Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3143fd2f-755a-4b22-92e1-ca5ac33889d6.roa
File: 3143fd2f-755a-4b22-92e1-ca5ac33889d6.roa (raw, json)
Hash identifier: /TPJ6Jimze6pin11H0SV7YctylS70Fi5IJe3YGjK1yw=
Subject key identifier: 42:35:4A:27:F5:F7:4C:31:E6:E2:0E:8F:5A:A5:9C:6D:7F:55:12:5E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7AD897F4F5E26F7752171B3ED933FD842A6F59DF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3143fd2f-755a-4b22-92e1-ca5ac33889d6.roa
Signing time: Wed 05 Mar 2025 00:40:19 +0000
ROA not before: Wed 05 Mar 2025 00:40:19 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.12.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:d8:97:f4:f5:e2:6f:77:52:17:1b:3e:d9:33:fd:84:2a:6f:59:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 5 00:40:19 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d5:74:5c:66:60:bf:03:29:89:23:3c:5f:5d:
7c:35:a8:4b:2a:c8:7e:44:e1:48:30:90:8a:08:cf:
7a:ad:e8:a9:79:b0:4b:10:45:2f:59:18:0b:d3:39:
af:c2:de:5c:fd:33:2a:6a:06:42:de:36:2b:b8:af:
02:20:b0:d5:73:d7:46:82:23:84:ee:c2:b7:22:a6:
6d:bc:00:5a:dc:b9:66:18:7e:9a:8a:99:14:d5:2c:
19:d8:a2:3f:26:06:fd:53:0e:33:4f:5d:a7:03:1b:
fd:18:e9:bb:01:dd:04:de:14:c3:fb:d5:53:3c:94:
0c:a4:70:92:25:30:2a:1b:19:b4:4a:5a:f2:e8:f2:
4c:8c:65:ee:03:3e:bd:04:27:8c:37:03:5c:0e:9d:
9a:89:8e:31:bc:bf:4f:6d:fc:25:85:d8:75:98:55:
e3:43:83:a6:e2:a0:f3:77:57:c1:d4:0d:5f:63:c1:
79:f2:0b:77:f3:af:83:96:52:52:81:15:c8:01:bc:
7e:f9:60:a6:07:e7:f5:91:e1:04:bb:3e:06:5e:7d:
1c:62:d0:62:b9:ce:06:7c:15:53:16:01:f7:3f:4b:
a7:4c:93:1c:7c:13:7b:3d:8b:88:d5:87:fc:bf:91:
87:75:d8:da:3f:66:83:4f:19:a9:08:d8:c0:a4:50:
74:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:35:4A:27:F5:F7:4C:31:E6:E2:0E:8F:5A:A5:9C:6D:7F:55:12:5E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3143fd2f-755a-4b22-92e1-ca5ac33889d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.12.0.0/16
Signature Algorithm: sha256WithRSAEncryption
12:df:c8:2a:fd:ee:86:61:6d:70:be:70:91:ce:a8:fa:0f:8d:
36:54:08:7f:ac:37:c1:11:6e:0b:7b:38:24:6f:b5:8c:4b:b9:
da:bd:4c:7c:e9:c6:c8:84:ad:0e:ae:82:9a:1b:8a:a7:0a:df:
40:aa:c4:c8:18:62:7a:9e:46:ef:f1:ac:fa:38:91:78:d3:47:
65:cc:f8:23:51:fc:53:4c:f4:9e:02:25:91:d4:68:9f:3b:f3:
03:03:1e:b3:73:fc:73:d1:af:55:7e:6f:94:24:19:e5:2d:c0:
10:f5:6b:75:9e:e1:8c:71:66:27:cc:53:4d:e4:8d:1a:71:29:
10:5f:fd:9c:3b:e4:00:37:d9:2d:7f:18:f6:ac:2e:31:52:3f:
19:53:5e:14:ce:f6:5f:55:3c:f8:0b:fc:e9:14:44:e1:0f:ef:
cb:18:50:9f:08:37:2e:a8:50:1a:ea:ed:96:e1:ef:32:21:c0:
0c:63:9a:ed:76:73:b6:98:45:e9:dc:89:09:32:d8:f3:98:16:
9e:8a:f1:67:ae:25:98:8c:19:0a:9c:a6:0d:17:fe:0e:76:f9:
81:f1:5e:a2:aa:27:5b:48:0e:d5:74:c9:71:82:9f:67:ac:9c:
20:99:e5:31:57:a6:f4:0c:fc:d4:c5:48:ea:c0:bb:1b:12:72:
52:27:a5:5f
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUetiX9PXib3dSFxs+2TP9hCpvWd8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzA1MDA0MDE5WhcNMjUwNDA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A0ODhiNTkyYWU1OTYwODE5N2MxNWY4N2Q4YTVjMzE2NGQ2
NGEyMjkyMWNiYmIyMzVhNzMxOTE0MzEzY2Y5ZDQzMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCt1XRcZmC/AymJIzxfXXw1qEsqyH5E4UgwkIoIz3qt6Kl5
sEsQRS9ZGAvTOa/C3lz9MypqBkLeNiu4rwIgsNVz10aCI4Tuwrcipm28AFrcuWYY
fpqKmRTVLBnYoj8mBv1TDjNPXacDG/0Y6bsB3QTeFMP71VM8lAykcJIlMCobGbRK
WvLo8kyMZe4DPr0EJ4w3A1wOnZqJjjG8v09t/CWF2HWYVeNDg6bioPN3V8HUDV9j
wXnyC3fzr4OWUlKBFcgBvH75YKYH5/WR4QS7PgZefRxi0GK5zgZ8FVMWAfc/S6dM
kxx8E3s9i4jVh/y/kYd12No/ZoNPGakI2MCkUHSPAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUQjVKJ/X3TDHm4g6PWqWcbX9VEl4wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzMxNDNmZDJmLTc1NWEtNGIyMi05MmUxLWNhNWFjMzM4ODlkNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCIDDANBgkqhkiG9w0BAQsFAAOCAQEAEt/IKv3uhmFtcL5wkc6o+g+NNlQI
f6w3wRFuC3s4JG+1jEu52r1MfOnGyIStDq6CmhuKpwrfQKrEyBhiep5G7/Gs+jiR
eNNHZcz4I1H8U0z0ngIlkdRonzvzAwMes3P8c9GvVX5vlCQZ5S3AEPVrdZ7hjHFm
J8xTTeSNGnEpEF/9nDvkADfZLX8Y9qwuMVI/GVNeFM72X1U8+Av86RRE4Q/vyxhQ
nwg3LqhQGurtluHvMiHADGOa7XZztphF6dyJCTLY85gWnorxZ64lmIwZCpymDRf+
Dnb5gfFeoqonW0gO1XTJcYKfZ6ycIJnlMVem9Az81MVI6sC7GxJyUielXw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:14 2025 by rpki-client