Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5c3b831-aac9-4b38-9d9d-098f3b5948ae.roa
File: d5c3b831-aac9-4b38-9d9d-098f3b5948ae.roa (raw, json)
Hash identifier: CJjsijAau79BFiPFcNNR9iOQ6qAbYcIb5VoKJqWc9j4=
Subject key identifier: E3:6C:AC:B3:21:68:93:76:55:5A:FA:0C:AD:73:5B:B7:4A:B8:F1:31
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 331F76BF133541B25BB2CDC91E2F596E46215337
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5c3b831-aac9-4b38-9d9d-098f3b5948ae.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.94.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:1f:76:bf:13:35:41:b2:5b:b2:cd:c9:1e:2f:59:6e:46:21:53:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=c3175cc6901d525af42f5d40e91d17b13df3d74a0a50dbef8c88839963927675, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8b:1f:8c:ee:cd:3e:17:1f:d0:f4:8c:78:0f:
2a:5a:8f:39:0c:65:0f:ed:24:78:c9:16:6a:ed:39:
91:0c:d8:fe:78:f5:30:6c:97:30:a2:1b:23:68:71:
c1:5c:f7:a4:55:a5:18:86:7a:9e:6e:4d:f0:ed:28:
58:a9:fe:26:28:da:82:66:16:8b:4d:85:fe:b3:ad:
f4:39:b9:f3:03:bb:c4:97:44:28:31:a8:78:59:3a:
a3:a5:e7:49:60:4c:32:66:a9:1e:5c:9d:5e:b6:fb:
62:0f:34:39:0c:41:7b:54:a3:80:40:dc:51:59:39:
50:04:a6:ad:6d:24:13:34:a3:bb:84:00:f2:f5:33:
2e:37:c4:6c:be:9b:d4:c9:09:c2:a8:34:52:96:2b:
7c:f4:07:9d:de:b4:bc:71:b1:5b:13:36:af:33:4c:
cd:ab:bc:58:64:0c:e4:3e:7f:71:7d:35:91:e9:8c:
7d:35:0c:39:6c:d8:6b:b9:15:45:e3:d7:d7:9e:fe:
33:88:c4:19:eb:4d:ad:88:97:5d:4d:78:4f:75:7f:
58:d2:f1:98:0f:b9:68:78:78:82:70:bc:4b:5e:7a:
ba:27:dc:c1:66:55:80:7b:7a:eb:7e:c1:17:a0:41:
40:2b:b9:9c:18:55:2a:c4:11:7a:81:36:fb:2b:6d:
62:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6C:AC:B3:21:68:93:76:55:5A:FA:0C:AD:73:5B:B7:4A:B8:F1:31
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5c3b831-aac9-4b38-9d9d-098f3b5948ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.94.72.0/21
Signature Algorithm: sha256WithRSAEncryption
24:e3:2b:dc:04:89:fc:66:37:06:70:7e:b6:7b:61:df:81:af:
ff:70:16:e3:b9:51:8f:45:0a:7f:d8:e7:b9:0c:1a:a2:0a:e9:
84:02:c7:c1:d1:62:d9:3d:a1:f8:20:c0:8c:af:74:0a:d9:85:
52:3e:01:4b:2d:10:5c:5b:e0:4d:69:8d:1a:46:b3:55:37:d2:
6f:72:2e:97:aa:9a:68:97:63:11:8e:7a:71:ba:c4:a1:ea:c6:
af:03:af:7a:b1:68:d5:b0:09:9e:55:79:cd:b3:44:4c:0d:9e:
2c:ae:6e:08:18:94:79:3d:9a:33:3f:f4:f0:a2:bb:1a:16:73:
c3:b4:42:2f:e7:6a:24:dc:25:7a:d8:ea:83:a6:4b:b5:41:a5:
9b:f2:a9:aa:c6:94:ce:e8:37:e3:12:8b:b3:61:e3:33:67:1a:
e6:92:ba:a2:ef:28:31:5a:94:6d:9f:15:77:09:18:5b:e8:14:
d6:62:85:42:6a:d7:4d:74:7e:f4:73:30:2b:dc:45:51:21:62:
52:46:e9:87:3e:6f:4e:9b:67:0d:61:d2:a3:cc:32:e2:19:9b:
a5:14:50:eb:58:82:d2:eb:24:a6:67:a3:d6:3d:07:75:63:43:
68:35:f0:d5:50:d5:0c:be:12:81:29:c7:53:69:34:63:44:f6:
ef:92:76:5e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUMx92vxM1QbJbss3JHi9ZbkYhUzcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTA2MDAwMDAwWhcNMjUwMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BjMzE3NWNjNjkwMWQ1MjVhZjQyZjVkNDBlOTFkMTdiMTNk
ZjNkNzRhMGE1MGRiZWY4Yzg4ODM5OTYzOTI3Njc1MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC+ix+M7s0+Fx/Q9Ix4DypajzkMZQ/tJHjJFmrtOZEM2P54
9TBslzCiGyNoccFc96RVpRiGep5uTfDtKFip/iYo2oJmFotNhf6zrfQ5ufMDu8SX
RCgxqHhZOqOl50lgTDJmqR5cnV62+2IPNDkMQXtUo4BA3FFZOVAEpq1tJBM0o7uE
APL1My43xGy+m9TJCcKoNFKWK3z0B53etLxxsVsTNq8zTM2rvFhkDOQ+f3F9NZHp
jH01DDls2Gu5FUXj19ee/jOIxBnrTa2Il11NeE91f1jS8ZgPuWh4eIJwvEteeron
3MFmVYB7eut+wRegQUAruZwYVSrEEXqBNvsrbWKHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU42yssyFok3ZVWvoMrXNbt0q48TEwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2Q1YzNiODMxLWFhYzktNGIzOC05ZDlkLTA5OGYzYjU5NDhhZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAM2XkgwDQYJKoZIhvcNAQELBQADggEBACTjK9wEifxmNwZwfrZ7Yd+Br/9w
FuO5UY9FCn/Y57kMGqIK6YQCx8HRYtk9ofggwIyvdArZhVI+AUstEFxb4E1pjRpG
s1U30m9yLpeqmmiXYxGOenG6xKHqxq8Dr3qxaNWwCZ5Vec2zREwNniyubggYlHk9
mjM/9PCiuxoWc8O0Qi/naiTcJXrY6oOmS7VBpZvyqarGlM7oN+MSi7Nh4zNnGuaS
uqLvKDFalG2fFXcJGFvoFNZihUJq1010fvRzMCvcRVEhYlJG6Yc+b06bZw1h0qPM
MuIZm6UUUOtYgtLrJKZno9Y9B3VjQ2g18NVQ1Qy+EoEpx1NpNGNE9u+Sdl4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:39:04 2025 by rpki-client