Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dad11f54-4215-47a7-95ce-74768e2852ae.roa
File: dad11f54-4215-47a7-95ce-74768e2852ae.roa (raw, json)
Hash identifier: H21M6K8fkuu3Pr84ZxRXoubhR0p/JrEc3o3BTfRjR3c=
Subject key identifier: 6C:BE:78:45:5C:D0:42:E0:2A:AC:01:B4:80:A7:FE:12:EE:2B:B5:94
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 68C7BFFEB4B3D8007F50AAD069A95FB8FBF4F860
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dad11f54-4215-47a7-95ce-74768e2852ae.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.177.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:c7:bf:fe:b4:b3:d8:00:7f:50:aa:d0:69:a9:5f:b8:fb:f4:f8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=dc526775356606729e44e09a1e040b6f827dd62c41af7251254d6af3ba73a9d0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8d:8e:bf:8c:c2:f3:3f:9b:90:a5:1f:06:a0:
fb:ac:f7:8b:62:24:73:36:4c:c9:fa:77:7b:56:2d:
15:02:58:e9:6e:74:8e:2b:0a:13:ad:b7:0e:d6:33:
66:f6:b0:ee:92:95:f5:b0:81:41:ba:ab:28:0c:bd:
a5:9d:2d:42:4b:18:98:18:42:08:88:33:17:e4:ec:
f2:a0:34:21:3b:d4:4b:8e:c7:2b:c3:30:c4:75:2f:
8b:fa:bf:b3:65:fc:cd:45:2a:ea:27:e2:52:71:e4:
08:57:de:0e:5a:4c:bb:03:9f:78:a0:08:c9:d1:dc:
57:2b:a0:4b:b5:90:b0:1a:14:72:da:97:1b:33:2b:
52:d6:e1:ee:e1:39:d2:05:62:1e:24:8b:6c:56:45:
ce:01:fe:6a:f2:49:7f:82:68:2c:7c:65:99:f0:31:
05:71:41:67:57:8d:6c:a3:46:ea:75:e7:b8:84:81:
dd:7b:00:e7:db:54:dc:ab:a9:bd:86:9d:17:e9:28:
33:17:e5:00:8d:36:2f:72:84:42:13:88:4b:4d:4c:
78:5a:5d:32:c0:84:35:b0:61:f0:dd:45:21:e3:6f:
60:5f:3c:7f:73:00:1d:f4:d7:0f:e6:69:47:aa:b7:
99:7d:f9:50:31:19:24:f2:db:45:ce:68:9f:a0:9c:
2d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BE:78:45:5C:D0:42:E0:2A:AC:01:B4:80:A7:FE:12:EE:2B:B5:94
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dad11f54-4215-47a7-95ce-74768e2852ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.177.90.0/24
Signature Algorithm: sha256WithRSAEncryption
99:0b:8f:9c:f6:e1:55:7a:86:38:e5:a7:ee:f4:d3:13:7e:74:
c5:59:61:28:b0:32:b9:4c:05:62:e3:d0:d7:15:0c:54:86:9c:
54:cf:86:07:b8:53:76:1f:98:be:86:d3:f2:00:a3:22:6d:06:
8b:6d:15:0d:14:fd:39:85:96:8e:68:5e:1a:26:c1:64:83:14:
79:58:1f:10:5d:62:bf:3d:de:80:75:ff:e7:12:ad:0d:c0:f3:
51:4c:4e:73:8d:2e:55:c9:cd:42:78:eb:bc:c1:75:1f:e3:be:
a3:2c:82:9b:5c:76:91:1f:ba:f2:a2:7b:c8:d4:ab:b8:6e:c5:
d5:4e:c7:6c:49:27:39:0a:b9:8e:b8:3f:ed:a3:ce:36:05:03:
a6:93:a3:59:c4:61:0d:0d:6d:1e:e8:68:ff:f9:27:db:0e:c7:
98:45:a8:dd:67:ac:a8:62:30:2b:f3:ce:c2:19:f5:50:e6:fa:
3a:d6:b7:1c:2c:f4:44:14:e7:30:53:e9:a4:12:4b:02:e7:91:
12:e6:85:8c:72:15:94:9c:cb:00:13:4d:35:72:be:33:a9:65:
e2:8c:d0:e3:55:37:0f:30:00:c5:58:20:64:95:d3:b3:9e:3a:
9d:86:00:ff:00:e3:b5:31:34:4e:92:97:b5:cb:48:a9:bf:70:
61:45:62:f1
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUaMe//rSz2AB/UKrQaalfuPv0+GAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BkYzUyNjc3NTM1NjYwNjcyOWU0NGUwOWExZTA0MGI2Zjgy
N2RkNjJjNDFhZjcyNTEyNTRkNmFmM2JhNzNhOWQwMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCpjY6/jMLzP5uQpR8GoPus94tiJHM2TMn6d3tWLRUCWOlu
dI4rChOttw7WM2b2sO6SlfWwgUG6qygMvaWdLUJLGJgYQgiIMxfk7PKgNCE71EuO
xyvDMMR1L4v6v7Nl/M1FKuon4lJx5AhX3g5aTLsDn3igCMnR3FcroEu1kLAaFHLa
lxszK1LW4e7hOdIFYh4ki2xWRc4B/mrySX+CaCx8ZZnwMQVxQWdXjWyjRup157iE
gd17AOfbVNyrqb2GnRfpKDMX5QCNNi9yhEITiEtNTHhaXTLAhDWwYfDdRSHjb2Bf
PH9zAB301w/maUeqt5l9+VAxGSTy20XOaJ+gnC0HAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUbL54RVzQQuAqrAG0gKf+Eu4rtZQwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2RhZDExZjU0LTQyMTUtNDdhNy05NWNlLTc0NzY4ZTI4NTJhZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAPsVowDQYJKoZIhvcNAQELBQADggEBAJkLj5z24VV6hjjlp+700xN+dMVZ
YSiwMrlMBWLj0NcVDFSGnFTPhge4U3YfmL6G0/IAoyJtBottFQ0U/TmFlo5oXhom
wWSDFHlYHxBdYr893oB1/+cSrQ3A81FMTnONLlXJzUJ467zBdR/jvqMsgptcdpEf
uvKie8jUq7huxdVOx2xJJzkKuY64P+2jzjYFA6aTo1nEYQ0NbR7oaP/5J9sOx5hF
qN1nrKhiMCvzzsIZ9VDm+jrWtxws9EQU5zBT6aQSSwLnkRLmhYxyFZScywATTTVy
vjOpZeKM0ONVNw8wAMVYIGSV07OeOp2GAP8A47UxNE6Sl7XLSKm/cGFFYvE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:06 2025 by rpki-client