Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/734bc6a2-2072-459a-80f9-d585f44cd80b.roa
File: 734bc6a2-2072-459a-80f9-d585f44cd80b.roa (raw, json)
Hash identifier: AJuqeOdrAPLlAP7qA5tQrCOKAW+qxMxDYBXQOdgyCsw=
Subject key identifier: 58:7E:99:5B:3A:7A:0C:84:19:52:A8:26:B9:7B:43:48:28:DF:8B:7A
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 125A0F57527014AA526BBEC4A5B0C8CFFB43E958
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/734bc6a2-2072-459a-80f9-d585f44cd80b.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.92.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:5a:0f:57:52:70:14:aa:52:6b:be:c4:a5:b0:c8:cf:fb:43:e9:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=fb569a656e1cc17bb1f1d11945a23f9bbf7dbd1c3671415cda416708aed9af8a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:c0:92:01:e3:20:d1:75:5a:1f:34:be:a6:
72:c5:9a:77:41:2d:5a:90:87:c7:01:42:64:96:1a:
78:94:c1:65:c5:59:f0:c4:ee:27:02:8d:83:b4:eb:
c3:68:9a:4e:2e:f7:a8:34:fd:b0:31:7a:b1:ca:00:
88:4a:89:aa:ad:aa:2b:db:af:84:ff:d5:2e:be:38:
bc:1c:ec:53:fe:4b:ec:08:20:a5:70:df:7c:dd:71:
90:3c:e3:25:7e:49:8d:b9:9c:5b:13:17:83:2d:80:
1a:e7:a5:df:3a:a4:20:aa:97:74:c6:88:77:3c:6b:
d6:d1:a7:21:f8:fb:e9:7e:0b:70:8f:2e:2a:75:54:
2a:92:ba:f8:fd:45:07:5a:ef:45:c2:c1:77:29:ba:
1e:91:8c:ad:28:32:d7:86:1e:6a:1a:bd:98:24:f9:
f4:1c:2c:9a:42:2f:1f:7e:c1:a8:23:24:59:d5:6c:
22:9b:42:2c:e4:68:3e:72:b8:b9:15:cf:87:ab:5e:
55:13:a5:a0:da:8e:c9:7d:33:e9:15:66:b9:0f:dc:
a8:a7:cf:4c:52:ba:5a:e4:42:aa:04:5d:bd:5d:7b:
24:86:2a:f5:3a:2f:e9:d4:22:35:ed:bc:d4:f8:3c:
b6:e3:31:67:88:84:40:ee:ec:44:52:58:e0:49:8d:
b2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7E:99:5B:3A:7A:0C:84:19:52:A8:26:B9:7B:43:48:28:DF:8B:7A
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/734bc6a2-2072-459a-80f9-d585f44cd80b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.92.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:2e:25:e9:d5:e2:61:70:e0:4a:67:ae:ed:7c:87:e5:17:c6:
5a:a0:46:22:3a:b5:bf:e9:03:40:bf:b8:16:e8:c9:11:5d:56:
97:ce:da:fc:83:5b:b1:5c:79:33:33:ad:3d:41:d2:45:49:f3:
b1:3a:eb:54:5d:97:dc:8d:28:b7:56:f2:b9:ca:7f:97:a5:42:
ac:37:f6:e8:ab:84:60:16:d9:74:42:ac:29:c5:47:9c:d3:b3:
68:19:77:30:8d:c6:b1:c0:74:1c:3d:1d:e3:6f:60:23:c3:a9:
76:14:e3:47:87:a9:3d:59:61:74:61:33:9f:eb:46:a8:96:6a:
49:1c:51:5b:78:00:7c:89:05:54:b5:87:0f:18:53:87:84:13:
d1:f6:04:43:3d:0f:05:e7:96:72:4d:f7:df:62:f5:a1:49:02:
7b:c6:99:4e:f2:09:47:b6:10:da:34:c8:fe:0c:9c:8a:78:8a:
8f:62:66:e1:e1:ba:93:94:52:3d:d0:3c:7d:97:5b:7a:4e:01:
da:ed:a2:fc:52:cf:23:bb:85:87:af:0e:d2:64:75:2c:bd:2e:
b0:11:f2:fc:e1:35:4a:ab:32:45:f5:38:34:14:f5:03:01:26:
38:d7:3d:e3:74:b3:c5:37:87:1e:ea:ed:b1:cf:8e:7c:08:5a:
69:a8:f4:67
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUEloPV1JwFKpSa77EpbDIz/tD6VgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTA2MDAwMDAwWhcNMjUwMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BmYjU2OWE2NTZlMWNjMTdiYjFmMWQxMTk0NWEyM2Y5YmJm
N2RiZDFjMzY3MTQxNWNkYTQxNjcwOGFlZDlhZjhhMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1ocCSAeMg0XVaHzS+pnLFmndBLVqQh8cBQmSWGniUwWXF
WfDE7icCjYO068Nomk4u96g0/bAxerHKAIhKiaqtqivbr4T/1S6+OLwc7FP+S+wI
IKVw33zdcZA84yV+SY25nFsTF4MtgBrnpd86pCCql3TGiHc8a9bRpyH4++l+C3CP
Lip1VCqSuvj9RQda70XCwXcpuh6RjK0oMteGHmoavZgk+fQcLJpCLx9+wagjJFnV
bCKbQizkaD5yuLkVz4erXlUTpaDajsl9M+kVZrkP3Kinz0xSulrkQqoEXb1deySG
KvU6L+nUIjXtvNT4PLbjMWeIhEDu7ERSWOBJjbIRAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUWH6ZWzp6DIQZUqgmuXtDSCjfi3owHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzczNGJjNmEyLTIwNzItNDU5YS04MGY5LWQ1ODVmNDRjZDgwYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA0XDANBgkqhkiG9w0BAQsFAAOCAQEADy4l6dXiYXDgSmeu7XyH5RfGWqBG
Ijq1v+kDQL+4FujJEV1Wl87a/INbsVx5MzOtPUHSRUnzsTrrVF2X3I0ot1byucp/
l6VCrDf26KuEYBbZdEKsKcVHnNOzaBl3MI3GscB0HD0d429gI8OpdhTjR4epPVlh
dGEzn+tGqJZqSRxRW3gAfIkFVLWHDxhTh4QT0fYEQz0PBeeWck3332L1oUkCe8aZ
TvIJR7YQ2jTI/gyciniKj2Jm4eG6k5RSPdA8fZdbek4B2u2i/FLPI7uFh68O0mR1
LL0usBHy/OE1SqsyRfU4NBT1AwEmONc943SzxTeHHurtsc+OfAhaaaj0Zw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:39:27 2025 by rpki-client