Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/3af7659c-c364-4492-bd08-bb9e6b8fdf43.roa
File: 3af7659c-c364-4492-bd08-bb9e6b8fdf43.roa (raw, json)
Hash identifier: kSCwuXjoiRG/Sdxxqz5HGfaAKjbDtNEma5GBYLEaQyI=
Subject key identifier: AA:0C:2E:C9:C7:CF:20:F3:67:3B:41:2E:DA:3D:0A:B9:05:98:A2:45
Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial: 179B381A31A0B27514CF91F5BE96740399744215
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/3af7659c-c364-4492-bd08-bb9e6b8fdf43.roa
Signing time: Tue 04 Mar 2025 18:10:08 +0000
ROA not before: Tue 04 Mar 2025 18:10:08 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.112.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:9b:38:1a:31:a0:b2:75:14:cf:91:f5:be:96:74:03:99:74:42:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Validity
Not Before: Mar 4 18:10:08 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d6:4c:7d:96:c4:6a:98:fb:00:24:3e:6d:7a:
b1:84:ea:e8:54:e1:9b:b8:2c:82:b2:6a:a3:da:07:
0c:3a:dc:80:db:9b:54:04:7b:5d:90:1b:c9:0f:9a:
68:4c:35:78:bd:ea:f3:0e:cb:d5:56:1a:e7:17:b2:
96:05:9a:43:85:0a:20:94:2d:62:5b:0b:e0:13:ab:
88:30:15:68:26:99:c3:08:d8:25:6d:0a:b5:9e:1d:
03:76:b5:4e:48:7d:4d:12:a7:03:fd:4d:38:a0:98:
79:3c:a1:99:0e:c6:e4:23:73:c5:28:72:22:12:61:
db:ba:f7:86:69:c7:7d:23:c7:e0:d2:47:e7:3c:6e:
3b:fa:c3:cd:c3:9a:18:cc:ab:3a:65:22:23:51:5e:
f8:58:d1:20:46:c4:ad:e8:e1:fa:0d:ad:d8:6c:bf:
b7:dc:ed:7e:16:b6:a9:2f:4a:57:3a:cd:c2:30:e7:
28:1e:c5:35:d5:5b:1c:43:43:21:f6:51:f3:33:a8:
11:61:cb:5e:a4:e1:0d:6b:4a:5a:2e:1e:2e:b6:e9:
4c:18:bd:32:47:5c:2b:39:15:ed:ff:5b:11:48:e7:
80:85:3e:e9:04:81:23:ac:b7:80:66:14:3c:93:22:
02:d3:1e:08:ba:0e:69:d2:dc:ca:5b:ba:cd:ce:e5:
e7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0C:2E:C9:C7:CF:20:F3:67:3B:41:2E:DA:3D:0A:B9:05:98:A2:45
X509v3 Authority Key Identifier:
keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/3af7659c-c364-4492-bd08-bb9e6b8fdf43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.112.88.0/22
Signature Algorithm: sha256WithRSAEncryption
26:33:60:94:5a:47:98:03:52:a3:25:96:e8:15:20:72:73:79:
93:0f:4f:b2:ed:ca:75:e3:d1:7d:b9:13:3e:b9:a3:24:87:33:
f2:c9:f8:06:92:f3:2f:3f:52:59:03:3b:52:f2:65:e7:0f:24:
af:96:9c:ef:36:37:d4:58:9b:51:af:c5:e6:bb:6b:6d:1e:94:
ad:b2:96:79:77:7c:1c:8c:fc:db:eb:be:c1:a9:12:d6:65:bb:
ef:11:19:07:8c:48:ef:cc:a6:87:40:e4:6a:af:5c:cf:e2:d0:
78:92:e6:8a:8c:89:62:9d:c7:63:b6:01:3b:76:cb:f2:13:44:
23:7b:4d:94:15:17:4d:b4:e6:d2:dd:a2:30:28:77:fe:fb:4a:
3e:4a:9e:de:58:1d:08:b4:0c:ea:2a:a4:a7:4f:20:4a:3d:7d:
0c:09:67:67:ad:17:9f:ff:9a:6f:b5:b9:56:a6:32:13:0e:d2:
53:23:f0:93:ac:3e:4c:21:cf:d2:65:4e:85:38:58:e1:ec:d8:
be:17:1c:ec:bd:81:cb:18:b8:6c:ae:15:9c:5a:18:0b:8d:2f:
40:e9:e3:af:4c:23:c7:8d:a3:15:02:38:3c:3f:d3:ca:76:3f:
e7:4b:e5:24:5b:77:42:29:6a:6c:93:be:f9:37:35:63:34:5c:
79:57:d9:df
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUF5s4GjGgsnUUz5H1vpZ0A5l0QhUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj
Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUwMzA0MTgxMDA4WhcNMjUwNDA4MjM1OTU5
WjB6MUkwRwYDVQQFE0AxZTBlNDMzYzJjMGJiYjA0ODVkY2E1NWZjZTJmMDI4OGI5
ZDM0YmVlOGNkZDA2ZTdkNzkwMmZkMmRlZTMzYWUyMS0wKwYDVQQDEyRkZGZiYzk3
Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCR1kx9lsRqmPsAJD5terGE6uhU4Zu4LIKyaqPaBww63IDb
m1QEe12QG8kPmmhMNXi96vMOy9VWGucXspYFmkOFCiCULWJbC+ATq4gwFWgmmcMI
2CVtCrWeHQN2tU5IfU0SpwP9TTigmHk8oZkOxuQjc8UociISYdu694Zpx30jx+DS
R+c8bjv6w83DmhjMqzplIiNRXvhY0SBGxK3o4foNrdhsv7fc7X4WtqkvSlc6zcIw
5ygexTXVWxxDQyH2UfMzqBFhy16k4Q1rSlouHi626UwYvTJHXCs5Fe3/WxFI54CF
PukEgSOst4BmFDyTIgLTHgi6DmnS3Mpbus3O5ed5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUqgwuycfPIPNnO0Eu2j0KuQWYokUwHwYDVR0jBBgwFoAUkS3GDddkKYK8
rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w
OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy
Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4
OTE0OTBkOWM5LzNhZjc2NTljLWMzNjQtNDQ5Mi1iZDA4LWJiOWU2YjhmZGY0My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw
LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIycFgwDQYJKoZIhvcNAQELBQADggEBACYzYJRaR5gDUqMllugVIHJzeZMP
T7LtynXj0X25Ez65oySHM/LJ+AaS8y8/UlkDO1LyZecPJK+WnO82N9RYm1Gvxea7
a20elK2ylnl3fByM/NvrvsGpEtZlu+8RGQeMSO/MpodA5GqvXM/i0HiS5oqMiWKd
x2O2ATt2y/ITRCN7TZQVF0205tLdojAod/77Sj5Knt5YHQi0DOoqpKdPIEo9fQwJ
Z2etF5//mm+1uVamMhMO0lMj8JOsPkwhz9JlToU4WOHs2L4XHOy9gcsYuGyuFZxa
GAuNL0Dp469MI8eNoxUCODw/08p2P+dL5SRbd0IpamyTvvk3NWM0XHlX2d8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:26 2025 by rpki-client