Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c4bd10f7-4532-468b-8647-e7dca834ad1c.roa
File: c4bd10f7-4532-468b-8647-e7dca834ad1c.roa (raw, json)
Hash identifier: VsM7WC1HCYNVtjl93ja2SldfsnVCp3kDV3799fjY+7E=
Subject key identifier: 7D:C6:96:90:BF:0F:B0:96:C1:82:4D:9F:3D:42:D9:E0:8E:6D:5B:08
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 703EF6F7AFA5EC45D6EA2F3A43AA4C3F94CC340E
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c4bd10f7-4532-468b-8647-e7dca834ad1c.roa
Signing time: Tue 04 Mar 2025 22:40:05 +0000
ROA not before: Tue 04 Mar 2025 22:40:05 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.82.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:3e:f6:f7:af:a5:ec:45:d6:ea:2f:3a:43:aa:4c:3f:94:cc:34:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Mar 4 22:40:05 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:16:ef:38:13:ea:1d:d2:6c:8a:9d:ef:8e:13:
f9:d8:e5:38:85:2f:e9:33:b2:7e:29:d2:9d:90:69:
f5:e5:19:cd:4f:74:a5:fc:79:57:0e:9e:9a:b5:80:
25:70:af:09:5d:e8:52:34:75:0b:a8:ac:d1:4f:82:
3a:d2:c0:90:42:1f:95:bb:92:b7:c3:97:b6:e3:31:
f5:a8:db:a4:ea:c6:a4:83:ce:34:9a:b6:01:41:d8:
0f:ba:8c:16:27:8f:dd:9f:22:3f:a9:5d:02:a2:28:
b5:0b:1e:3b:09:35:b4:3b:d8:be:4c:84:3c:78:f7:
88:c7:a7:18:9b:ff:39:41:40:18:7b:e5:82:2f:8d:
22:08:b4:80:0e:de:d6:c9:69:32:69:aa:94:58:54:
71:94:3e:87:ce:9c:7f:00:c6:bf:90:e9:13:59:9f:
d6:91:60:22:7a:73:ee:71:b6:9d:53:0d:c2:bf:ac:
6e:10:0e:cd:a1:e8:09:00:2a:18:46:1a:0c:0b:fc:
22:47:e9:08:4a:d6:5e:30:4b:5e:00:a0:5a:36:72:
6f:dc:b2:0a:c5:b2:6e:d8:7e:46:2d:36:51:ca:0c:
42:bf:2f:be:18:8b:10:62:3f:15:3b:d7:a6:b2:10:
78:30:12:20:70:d9:1f:c8:64:dc:70:74:be:85:55:
db:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C6:96:90:BF:0F:B0:96:C1:82:4D:9F:3D:42:D9:E0:8E:6D:5B:08
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c4bd10f7-4532-468b-8647-e7dca834ad1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.12.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ae:97:f8:cf:5c:40:03:61:da:b0:54:41:ac:a9:38:82:08:
a5:2f:a1:91:e4:20:67:62:b2:21:69:bd:8c:fc:ae:ea:99:3c:
f3:de:75:0c:62:71:ac:7f:f1:40:25:79:c2:32:12:3a:66:58:
3c:80:13:87:60:55:34:85:1a:e4:23:17:67:05:92:59:e2:a1:
bb:00:93:ff:2b:e2:6a:8c:a0:c1:c0:4b:92:69:2d:4f:7c:5e:
4d:65:90:e9:63:63:ca:45:5f:f3:c3:81:3b:99:5a:d4:9d:d2:
15:65:b7:f4:05:80:a6:b9:22:74:b0:85:67:c1:bb:8f:6e:3e:
bb:de:c7:0d:33:55:b1:29:64:6f:2f:f4:ea:68:89:1a:fd:d8:
3b:2e:67:dc:7d:18:26:bd:ff:a7:fe:7e:d2:fd:69:b1:9d:57:
17:f6:33:aa:2f:99:ad:8b:a1:87:b9:fc:af:fc:be:a0:d4:2d:
01:85:49:0e:5a:71:6c:75:21:c6:d6:bc:a5:f3:82:c4:7c:99:
4b:6c:7d:e9:4a:fe:43:2c:6e:e0:07:67:cc:a1:a6:0b:0f:1c:
10:aa:de:0c:6c:25:ee:fa:1c:3e:77:be:7c:fc:27:85:59:41:
ba:bb:a3:46:cf:35:53:ae:7e:3e:cd:6b:9f:e9:62:c3:8b:43:
3b:cb:d2:f0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUcD7296+l7EXW6i86Q6pMP5TMNA4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMzA0MjI0MDA1WhcNMjUwNDA4MjM1OTU5
WjB6MUkwRwYDVQQFE0A0N2UwODNiMDRhNTQ1MmMwYmFlOTk4ZDg0NTRhYTc3Y2Qz
ZTAzYjAyZjljNDA2ODY4NTZlZmZhZDkxNjBiMTc5MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6Fu84E+od0myKne+OE/nY5TiFL+kzsn4p0p2QafXlGc1P
dKX8eVcOnpq1gCVwrwld6FI0dQuorNFPgjrSwJBCH5W7krfDl7bjMfWo26TqxqSD
zjSatgFB2A+6jBYnj92fIj+pXQKiKLULHjsJNbQ72L5MhDx494jHpxib/zlBQBh7
5YIvjSIItIAO3tbJaTJpqpRYVHGUPofOnH8Axr+Q6RNZn9aRYCJ6c+5xtp1TDcK/
rG4QDs2h6AkAKhhGGgwL/CJH6QhK1l4wS14AoFo2cm/csgrFsm7YfkYtNlHKDEK/
L74YixBiPxU716ayEHgwEiBw2R/IZNxwdL6FVdvjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUfcaWkL8PsJbBgk2fPULZ4I5tWwgwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiL2M0YmQxMGY3LTQ1MzItNDY4Yi04NjQ3LWU3ZGNhODM0YWQxYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACtUgwwDQYJKoZIhvcNAQELBQADggEBADWul/jPXEADYdqwVEGsqTiCCKUv
oZHkIGdisiFpvYz8ruqZPPPedQxicax/8UAlecIyEjpmWDyAE4dgVTSFGuQjF2cF
klniobsAk/8r4mqMoMHAS5JpLU98Xk1lkOljY8pFX/PDgTuZWtSd0hVlt/QFgKa5
InSwhWfBu49uPrvexw0zVbEpZG8v9OpoiRr92DsuZ9x9GCa9/6f+ftL9abGdVxf2
M6ovma2LoYe5/K/8vqDULQGFSQ5acWx1IcbWvKXzgsR8mUtsfelK/kMsbuAHZ8yh
pgsPHBCq3gxsJe76HD53vnz8J4VZQbq7o0bPNVOufj7Na5/pYsOLQzvL0vA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:09 2025 by rpki-client