Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9584a98a-7e4f-4b82-966e-8ad0a09a2beb.roa
File: 9584a98a-7e4f-4b82-966e-8ad0a09a2beb.roa (raw, json)
Hash identifier: 3/2tLaAJSQNogwi5MbkT4pgXsSurjbDgIbG/c8jSmow=
Subject key identifier: 99:08:0E:7A:BB:58:45:50:65:1E:61:34:4A:94:AE:AD:6F:01:CE:A4
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 68955DA995A5986C74FE734E9B03155B228CED1D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9584a98a-7e4f-4b82-966e-8ad0a09a2beb.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.228.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:95:5d:a9:95:a5:98:6c:74:fe:73:4e:9b:03:15:5b:22:8c:ed:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=a193dc0c106fe43fafcff97bb32fc2aeb83b1460f9ab9bd8ed1d8ab52d24896a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6d:84:fd:1a:3b:66:2a:7c:dc:e6:90:1e:0c:
e0:a1:f1:4b:89:af:a7:78:f7:22:9a:e1:6d:ae:df:
9a:19:92:66:b8:91:f9:bd:4d:67:a0:29:0c:16:bd:
8a:74:50:4a:67:4b:5b:86:08:0a:4a:1c:a8:2f:1e:
81:85:4b:48:01:cb:4d:7f:3b:17:69:19:d6:61:3c:
1f:d5:59:26:38:a2:37:ad:ae:82:fe:26:c9:60:59:
71:0b:c9:26:b3:55:4b:eb:35:a3:59:17:c3:c4:f8:
9a:c1:cc:d3:10:b0:60:68:f3:fd:57:3d:17:85:f0:
0c:ba:fd:89:f5:62:af:0e:68:78:69:ab:08:84:8a:
4b:df:e3:8e:16:2d:8c:37:71:a5:2b:5e:8f:40:42:
60:a9:8b:95:e7:9e:3f:ca:03:4e:43:ea:97:56:c3:
dc:47:32:2f:0b:22:7f:49:5d:e5:dc:ff:90:06:5f:
19:36:51:65:3a:4b:c7:e8:c5:f3:f8:38:d7:42:03:
25:92:fb:60:c0:45:53:ad:c3:c7:47:7b:cd:f0:5d:
93:1d:7b:55:eb:65:ef:53:32:25:64:34:42:c6:df:
d5:1c:e5:0b:25:f3:b5:0d:20:29:c2:9d:b1:3a:b4:
d7:fa:e6:85:c0:ae:10:9a:27:ed:36:16:be:f6:41:
7c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:08:0E:7A:BB:58:45:50:65:1E:61:34:4A:94:AE:AD:6F:01:CE:A4
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9584a98a-7e4f-4b82-966e-8ad0a09a2beb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.228.160.0/20
Signature Algorithm: sha256WithRSAEncryption
ad:b7:32:00:b2:a4:bb:72:16:99:6b:9e:1c:43:ca:a4:c7:39:
39:73:ec:c2:6a:3a:c0:f8:c4:b7:03:48:ec:7a:d3:cf:a1:7d:
73:2b:aa:b1:7a:f0:30:76:5d:da:a5:fb:d8:50:d8:a4:03:7b:
8b:10:6b:f2:64:03:24:fe:ea:5e:fe:fa:11:b0:5d:24:55:2a:
9c:42:9d:db:b7:0f:39:54:b4:37:de:d2:33:64:42:86:e5:8e:
29:ae:ae:ab:0f:fd:71:42:15:7e:b1:0d:38:d7:c2:24:83:c4:
c4:31:a8:ee:f8:18:cd:5c:e3:19:11:31:bd:12:4c:a2:13:71:
90:64:32:95:f9:8a:84:8f:1a:75:51:c4:82:87:14:ad:50:2b:
03:16:79:d4:bd:c2:14:05:53:5f:b2:a6:88:f1:67:c4:80:90:
e0:ba:4a:89:e1:4c:69:e5:aa:da:c4:f2:22:8e:66:57:ce:f6:
bc:50:03:0c:1c:23:2d:5e:b3:fa:ff:60:8f:c1:16:b0:c4:a4:
c6:5c:de:67:60:18:3b:48:71:e8:a7:c5:22:46:4b:4c:65:eb:
f4:e4:e7:13:72:dc:6b:55:f0:e5:13:f3:80:f3:0b:29:36:c0:
16:b4:07:3c:eb:2c:3b:16:f7:0d:68:f5:9e:7e:7a:11:8d:06:
3d:17:ad:ae
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUaJVdqZWlmGx0/nNOmwMVWyKM7R0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTA2MDAwMDAwWhcNMjUwMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BhMTkzZGMwYzEwNmZlNDNmYWZjZmY5N2JiMzJmYzJhZWI4
M2IxNDYwZjlhYjliZDhlZDFkOGFiNTJkMjQ4OTZhMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDfbYT9GjtmKnzc5pAeDOCh8UuJr6d49yKa4W2u35oZkma4
kfm9TWegKQwWvYp0UEpnS1uGCApKHKgvHoGFS0gBy01/OxdpGdZhPB/VWSY4ojet
roL+JslgWXELySazVUvrNaNZF8PE+JrBzNMQsGBo8/1XPReF8Ay6/Yn1Yq8OaHhp
qwiEikvf444WLYw3caUrXo9AQmCpi5Xnnj/KA05D6pdWw9xHMi8LIn9JXeXc/5AG
Xxk2UWU6S8foxfP4ONdCAyWS+2DARVOtw8dHe83wXZMde1XrZe9TMiVkNELG39Uc
5Qsl87UNICnCnbE6tNf65oXArhCaJ+02Fr72QXylAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUmQgOertYRVBlHmE0SpSurW8BzqQwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzk1ODRhOThhLTdlNGYtNGI4Mi05NjZlLThhZDBhMDlhMmJlYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQ25KAwDQYJKoZIhvcNAQELBQADggEBAK23MgCypLtyFplrnhxDyqTHOTlz
7MJqOsD4xLcDSOx608+hfXMrqrF68DB2Xdql+9hQ2KQDe4sQa/JkAyT+6l7++hGw
XSRVKpxCndu3DzlUtDfe0jNkQobljimurqsP/XFCFX6xDTjXwiSDxMQxqO74GM1c
4xkRMb0STKITcZBkMpX5ioSPGnVRxIKHFK1QKwMWedS9whQFU1+ypojxZ8SAkOC6
SonhTGnlqtrE8iKOZlfO9rxQAwwcIy1es/r/YI/BFrDEpMZc3mdgGDtIceinxSJG
S0xl6/Tk5xNy3GtV8OUT84DzCyk2wBa0BzzrLDsW9w1o9Z5+ehGNBj0Xra4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:26:20 2025 by rpki-client