Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c1ffdb9-ee15-4aea-9ed3-f73180b2ec9e.roa
File: 2c1ffdb9-ee15-4aea-9ed3-f73180b2ec9e.roa (raw, json)
Hash identifier: 0Oi1eK50v6SavjfBiqa5j4C9Th0YLYbEyTxP6tTKk10=
Subject key identifier: 14:E8:B5:D8:92:FB:F6:AE:40:22:75:5D:F3:CF:84:1A:8B:80:3D:FF
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4D46C097135EA36EE12A907F2C31CC5F5CD1E715
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c1ffdb9-ee15-4aea-9ed3-f73180b2ec9e.roa
Signing time: Fri 20 Dec 2024 00:00:00 +0000
ROA not before: Fri 20 Dec 2024 00:00:00 +0000
ROA not after: Fri 24 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.221.148.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:46:c0:97:13:5e:a3:6e:e1:2a:90:7f:2c:31:cc:5f:5c:d1:e7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 20 00:00:00 2024 GMT
Not After : Jan 24 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c1:cc:32:11:87:e6:df:92:c0:2b:c0:da:2e:
03:b1:fa:e4:c5:02:75:92:72:1e:2d:cb:3a:5b:7c:
74:f2:97:ed:90:52:bf:f0:09:03:7a:0b:12:62:2a:
83:eb:7b:15:c0:6b:7c:05:7f:d1:29:26:e0:81:89:
b0:44:01:6a:10:da:04:2a:ab:f4:1c:03:28:5b:fb:
d2:e5:c5:8b:68:48:fd:67:b0:71:89:c8:ed:37:2d:
fc:c7:c4:17:2d:37:17:cf:a0:1e:c9:99:33:b7:0c:
6f:f6:84:0b:bb:36:4c:ea:f9:e2:8f:34:cf:39:96:
6f:f1:b0:a4:fa:5b:6f:7a:79:c6:b1:de:bb:0c:66:
8e:12:7f:02:49:bd:8a:b9:29:a4:7d:a4:d3:2b:8c:
69:f9:7d:37:64:09:11:ad:0b:a6:09:2b:17:b6:66:
df:80:de:b2:ff:c0:9e:1a:68:6b:3b:c2:16:07:6d:
48:fe:4b:ec:d5:bc:34:af:de:36:0c:01:fb:12:76:
3e:ec:e9:04:b2:7f:7d:42:94:1e:62:f6:d8:21:8a:
53:27:03:f2:6a:1e:c8:e1:4e:e0:b1:60:4d:ad:f1:
41:7e:fe:d3:59:27:18:b2:f0:e3:23:9f:27:45:25:
c5:9d:d9:16:b6:16:90:b1:4c:c9:2d:83:83:9f:df:
b3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E8:B5:D8:92:FB:F6:AE:40:22:75:5D:F3:CF:84:1A:8B:80:3D:FF
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c1ffdb9-ee15-4aea-9ed3-f73180b2ec9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.221.148.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:13:57:61:2c:39:6f:88:18:fb:67:ad:0a:00:d4:a8:d5:df:
8f:c3:10:2f:ba:f9:4c:d4:e6:74:cf:3f:7b:9d:a7:b4:4d:c1:
da:5e:33:4d:5b:77:40:db:85:4c:d3:cc:7e:c7:09:1f:5c:04:
55:87:2b:c2:7b:d8:4d:51:72:99:f1:a3:0e:f5:d6:0c:af:5c:
a5:13:ac:09:de:90:8a:8c:5b:06:48:83:fe:1d:44:33:1e:f4:
9a:2d:85:ba:e0:18:e9:d0:61:2a:9e:80:81:ab:18:b9:86:28:
87:94:d1:94:c6:d1:76:4b:86:39:7d:37:00:bf:ce:ae:c7:61:
95:55:2a:fb:c4:08:65:e5:12:d3:96:85:b3:16:a4:e9:df:73:
3d:b0:c0:bd:26:44:50:ba:a2:46:58:27:e5:0a:e4:5a:40:77:
86:8b:b3:c6:f4:a1:8e:00:1c:9e:1c:ec:f3:ac:70:4b:fc:e5:
19:de:48:79:cc:1c:61:52:40:48:52:b8:ec:e8:80:0d:fb:5b:
38:ec:54:00:27:2e:3c:1d:e6:7a:7e:e6:c3:97:11:c0:24:19:
67:c7:c3:cd:67:5e:f4:0a:87:28:8e:39:d4:a5:cc:4d:95:9d:
6b:a7:96:f0:f2:3a:b2:8f:85:5f:0d:24:a5:d8:27:e2:09:22:
af:e7:3a:39
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTUbAlxNeo27hKpB/LDHMX1zR5xUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMjIwMDAwMDAwWhcNMjUwMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A1YzFmM2E2YmUwOTNkZjczZWQyYmI4MGNjOGI2NjllYWIw
YWZlYzJkMTZkMmI5Y2FmYzE3NzlhNzJlZTBmY2E2MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzwcwyEYfm35LAK8DaLgOx+uTFAnWSch4tyzpbfHTyl+2Q
Ur/wCQN6CxJiKoPrexXAa3wFf9EpJuCBibBEAWoQ2gQqq/QcAyhb+9LlxYtoSP1n
sHGJyO03LfzHxBctNxfPoB7JmTO3DG/2hAu7Nkzq+eKPNM85lm/xsKT6W296ecax
3rsMZo4SfwJJvYq5KaR9pNMrjGn5fTdkCRGtC6YJKxe2Zt+A3rL/wJ4aaGs7whYH
bUj+S+zVvDSv3jYMAfsSdj7s6QSyf31ClB5i9tghilMnA/JqHsjhTuCxYE2t8UF+
/tNZJxiy8OMjnydFJcWd2Ra2FpCxTMktg4Of37MtAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUFOi12JL79q5AInVd88+EGouAPf8wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzJjMWZmZGI5LWVlMTUtNGFlYS05ZWQzLWY3MzE4MGIyZWM5ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEP3ZQwDQYJKoZIhvcNAQELBQADggEBABwTV2EsOW+IGPtnrQoA1KjV34/D
EC+6+UzU5nTPP3udp7RNwdpeM01bd0DbhUzTzH7HCR9cBFWHK8J72E1Rcpnxow71
1gyvXKUTrAnekIqMWwZIg/4dRDMe9JothbrgGOnQYSqegIGrGLmGKIeU0ZTG0XZL
hjl9NwC/zq7HYZVVKvvECGXlEtOWhbMWpOnfcz2wwL0mRFC6okZYJ+UK5FpAd4aL
s8b0oY4AHJ4c7POscEv85RneSHnMHGFSQEhSuOzogA37WzjsVAAnLjwd5np+5sOX
EcAkGWfHw81nXvQKhyiOOdSlzE2VnWunlvDyOrKPhV8NJKXYJ+IJIq/nOjk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:27 2025 by rpki-client