Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/26a6e950-ddb7-4842-80db-ff143891e9b3.roa
File: 26a6e950-ddb7-4842-80db-ff143891e9b3.roa (raw, json)
Hash identifier: YKLBsazDCx6ibgJcWzEzUNS4tbVbR5YDbQbo5JROzl8=
Subject key identifier: 63:42:B5:8F:09:6A:AC:A9:FB:0C:A6:85:7A:02:5B:09:D6:F8:8D:0C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0DF309553034AE9508F97A919B8C2E70369D5D36
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/26a6e950-ddb7-4842-80db-ff143891e9b3.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.29.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:f3:09:55:30:34:ae:95:08:f9:7a:91:9b:8c:2e:70:36:9d:5d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:68:cb:dd:b7:52:00:0c:18:51:98:b8:ac:f5:
95:38:f8:cf:13:40:ca:d9:49:68:bf:ca:19:73:f9:
d9:e8:d2:64:a8:1f:38:27:78:f1:22:46:c0:6a:35:
92:48:93:90:e8:14:e2:32:00:49:53:95:4d:48:fb:
5c:8c:e1:b1:f4:7c:35:3e:82:93:fb:be:a9:68:4a:
32:ad:99:be:ca:43:0f:1f:ca:ae:44:fd:c5:1e:ed:
32:d0:b6:51:42:ba:09:63:54:c8:ef:6c:8c:8e:40:
b5:77:9e:86:54:f2:fe:38:bb:e6:a9:63:b9:a8:ef:
22:12:72:eb:61:41:a0:8c:f7:96:8f:ed:2d:ec:70:
e3:52:22:2d:d2:22:a6:95:33:a4:f3:f8:fb:e6:fc:
25:31:0b:f0:1b:3e:96:22:77:33:0a:b5:90:c8:81:
08:a2:81:16:4e:fe:aa:af:07:34:00:68:e8:b1:4e:
ea:a4:a3:d2:0c:62:1f:a5:e1:e6:bc:1d:2a:26:7a:
4f:50:ec:65:67:6b:31:14:5f:13:45:ce:57:d3:e4:
9c:3e:b6:7e:1c:48:21:5d:fa:4b:6d:04:27:53:f8:
09:85:32:b2:9c:6b:3f:bc:aa:41:e4:6e:87:37:e8:
7b:72:3a:e6:ae:06:ba:8b:2e:d5:c7:01:95:f1:fd:
cf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:42:B5:8F:09:6A:AC:A9:FB:0C:A6:85:7A:02:5B:09:D6:F8:8D:0C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/26a6e950-ddb7-4842-80db-ff143891e9b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.29.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:31:b4:c7:1f:95:5f:68:e6:01:9c:49:03:1a:d0:43:f3:80:
b8:f5:c1:eb:a4:71:ae:d1:87:1b:ce:0f:16:0e:01:f4:48:c9:
b7:b9:a7:a8:b3:f0:b9:83:cb:23:d0:d3:5a:0e:1a:35:21:94:
e5:29:9c:e9:54:56:71:bb:05:da:03:c8:97:ef:ba:77:0f:77:
db:99:c6:f2:aa:17:59:f7:dc:e8:1a:d6:a0:9e:f6:57:a1:2b:
5d:4f:93:66:4a:25:fc:e2:44:bb:78:4d:04:df:6a:89:ce:72:
cb:1c:0c:39:02:88:b8:6d:d1:2d:9a:1b:0d:aa:04:fe:c7:11:
05:38:37:20:da:17:2d:ba:fb:25:db:3d:fd:9d:81:0f:92:42:
bf:33:c9:90:01:f1:48:d5:18:81:7d:8e:54:f4:5a:99:f4:36:
8b:c0:eb:54:f6:3b:48:51:a4:28:96:40:61:73:d6:ed:45:27:
94:4c:85:88:4c:0f:bc:08:ff:06:df:ab:0e:61:4d:ce:57:52:
a1:74:c1:48:50:06:44:68:8f:6f:10:da:56:27:e6:d6:11:7a:
7a:e2:c6:e7:b4:8f:9e:e6:43:ad:74:02:df:b1:3b:a7:61:1a:
3c:fa:be:41:ba:55:58:f2:c5:18:6b:ed:81:8c:89:77:63:72:
2e:ad:44:d0
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUDfMJVTA0rpUI+XqRm4wucDadXTYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMjEzMDAwMDAwWhcNMjUwMTE3MjM1OTU5
WjB6MUkwRwYDVQQFE0AyMDkyNWI4NzdhMjJkZmU4NGYwOGM0ODlkMzM3Yzc4OWYy
YzYwMTA0ZjEyMjFlZjlkMmY3N2NjZmE5NTBiY2ZhMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqaMvdt1IADBhRmLis9ZU4+M8TQMrZSWi/yhlz+dno0mSo
HzgnePEiRsBqNZJIk5DoFOIyAElTlU1I+1yM4bH0fDU+gpP7vqloSjKtmb7KQw8f
yq5E/cUe7TLQtlFCugljVMjvbIyOQLV3noZU8v44u+apY7mo7yIScuthQaCM95aP
7S3scONSIi3SIqaVM6Tz+Pvm/CUxC/AbPpYidzMKtZDIgQiigRZO/qqvBzQAaOix
Tuqko9IMYh+l4ea8HSomek9Q7GVnazEUXxNFzlfT5Jw+tn4cSCFd+kttBCdT+AmF
MrKcaz+8qkHkboc36HtyOuauBrqLLtXHAZXx/c/JAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUY0K1jwlqrKn7DKaFegJbCdb4jQwwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzI2YTZlOTUwLWRkYjctNDg0Mi04MGRiLWZmMTQzODkxZTliMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA0HTANBgkqhkiG9w0BAQsFAAOCAQEAgDG0xx+VX2jmAZxJAxrQQ/OAuPXB
66RxrtGHG84PFg4B9EjJt7mnqLPwuYPLI9DTWg4aNSGU5Smc6VRWcbsF2gPIl++6
dw9325nG8qoXWffc6BrWoJ72V6ErXU+TZkol/OJEu3hNBN9qic5yyxwMOQKIuG3R
LZobDaoE/scRBTg3INoXLbr7Jds9/Z2BD5JCvzPJkAHxSNUYgX2OVPRamfQ2i8Dr
VPY7SFGkKJZAYXPW7UUnlEyFiEwPvAj/Bt+rDmFNzldSoXTBSFAGRGiPbxDaVifm
1hF6euLG57SPnuZDrXQC37E7p2EaPPq+QbpVWPLFGGvtgYyJd2NyLq1E0A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:41 2025 by rpki-client