Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/786f9afd-fdda-4cdf-907e-edae45c66472.roa
File: 786f9afd-fdda-4cdf-907e-edae45c66472.roa (raw, json)
Hash identifier: 46sNw/Hla0Wgx1N1x7YNplWhHHBzx170GZitaeOw76k=
Subject key identifier: D4:F2:9B:17:B1:20:E4:D2:72:76:D6:00:1C:37:01:D8:C0:74:A5:5A
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 27C4C2700EF8E0EB1BFA701A4A9B6F9984511A22
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/786f9afd-fdda-4cdf-907e-edae45c66472.roa
Signing time: Thu 09 Jan 2025 00:00:00 +0000
ROA not before: Thu 09 Jan 2025 00:00:00 +0000
ROA not after: Thu 13 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 3.2.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:c4:c2:70:0e:f8:e0:eb:1b:fa:70:1a:4a:9b:6f:99:84:51:1a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 9 00:00:00 2025 GMT
Not After : Feb 13 23:59:59 2025 GMT
Subject: serialNumber=13507c8f30565ee90373055195d03c2dc41395a04f1ba01ec3bb38803ef630a8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7b:b9:71:0d:cc:8a:d5:fa:42:a0:72:ef:91:
e1:2f:a1:bb:a9:4a:12:14:55:fa:1e:db:d2:a0:e4:
4f:cb:93:f7:5b:c4:8e:08:03:29:30:5a:ef:7f:25:
78:0c:21:28:15:44:1a:43:94:24:95:5f:68:ed:05:
24:2c:90:77:0a:50:8c:55:f4:51:85:9d:1a:45:97:
58:0b:18:2b:68:2f:11:b2:fc:df:ef:23:87:64:d3:
ff:45:28:95:8f:23:e0:b6:6c:c8:9b:69:cd:e3:11:
c4:3b:d1:99:83:05:43:4c:f1:2d:a9:fb:11:4b:43:
b6:2f:29:cd:ba:22:a5:2d:02:9d:12:64:fe:58:0a:
94:6f:8f:8b:d2:89:2a:dc:d3:a2:b8:32:41:57:31:
50:23:72:39:ce:86:db:b6:2d:90:f7:07:7b:6d:22:
27:7d:a7:36:07:3e:cf:73:aa:e1:94:16:eb:e1:5d:
64:09:6a:9c:0e:07:de:ff:0b:34:84:fe:de:68:a2:
84:6a:72:da:1f:bd:45:20:33:a8:a6:97:cd:3d:59:
c3:d5:a8:78:01:39:c0:f3:a7:23:25:80:d8:65:bb:
4d:54:e9:85:8f:18:db:22:7d:6a:53:61:4b:57:82:
6b:1c:69:c1:f7:86:43:1c:95:a1:75:c4:53:45:70:
7f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F2:9B:17:B1:20:E4:D2:72:76:D6:00:1C:37:01:D8:C0:74:A5:5A
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/786f9afd-fdda-4cdf-907e-edae45c66472.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.2.36.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:6f:72:a5:1a:a5:05:1c:c1:e8:32:00:c5:5c:b9:e5:98:6e:
0a:e4:66:79:6e:e0:00:f4:34:66:54:8d:3e:b6:c1:b3:93:96:
08:12:3e:00:c5:ab:3c:0a:2b:c7:d1:d9:02:1a:9e:f0:f3:0f:
bb:9c:99:56:66:11:c2:22:46:fc:6c:87:f8:fd:a9:d2:be:33:
ab:64:8e:08:7e:8d:da:1e:9c:5e:e7:24:4e:34:4f:93:01:a5:
be:e9:13:12:1d:b0:d8:50:52:6a:1e:27:7a:97:7a:63:25:1d:
b5:b7:6a:df:59:59:ec:a9:09:c2:6e:28:fb:2b:be:31:55:fa:
67:5a:a6:48:ad:25:f5:de:cc:3d:dd:b4:fb:41:58:ef:57:52:
b2:18:e9:24:d4:3a:ad:de:70:f8:11:7c:b1:ac:e9:7e:c4:e6:
fe:80:f6:41:c0:71:76:58:67:e6:03:28:15:9f:27:fe:91:f2:
31:3e:e6:b5:95:c0:da:8d:55:fd:97:61:c6:b4:a8:3a:43:28:
8b:a2:8f:56:cc:8f:63:03:5a:32:1d:00:61:91:f1:9e:e0:78:
96:dd:a2:9f:c2:0f:62:2e:27:72:89:de:67:fc:a5:ad:37:32:
03:ce:3c:be:08:60:5f:7b:82:c2:70:4a:57:ac:f5:49:12:48:
04:10:66:21
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJ8TCcA744Osb+nAaSptvmYRRGiIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTA5MDAwMDAwWhcNMjUwMjEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AxMzUwN2M4ZjMwNTY1ZWU5MDM3MzA1NTE5NWQwM2MyZGM0
MTM5NWEwNGYxYmEwMWVjM2JiMzg4MDNlZjYzMGE4MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCge7lxDcyK1fpCoHLvkeEvobupShIUVfoe29Kg5E/Lk/db
xI4IAykwWu9/JXgMISgVRBpDlCSVX2jtBSQskHcKUIxV9FGFnRpFl1gLGCtoLxGy
/N/vI4dk0/9FKJWPI+C2bMibac3jEcQ70ZmDBUNM8S2p+xFLQ7YvKc26IqUtAp0S
ZP5YCpRvj4vSiSrc06K4MkFXMVAjcjnOhtu2LZD3B3ttIid9pzYHPs9zquGUFuvh
XWQJapwOB97/CzSE/t5oooRqctofvUUgM6iml809WcPVqHgBOcDzpyMlgNhlu01U
6YWPGNsifWpTYUtXgmscacH3hkMclaF1xFNFcH//AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU1PKbF7Eg5NJydtYAHDcB2MB0pVowHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzc4NmY5YWZkLWZkZGEtNGNkZi05MDdlLWVkYWU0NWM2NjQ3Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAADAiQwDQYJKoZIhvcNAQELBQADggEBAH1vcqUapQUcwegyAMVcueWYbgrk
Znlu4AD0NGZUjT62wbOTlggSPgDFqzwKK8fR2QIanvDzD7ucmVZmEcIiRvxsh/j9
qdK+M6tkjgh+jdoenF7nJE40T5MBpb7pExIdsNhQUmoeJ3qXemMlHbW3at9ZWeyp
CcJuKPsrvjFV+mdapkitJfXezD3dtPtBWO9XUrIY6STUOq3ecPgRfLGs6X7E5v6A
9kHAcXZYZ+YDKBWfJ/6R8jE+5rWVwNqNVf2XYca0qDpDKIuij1bMj2MDWjIdAGGR
8Z7geJbdop/CD2IuJ3KJ3mf8pa03MgPOPL4IYF97gsJwSles9UkSSAQQZiE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:29 2025 by rpki-client