Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/851fc523-d7bd-4d54-afbe-8aa613d38c33.roa
File: 851fc523-d7bd-4d54-afbe-8aa613d38c33.roa (raw, json)
Hash identifier: IZj4eBNWEVts0C0jKzuCaA8dstwOsB/4NWok6+LC5Ac=
Subject key identifier: 59:EA:BB:1E:AC:D4:A6:A8:0A:C6:67:82:8A:1E:94:83:6A:56:9D:31
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 2215CB2490C2237FB0D5CAEEFA4C5D8BFE06C3F6
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/851fc523-d7bd-4d54-afbe-8aa613d38c33.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 206.55.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:15:cb:24:90:c2:23:7f:b0:d5:ca:ee:fa:4c:5d:8b:fe:06:c3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:f1:5f:48:6c:10:a0:7b:32:48:a7:9d:a6:
ca:9e:db:09:e7:6b:88:0b:14:26:fc:e3:cd:db:5d:
67:c0:81:cf:d7:87:c8:4c:6f:5f:53:83:4d:6e:18:
76:bd:6f:f3:c5:ab:0a:dc:fd:1b:b4:ad:29:ad:e7:
73:b3:00:d4:5a:56:7d:97:96:1f:a1:88:1d:44:61:
75:5d:ba:fc:d5:5b:ce:20:7f:32:89:e6:95:52:d7:
5b:7d:d8:17:53:c3:f2:42:10:68:55:f8:2e:a2:cb:
1c:c3:3b:fc:75:1d:fc:26:e6:02:dc:aa:73:f2:89:
69:22:bf:ae:ce:85:66:3f:73:e7:d9:dc:75:be:9d:
2b:3f:6b:cd:87:18:4b:9a:34:26:7e:2e:66:a0:e1:
5d:24:b1:ae:ef:58:b7:f8:bb:de:22:af:65:2d:9c:
f9:d7:54:7c:e8:f3:95:1a:5b:90:71:46:5a:65:5d:
29:10:42:65:39:2b:b6:f7:28:27:13:18:13:07:58:
d6:68:0f:bb:cf:82:e0:5b:39:10:07:69:2a:ed:c2:
ac:73:f3:67:ba:ec:85:14:fc:88:7f:68:bf:c1:41:
88:77:db:2b:1f:b8:c8:98:ee:1c:8e:5d:2e:c0:1a:
94:17:0f:31:f7:2c:af:7c:59:d6:fb:2b:9b:73:c4:
b6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EA:BB:1E:AC:D4:A6:A8:0A:C6:67:82:8A:1E:94:83:6A:56:9D:31
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/851fc523-d7bd-4d54-afbe-8aa613d38c33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.55.137.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e6:43:81:75:b7:d0:28:06:5a:99:5c:84:c7:25:6c:e3:70:
46:0a:43:ae:2c:b4:a3:a8:dd:b7:dd:cd:e5:2e:de:3b:11:94:
3a:b0:0e:9f:48:c1:2f:28:2f:30:1e:ea:65:3d:79:8f:8d:bb:
39:d3:7d:bf:37:4c:bb:b7:4f:cb:1d:0f:2c:f6:9f:18:6a:b5:
14:b4:79:66:15:72:ea:aa:73:08:71:fe:84:d6:e5:e6:72:ef:
cb:0a:6b:d9:42:d8:42:2d:1c:85:32:0d:a0:59:11:3b:b4:61:
b6:2d:32:42:1a:6a:1a:2b:12:6a:c3:ca:a3:ca:67:0a:74:b7:
a7:92:db:39:3e:06:2f:48:67:c9:2c:2d:2c:6c:24:c5:9a:49:
2e:14:8c:32:f4:e4:17:f3:28:85:4c:43:14:b4:9f:63:42:28:
01:89:a8:53:72:c7:be:3d:a4:fb:c3:7d:61:8d:f4:25:ff:71:
ec:2c:11:07:c0:96:40:86:62:10:fb:e1:ec:bf:8c:70:48:8b:
2b:fa:d3:10:b8:25:f4:74:f6:d5:7c:15:f3:3c:b1:7c:67:85:
47:c5:91:1c:d7:45:12:80:58:23:aa:48:ba:45:09:58:ac:f4:
7f:9d:8e:11:77:4c:ce:73:55:f3:a6:78:de:dc:80:18:22:d1:
0b:f9:71:6c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIhXLJJDCI3+w1cru+kxdi/4Gw/YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMTA0MDAwMDAwWhcNMjUwMjA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BlZWQ5MGM5YWY4NDczOGU5MGZiOWJmOTUwNTA1YTQyOTFl
YTllYjdmZGVlMjNmNDU5MjlmN2YwNzBkYmQ4NjY2MS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCo7/FfSGwQoHsySKedpsqe2wnna4gLFCb8483bXWfAgc/X
h8hMb19Tg01uGHa9b/PFqwrc/Ru0rSmt53OzANRaVn2Xlh+hiB1EYXVduvzVW84g
fzKJ5pVS11t92BdTw/JCEGhV+C6iyxzDO/x1Hfwm5gLcqnPyiWkiv67OhWY/c+fZ
3HW+nSs/a82HGEuaNCZ+Lmag4V0ksa7vWLf4u94ir2UtnPnXVHzo85UaW5BxRlpl
XSkQQmU5K7b3KCcTGBMHWNZoD7vPguBbORAHaSrtwqxz82e67IUU/Ih/aL/BQYh3
2ysfuMiY7hyOXS7AGpQXDzH3LK98Wdb7K5tzxLbzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUWeq7HqzUpqgKxmeCih6Ug2pWnTEwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkLzg1MWZjNTIzLWQ3YmQtNGQ1NC1hZmJlLThhYTYxM2QzOGMzMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADON4kwDQYJKoZIhvcNAQELBQADggEBACfmQ4F1t9AoBlqZXITHJWzjcEYK
Q64stKOo3bfdzeUu3jsRlDqwDp9IwS8oLzAe6mU9eY+NuznTfb83TLu3T8sdDyz2
nxhqtRS0eWYVcuqqcwhx/oTW5eZy78sKa9lC2EItHIUyDaBZETu0YbYtMkIaahor
EmrDyqPKZwp0t6eS2zk+Bi9IZ8ksLSxsJMWaSS4UjDL05BfzKIVMQxS0n2NCKAGJ
qFNyx749pPvDfWGN9CX/cewsEQfAlkCGYhD74ey/jHBIiyv60xC4JfR09tV8FfM8
sXxnhUfFkRzXRRKAWCOqSLpFCVis9H+djhF3TM5zVfOmeN7cgBgi0Qv5cWw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:36:17 2025 by rpki-client