Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb3a8bcf-cae7-427f-bb65-401bf30544f5.roa
File: bb3a8bcf-cae7-427f-bb65-401bf30544f5.roa (raw, json)
Hash identifier: Zj3GgPSdZc0d6QWtl/34/HirmPryPqTsFDk7l5uYfFk=
Subject key identifier: E2:9A:9F:7A:B9:23:17:FD:8A:DE:22:1C:BC:2C:93:7C:BB:A4:4F:84
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 10C3D8C0534F85BE1955041A8FCC4CF3F1E2E272
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb3a8bcf-cae7-427f-bb65-401bf30544f5.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.177.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:c3:d8:c0:53:4f:85:be:19:55:04:1a:8f:cc:4c:f3:f1:e2:e2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=14940ab0ee61d07a717f8a6723beb953fc3493a953ce98d55734d63f78c63373, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:5b:43:39:2b:8d:aa:37:6c:9d:f4:8f:79:
81:9c:a4:9f:04:63:5c:26:b5:52:88:28:77:d1:c4:
74:70:82:b4:b0:83:e7:6a:05:af:c7:04:ab:b0:c4:
0e:b8:dd:3e:5e:51:4b:0c:c0:e4:db:4a:37:5c:34:
b8:4d:c0:6a:ac:bb:13:da:47:1a:49:c7:31:6c:c7:
73:21:31:11:ff:38:3b:6c:0e:8f:bc:70:e9:b0:e4:
8f:fd:e1:d9:55:fe:3b:67:9b:2e:6e:21:06:7f:14:
be:31:5f:cc:90:ff:38:3c:4e:2f:86:7c:47:45:de:
16:ce:3e:de:93:83:ec:35:bb:fb:56:01:50:62:e0:
e2:8c:21:28:ed:74:f9:29:6e:fb:b5:12:16:33:b3:
e5:ab:d7:8e:28:93:ba:77:9b:fd:98:fa:97:91:74:
24:ad:99:c3:18:0c:ce:1b:52:d2:25:7c:55:68:0b:
d3:0b:1a:fa:97:b4:7d:43:ab:22:82:c2:cb:2d:35:
c2:ef:cc:0a:8e:cd:b9:c2:b1:69:52:ff:e0:f2:40:
55:ec:7e:f8:82:09:17:dc:4d:87:b9:dd:42:5c:83:
4a:90:1a:17:3e:ed:1d:43:3c:d9:78:09:3b:4a:b5:
76:60:99:db:36:0d:cb:9d:4f:a5:ce:f6:f3:f6:7b:
fd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9A:9F:7A:B9:23:17:FD:8A:DE:22:1C:BC:2C:93:7C:BB:A4:4F:84
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb3a8bcf-cae7-427f-bb65-401bf30544f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.177.82.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:5d:59:46:43:55:9d:ce:4c:03:fa:2e:84:46:7e:7f:69:eb:
34:3f:a6:df:b8:20:84:54:6c:d4:6a:a6:69:c0:be:62:cc:20:
98:cc:ae:ae:02:4d:e0:8f:92:10:56:d8:94:f2:41:7f:4c:63:
7a:52:e5:ce:f6:01:3c:4d:4d:3a:2c:f4:fd:dd:76:28:2f:2c:
d6:43:c3:ef:8c:17:fa:6b:ba:35:db:e8:63:48:49:fa:64:1d:
44:3f:0f:70:83:f9:bd:4f:bb:79:69:8f:19:16:73:b8:62:35:
97:97:7b:43:3d:e1:19:71:60:59:ae:22:c2:a3:24:d2:8f:11:
23:7b:29:8c:c2:ac:59:3b:4c:68:73:87:49:f1:e6:ae:60:66:
97:3e:94:57:d6:ab:a5:7c:c9:87:92:66:2b:41:4d:3f:13:c7:
07:8c:84:a2:62:74:7c:41:f8:9c:3d:34:84:52:60:88:ea:4f:
ae:2c:f7:b2:bf:cf:8c:87:26:5b:14:dc:fa:41:c1:83:47:63:
c8:28:b7:8d:7d:55:82:a7:e0:fb:1b:ad:a6:b2:95:53:38:6d:
59:55:47:ef:85:c6:e6:81:5b:bf:9d:2b:2f:a0:b3:f0:f4:a9:
fe:1a:72:67:5e:09:74:6d:ff:4e:51:b5:78:a0:4a:4c:9c:15:
7d:13:62:66
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEMPYwFNPhb4ZVQQaj8xM8/Hi4nIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0AxNDk0MGFiMGVlNjFkMDdhNzE3ZjhhNjcyM2JlYjk1M2Zj
MzQ5M2E5NTNjZTk4ZDU1NzM0ZDYzZjc4YzYzMzczMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDEzltDOSuNqjdsnfSPeYGcpJ8EY1wmtVKIKHfRxHRwgrSw
g+dqBa/HBKuwxA643T5eUUsMwOTbSjdcNLhNwGqsuxPaRxpJxzFsx3MhMRH/ODts
Do+8cOmw5I/94dlV/jtnmy5uIQZ/FL4xX8yQ/zg8Ti+GfEdF3hbOPt6Tg+w1u/tW
AVBi4OKMISjtdPkpbvu1EhYzs+Wr144ok7p3m/2Y+peRdCStmcMYDM4bUtIlfFVo
C9MLGvqXtH1DqyKCwsstNcLvzAqOzbnCsWlS/+DyQFXsfviCCRfcTYe53UJcg0qQ
Ghc+7R1DPNl4CTtKtXZgmds2DcudT6XO9vP2e/3pAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU4pqferkjF/2K3iIcvCyTfLukT4QwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2JiM2E4YmNmLWNhZTctNDI3Zi1iYjY1LTQwMWJmMzA1NDRmNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAPsVIwDQYJKoZIhvcNAQELBQADggEBAJ9dWUZDVZ3OTAP6LoRGfn9p6zQ/
pt+4IIRUbNRqpmnAvmLMIJjMrq4CTeCPkhBW2JTyQX9MY3pS5c72ATxNTTos9P3d
digvLNZDw++MF/prujXb6GNISfpkHUQ/D3CD+b1Pu3lpjxkWc7hiNZeXe0M94Rlx
YFmuIsKjJNKPESN7KYzCrFk7TGhzh0nx5q5gZpc+lFfWq6V8yYeSZitBTT8TxweM
hKJidHxB+Jw9NIRSYIjqT64s97K/z4yHJlsU3PpBwYNHY8got419VYKn4Psbraay
lVM4bVlVR++FxuaBW7+dKy+gs/D0qf4acmdeCXRt/05RtXigSkycFX0TYmY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:37 2025 by rpki-client