Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/742b8efc-5ffa-48bf-a5a6-10257467cfc8.roa
File: 742b8efc-5ffa-48bf-a5a6-10257467cfc8.roa (raw, json)
Hash identifier: nqpRc+NlUUWRm3qdEUvquCF9+60kPIepgLURThHX+Vg=
Subject key identifier: A9:79:C3:8D:5B:13:5F:EE:77:84:B4:2C:77:36:71:81:A5:FD:03:57
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 2ACFEA7F7B0D5F88BBC4794CF8493A214191768A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/742b8efc-5ffa-48bf-a5a6-10257467cfc8.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 205.251.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:cf:ea:7f:7b:0d:5f:88:bb:c4:79:4c:f8:49:3a:21:41:91:76:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:26:7b:02:c4:79:7a:cc:4b:dc:3a:cc:ce:b9:
a5:df:4f:a9:38:c8:bf:d0:76:9a:de:76:8f:ee:0c:
e6:cd:12:cb:46:00:a1:c9:ed:5d:1c:12:d0:dc:c5:
dd:00:5e:2c:db:82:35:c4:11:87:ce:28:7d:1d:62:
49:aa:bd:fd:83:61:48:7c:07:35:3c:80:46:e2:1e:
18:14:b4:e0:9a:30:c3:3d:9a:4b:e1:a5:8f:97:f2:
f1:13:34:c4:0e:8e:a5:63:a5:29:82:ee:98:40:d9:
b9:fe:78:f6:79:a9:1d:e6:93:de:d2:32:c7:fe:f8:
52:be:5a:a0:34:15:54:40:73:e1:f4:4f:3e:af:6f:
d6:b4:76:52:30:f2:3e:55:dc:a6:7e:13:df:76:a5:
36:5b:71:53:ef:bb:20:b1:00:57:c2:af:a3:89:3e:
86:fe:f1:d6:b6:0e:a4:fd:04:9a:90:17:50:50:65:
4d:9a:13:a7:6f:15:75:2a:38:df:3c:0b:9d:3d:77:
ee:ff:dc:87:6f:9c:f4:9e:e9:ba:ae:ed:fa:82:e8:
8f:b0:6f:46:3d:df:7b:98:cb:2f:5b:c3:52:dc:95:
70:91:8c:57:41:87:cc:0c:de:20:f2:3a:78:0a:90:
da:eb:8e:1f:da:d2:49:7c:27:f3:86:05:c3:c9:fb:
5e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:79:C3:8D:5B:13:5F:EE:77:84:B4:2C:77:36:71:81:A5:FD:03:57
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/742b8efc-5ffa-48bf-a5a6-10257467cfc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.251.192.0/18
Signature Algorithm: sha256WithRSAEncryption
56:45:f6:27:69:18:6a:8e:f1:db:d7:50:4b:c6:b8:8f:31:43:
6d:9c:17:c5:b1:a1:ff:05:ca:2d:8b:67:81:b4:58:7e:ce:ba:
c4:ab:17:30:20:b7:76:87:dd:44:8d:1e:a3:20:2b:e0:c0:65:
c8:24:42:8c:e3:4a:85:4f:63:57:11:6c:cd:cd:1d:4d:0c:70:
7c:0e:f1:0a:6d:c9:84:df:27:77:d5:d4:a9:55:0f:f0:1f:7d:
43:20:30:ed:55:c7:2c:a4:c4:86:4f:0b:2d:1e:0d:a7:00:8a:
94:30:7e:8a:20:39:b7:7c:f1:ad:de:54:b7:f0:62:1b:b5:f0:
36:81:88:fa:80:56:90:00:9f:8a:65:20:79:a5:dc:b1:bb:ff:
c3:0a:e3:df:10:22:5b:02:e0:90:c7:d2:fe:58:5e:c4:0b:f4:
6d:dc:f3:a4:86:c9:e5:01:fd:93:32:e5:aa:45:31:46:5e:5a:
7f:09:4c:44:08:b9:98:c4:e0:e9:0a:22:ee:af:9e:6a:e5:4b:
bd:ab:df:3f:84:61:34:17:01:f7:b6:f1:e6:09:33:21:ef:0b:
46:f0:16:32:c0:52:e3:e7:b9:17:ed:cf:53:24:25:4d:e4:c0:
13:d7:b6:96:6c:3c:30:13:0c:2b:93:e8:f2:c6:7a:16:9d:66:
a4:5d:1f:7e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKs/qf3sNX4i7xHlM+Ek6IUGRdoowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwMTAzMDAwMDAwWhcNMjUwMjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0AyZDQxZDAxYmM1MzNiNDljNzBlNGI5NzIzZTIxZjA3NDlm
OGQxMzU4NjdhZWUzNTNjYTY2ZDlmMGExNDdiZDliMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDKJnsCxHl6zEvcOszOuaXfT6k4yL/Qdpredo/uDObNEstG
AKHJ7V0cEtDcxd0AXizbgjXEEYfOKH0dYkmqvf2DYUh8BzU8gEbiHhgUtOCaMMM9
mkvhpY+X8vETNMQOjqVjpSmC7phA2bn+ePZ5qR3mk97SMsf++FK+WqA0FVRAc+H0
Tz6vb9a0dlIw8j5V3KZ+E992pTZbcVPvuyCxAFfCr6OJPob+8da2DqT9BJqQF1BQ
ZU2aE6dvFXUqON88C509d+7/3IdvnPSe6bqu7fqC6I+wb0Y933uYyy9bw1LclXCR
jFdBh8wM3iDyOngKkNrrjh/a0kl8J/OGBcPJ+14bAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUqXnDjVsTX+53hLQsdzZxgaX9A1cwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1Lzc0MmI4ZWZjLTVmZmEtNDhiZi1hNWE2LTEwMjU3NDY3Y2ZjOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAbN+8AwDQYJKoZIhvcNAQELBQADggEBAFZF9idpGGqO8dvXUEvGuI8xQ22c
F8Wxof8Fyi2LZ4G0WH7OusSrFzAgt3aH3USNHqMgK+DAZcgkQozjSoVPY1cRbM3N
HU0McHwO8QptyYTfJ3fV1KlVD/AffUMgMO1VxyykxIZPCy0eDacAipQwfoogObd8
8a3eVLfwYhu18DaBiPqAVpAAn4plIHml3LG7/8MK498QIlsC4JDH0v5YXsQL9G3c
86SGyeUB/ZMy5apFMUZeWn8JTEQIuZjE4OkKIu6vnmrlS72r3z+EYTQXAfe28eYJ
MyHvC0bwFjLAUuPnuRftz1MkJU3kwBPXtpZsPDATDCuT6PLGehadZqRdH34=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:29:47 2025 by rpki-client