Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/addfda24-421e-4b45-80e1-dd5a255777c5.roa
File: addfda24-421e-4b45-80e1-dd5a255777c5.roa (raw, json)
Hash identifier: TPjMMhjWV1v7FunFSZ6bgJHOxiDDYZhZj0Ed8qj3E4c=
Subject key identifier: 47:4D:AF:5B:A5:31:EB:2A:C3:DD:30:64:70:D5:31:C9:1E:31:30:79
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 6EFD4E81BB6C17259E77ABDD15CE674261858685
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/addfda24-421e-4b45-80e1-dd5a255777c5.roa
Signing time: Mon 17 Mar 2025 15:01:07 +0000
ROA not before: Mon 17 Mar 2025 15:01:07 +0000
ROA not after: Mon 21 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.251.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:fd:4e:81:bb:6c:17:25:9e:77:ab:dd:15:ce:67:42:61:85:86:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Mar 17 15:01:07 2025 GMT
Not After : Apr 21 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ed:7d:5e:bc:dc:f7:89:8e:b4:c9:ed:95:af:
2e:e5:9e:2b:05:43:cd:58:3b:ee:54:00:34:b0:62:
4b:48:46:5c:9b:8c:f9:79:64:64:ad:6f:f6:5c:bf:
ba:d9:31:8d:32:b9:e7:04:4a:73:99:01:2e:25:b8:
a2:21:69:8a:a0:5c:4a:ec:e0:b9:a5:01:c7:a8:47:
67:56:cb:62:96:5c:a7:b1:27:93:28:55:ca:0c:6e:
3d:d9:01:87:78:20:24:14:32:91:3c:0c:9b:47:d6:
38:56:dc:65:9e:ac:06:62:b5:d8:a7:c3:24:48:8a:
84:3f:ca:d5:e3:0d:23:6d:8c:18:a4:80:bd:f0:0f:
0a:07:e1:44:2a:31:a8:ce:a4:4a:cf:81:8e:21:26:
fd:49:73:7c:18:52:2e:c1:a7:66:be:c2:85:91:a0:
24:95:73:7a:f1:22:61:e3:87:d2:9d:b0:42:86:c4:
85:a2:54:07:59:4f:dd:4a:c8:d9:b5:7e:03:fc:45:
46:84:64:1b:8a:5c:3d:cb:81:95:29:e0:cb:19:e2:
45:28:f6:f3:d7:f2:42:08:dc:54:9c:c1:39:14:45:
d3:2d:2f:70:12:0a:d7:01:24:81:14:8e:49:99:7c:
24:71:41:42:a7:9b:0a:be:3c:bb:7a:0d:29:98:35:
ae:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4D:AF:5B:A5:31:EB:2A:C3:DD:30:64:70:D5:31:C9:1E:31:30:79
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/addfda24-421e-4b45-80e1-dd5a255777c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.228.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:59:f6:06:a3:84:ec:d2:7c:4f:07:39:27:7c:fe:c3:74:2b:
67:a8:17:ab:55:48:4b:dc:1c:4b:3e:4c:10:e6:06:00:c8:6a:
f5:bc:a6:44:ce:95:15:be:cc:f2:35:15:b5:56:7f:6a:5a:18:
03:bb:46:f4:c5:bd:d5:ec:1b:b3:b3:20:c6:d3:8e:6e:fa:9f:
81:b6:c1:67:8b:47:82:f5:95:c4:42:27:8c:1e:a0:be:92:12:
06:3b:05:38:49:50:58:ff:44:eb:18:16:06:80:d3:fd:45:70:
75:72:95:44:48:11:71:b9:74:bb:d5:50:7a:01:63:56:a6:c8:
22:b6:3a:b0:f7:57:c0:36:be:cc:cb:82:3f:5f:92:28:de:fa:
0d:b7:10:76:45:86:a3:42:c5:cc:52:9d:0f:b0:09:fd:f0:a1:
cb:3d:5d:c5:fa:7a:7c:ca:0c:96:26:20:51:1e:58:97:05:33:
16:2c:ac:44:d2:1a:b7:98:7d:55:e1:e1:99:c0:c0:39:6a:3b:
47:42:d4:eb:48:5d:35:db:47:87:2d:b3:e0:d0:40:79:db:ca:
27:fd:82:39:2f:d1:e7:56:70:3a:17:30:e5:05:1c:55:30:ea:
b9:54:50:c2:74:1a:5b:b5:ed:f3:2b:2c:8a:21:3c:cc:84:ef:
f0:01:9a:3b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbv1OgbtsFyWed6vdFc5nQmGFhoUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMzE3MTUwMTA3WhcNMjUwNDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A1ZGE3ZDM0MWMzMjc4MzdkY2U0MGE0ZWYyM2ZkMDE4NDM2
OTJmYjU0MDFjODExZTgzZDFlMjUzZDg3OGY3OWRhMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCn7X1evNz3iY60ye2Vry7lnisFQ81YO+5UADSwYktIRlyb
jPl5ZGStb/Zcv7rZMY0yuecESnOZAS4luKIhaYqgXErs4LmlAceoR2dWy2KWXKex
J5MoVcoMbj3ZAYd4ICQUMpE8DJtH1jhW3GWerAZitdinwyRIioQ/ytXjDSNtjBik
gL3wDwoH4UQqMajOpErPgY4hJv1Jc3wYUi7Bp2a+woWRoCSVc3rxImHjh9KdsEKG
xIWiVAdZT91KyNm1fgP8RUaEZBuKXD3LgZUp4MsZ4kUo9vPX8kII3FScwTkURdMt
L3ASCtcBJIEUjkmZfCRxQUKnmwq+PLt6DSmYNa5FAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUR02vW6Ux6yrD3TBkcNUxyR4xMHkwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkL2FkZGZkYTI0LTQyMWUtNGI0NS04MGUxLWRkNWEyNTU3NzdjNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIX++QwDQYJKoZIhvcNAQELBQADggEBAB9Z9gajhOzSfE8HOSd8/sN0K2eo
F6tVSEvcHEs+TBDmBgDIavW8pkTOlRW+zPI1FbVWf2paGAO7RvTFvdXsG7OzIMbT
jm76n4G2wWeLR4L1lcRCJ4weoL6SEgY7BThJUFj/ROsYFgaA0/1FcHVylURIEXG5
dLvVUHoBY1amyCK2OrD3V8A2vszLgj9fkije+g23EHZFhqNCxcxSnQ+wCf3wocs9
XcX6enzKDJYmIFEeWJcFMxYsrETSGreYfVXh4ZnAwDlqO0dC1OtIXTXbR4cts+DQ
QHnbyif9gjkv0edWcDoXMOUFHFUw6rlUUMJ0Glu17fMrLIohPMyE7/ABmjs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:33 2025 by rpki-client