:7f:93:4e:df:8e:
0e:55:38:e3:4f:ee:17:8c:ef:e4:fb:72:a8:14:18:
4d:69:cd:c7:1b:16:92:cc:91:3a:9e:ab:ed:7a:bb:
95:2f:06:f0:70:fc:77:cc:e7:85:1e:df:f1:00:fc:
23:2b:92:2d:8d:76:26:14:11:8d:ab:22:5d:70:c1:
ad:35:8f:df:82:80:7d:89:fb:15:1b:bc:2b:71:cb:
e0:d4:0c:64:fe:e1:b8:98:78:19:fe:6e:3c:1c:74:
aa:43:b0:3d:c8:ce:69:6e:8f:f8:88:d8:58:36:7e:
2e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D9:AD:13:70:A6:C0:75:9F:3B:03:4B:C2:99:12:A6:DB:0A:1D:CA
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34ccc723-ca9a-4126-8878-c4bec73be18d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.220.216.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:8b:97:cf:20:31:f5:4f:ed:5f:f5:94:91:04:71:f1:57:23:
e1:36:19:2b:11:c5:f9:a6:f6:5f:43:e5:1c:7f:5e:ef:4d:53:
1d:a6:59:59:08:a6:9f:0f:a2:44:f2:9f:e3:d5:fc:7b:b2:66:
ff:57:5d:ff:76:4b:3f:f7:62:85:d9:e3:b8:a4:14:47:e2:5c:
76:d9:d5:d2:07:10:84:28:05:78:c2:5d:c8:4e:37:f2:f9:db:
ce:18:68:9c:f3:a8:76:b5:37:ab:b3:5d:e5:17:60:e1:30:37:
1f:cd:1f:b7:4f:e9:16:56:cc:bb:7d:1d:c1:b7:e4:9e:65:5c:
bb:ff:62:04:cc:b7:68:70:a4:34:5f:f6:1a:10:1f:c6:d3:0b:
36:f5:1b:79:07:43:4b:ff:d3:c0:bd:f8:81:43:11:51:09:72:
65:d2:14:71:61:d9:09:5d:04:3e:b9:e5:7b:ab:46:fc:79:56:
cb:ee:b1:54:f9:fa:78:df:02:85:6b:90:87:8d:86:0c:c1:b8:
14:cf:05:47:9a:a2:48:58:6c:b7:9d:48:35:36:6d:e0:12:00:
62:f4:8f:57:ba:6a:86:21:af:55:d5:26:17:bc:d1:32:90:ea:
0e:22:8b:02:e4:3b:fb:04:61:7d:6a:5b:7e:62:d4:27:8f:ea:
b8:93:8d:45
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUC8yxjL2AeYUndXXv1amglQOf2JAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTI3MDAwMDAwWhcNMjUwMzAzMjM1OTU5
WjB6MUkwRwYDVQQFE0AzOTRiZTQzNzZkMGNiNDBhZGEyNTZiOGFjMmYzNzE2Mzdi
M2RjNDkxMzY3ZjgxNDk3M2IyMjI4NzJhOGUyNTNlMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvFWo4D42uVX9Cl35XyWXfuXfSwb6P/dFIJbfEE9xmSw5k
Yu2yucnHxKRaIUdlCe+HZonozZf5vptbLkW0ic1ZfA7AQO9B3hmTf6nzRbMP/0e/
mzbGgI2cHufFCXVl+JegBYhd5cH0/q3FuUhfncprRt+BdonDEMWStaLhxGev/8Pl
xQcT/7LrwnkK/jwvhhN/k07fjg5VOONP7heM7+T7cqgUGE1pzccbFpLMkTqeq+16
u5UvBvBw/HfM54Ue3/EA/CMrki2NdiYUEY2rIl1wwa01j9+CgH2J+xUbvCtxy+DU
DGT+4biYeBn+bjwcdKpDsD3Izmluj/iI2Fg2fi7nAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU5dmtE3CmwHWfOwNLwpkSptsKHcowHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzM0Y2NjNzIzLWNhOWEtNDEyNi04ODc4LWM0YmVjNzNiZTE4ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIP3NgwDQYJKoZIhvcNAQELBQADggEBAI6Ll88gMfVP7V/1lJEEcfFXI+E2
GSsRxfmm9l9D5Rx/Xu9NUx2mWVkIpp8PokTyn+PV/HuyZv9XXf92Sz/3YoXZ47ik
FEfiXHbZ1dIHEIQoBXjCXchON/L5284YaJzzqHa1N6uzXeUXYOEwNx/NH7dP6RZW
zLt9HcG35J5lXLv/YgTMt2hwpDRf9hoQH8bTCzb1G3kHQ0v/08C9+IFDEVEJcmXS
FHFh2QldBD655XurRvx5VsvusVT5+njfAoVrkIeNhgzBuBTPBUeaokhYbLedSDU2
beASAGL0j1e6aoYhr1XVJhe80TKQ6g4iiwLkO/sEYX1qW35i1CeP6riTjUU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:21:45 2025 by rpki-client