Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/38bda77c-08e3-44e0-8493-2d7102a8eecb.roa
File: 38bda77c-08e3-44e0-8493-2d7102a8eecb.roa (raw, json)
Hash identifier: lLYTy4cx1azcEn89Asv3gKk48FmqM6wJveYbhl0IblI=
Subject key identifier: 8D:5B:0E:66:7E:DD:77:EB:FC:EF:D5:A8:8C:A5:2D:31:4C:E4:68:F7
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 235B1BF98F2195F05AE90405550A1C42F9B15004
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/38bda77c-08e3-44e0-8493-2d7102a8eecb.roa
Signing time: Mon 17 Mar 2025 15:10:49 +0000
ROA not before: Mon 17 Mar 2025 15:10:49 +0000
ROA not after: Mon 21 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.181.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:5b:1b:f9:8f:21:95:f0:5a:e9:04:05:55:0a:1c:42:f9:b1:50:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 17 15:10:49 2025 GMT
Not After : Apr 21 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9b:29:10:f4:31:28:86:7b:56:f0:6d:7f:c6:
88:99:c8:56:f8:a4:0a:6e:73:1b:38:c9:00:5f:4e:
71:3f:d2:49:37:44:1f:5e:82:49:9a:b4:e4:c5:ad:
66:98:0b:95:94:86:d1:72:38:2b:62:4b:88:fb:88:
ec:7b:2c:71:df:23:94:61:56:fc:01:13:5f:b0:bb:
48:ed:3f:20:fc:a4:e3:ef:3a:69:8d:3b:ad:7e:0c:
27:4e:bd:91:78:ac:41:0b:53:61:f8:84:c6:cb:41:
f7:6d:52:0d:19:1e:65:c7:45:10:44:ea:b9:0e:a1:
04:52:c8:c4:20:56:7a:26:68:ac:ad:82:57:da:c9:
76:84:d9:e7:4d:8a:7b:21:f8:89:02:93:c9:17:d9:
50:38:28:8c:41:77:c3:4b:8c:80:bd:96:ca:dd:36:
85:2e:2c:cf:8a:0f:06:0c:c4:12:db:6e:98:f6:08:
08:4c:d1:76:5c:e6:91:3e:da:f0:17:51:d5:7d:99:
f9:7c:c1:54:22:d7:a7:62:44:2a:1e:c0:a2:25:6c:
a4:4d:54:5e:08:6a:53:ce:01:d7:2d:d2:36:ae:39:
33:33:9b:b8:99:ce:25:f2:6d:83:83:e7:93:93:8e:
37:65:5e:d0:53:79:e1:5e:46:f5:48:61:ac:b5:78:
51:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5B:0E:66:7E:DD:77:EB:FC:EF:D5:A8:8C:A5:2D:31:4C:E4:68:F7
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/38bda77c-08e3-44e0-8493-2d7102a8eecb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.181.100.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:90:27:9d:1e:12:1e:b7:84:94:be:6d:aa:6a:b6:43:7b:94:
c4:72:90:61:21:fc:22:59:84:87:bf:81:a3:1d:96:23:50:71:
17:c2:e4:ee:66:d9:0d:7b:80:36:d2:35:c0:62:74:d3:ea:17:
78:de:62:10:7e:57:a3:e0:1d:61:87:34:7d:da:ba:83:a0:dc:
e9:41:20:79:d6:36:73:0a:51:06:6b:99:1d:da:fd:0f:17:57:
ab:5c:d8:38:90:37:29:b8:3b:3b:6b:66:e1:16:1a:bf:e0:29:
c4:c2:81:c4:6a:8f:48:30:ee:56:50:a4:7a:ed:6c:00:1e:6a:
af:07:78:f5:26:2e:b7:93:48:50:88:02:f0:bf:84:ef:24:d1:
98:26:58:1a:29:82:8d:a4:65:b1:01:3f:c5:44:e1:66:9a:d4:
38:b0:12:4c:94:c8:64:b5:fc:35:f3:92:12:69:0d:0f:bd:f6:
c3:05:49:49:2b:da:0a:f5:7c:bb:f0:e8:cb:39:26:ac:0a:18:
fb:0a:81:ea:22:1b:83:1e:6e:27:b3:67:da:cb:29:04:bf:47:
68:a3:aa:6e:b9:db:bd:15:d3:29:4b:a0:e5:c3:97:b9:8f:79:
9a:b3:d5:63:8f:f3:1e:3d:ba:c3:c1:b3:0f:7b:82:90:4e:9e:
82:d6:28:e6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUI1sb+Y8hlfBa6QQFVQocQvmxUAQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzE3MTUxMDQ5WhcNMjUwNDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A4ODQwNTllMTViOTRjMzNmNjgwNTk4MzJhZDY0ZWYwM2Yw
MGZkMDU1NzlkOGY2OTY4NTRlZjAyNjViMTFmN2ZhMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNmykQ9DEohntW8G1/xoiZyFb4pApucxs4yQBfTnE/0kk3
RB9egkmatOTFrWaYC5WUhtFyOCtiS4j7iOx7LHHfI5RhVvwBE1+wu0jtPyD8pOPv
OmmNO61+DCdOvZF4rEELU2H4hMbLQfdtUg0ZHmXHRRBE6rkOoQRSyMQgVnomaKyt
glfayXaE2edNinsh+IkCk8kX2VA4KIxBd8NLjIC9lsrdNoUuLM+KDwYMxBLbbpj2
CAhM0XZc5pE+2vAXUdV9mfl8wVQi16diRCoewKIlbKRNVF4IalPOAdct0jauOTMz
m7iZziXybYOD55OTjjdlXtBTeeFeRvVIYay1eFEjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUjVsOZn7dd+v879WojKUtMUzkaPcwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzM4YmRhNzdjLTA4ZTMtNDRlMC04NDkzLTJkNzEwMmE4ZWVjYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIPtWQwDQYJKoZIhvcNAQELBQADggEBAGuQJ50eEh63hJS+bapqtkN7lMRy
kGEh/CJZhIe/gaMdliNQcRfC5O5m2Q17gDbSNcBidNPqF3jeYhB+V6PgHWGHNH3a
uoOg3OlBIHnWNnMKUQZrmR3a/Q8XV6tc2DiQNym4OztrZuEWGr/gKcTCgcRqj0gw
7lZQpHrtbAAeaq8HePUmLreTSFCIAvC/hO8k0ZgmWBopgo2kZbEBP8VE4Waa1Diw
EkyUyGS1/DXzkhJpDQ+99sMFSUkr2gr1fLvw6Ms5JqwKGPsKgeoiG4MebiezZ9rL
KQS/R2ijqm65270V0ylLoOXDl7mPeZqz1WOP8x49usPBsw97gpBOnoLWKOY=
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:21:57 2025 by rpki-client