Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7419f9fa-e6a9-4303-83fb-982e122c8638.roa
File: 7419f9fa-e6a9-4303-83fb-982e122c8638.roa (raw, json)
Hash identifier: +WudPxDrhbnHW4YLjiapdtOkpV9oJ97csvD+X9Z0cMA=
Subject key identifier: 34:25:5B:F5:52:D6:B9:54:7B:02:72:E0:31:6D:35:96:F0:67:96:F6
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 070D804BBF223E36DDB79A8AFD8BD45606C8267C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7419f9fa-e6a9-4303-83fb-982e122c8638.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 18.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:0d:80:4b:bf:22:3e:36:dd:b7:9a:8a:fd:8b:d4:56:06:c8:26:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:59:64:f4:24:7e:06:02:4f:0c:dc:c3:62:
03:07:02:23:f6:39:0a:7f:cd:b8:4c:83:ec:0d:b9:
c4:18:ed:28:92:db:7b:5a:ea:d8:29:de:1c:65:c1:
ff:64:9e:4d:4d:cc:29:8d:99:b0:a0:51:7f:1a:b4:
8a:79:f5:1d:0f:33:50:52:03:f1:c9:ae:88:1c:6e:
86:ea:97:0d:c3:dd:60:fe:89:41:62:f2:99:69:3f:
60:86:d9:9b:d9:f2:b9:3d:e6:7b:88:55:ce:61:44:
b9:d1:5c:78:10:38:b2:b5:21:dc:82:cc:fb:63:20:
59:64:d5:a6:eb:fe:6d:59:33:37:b3:df:24:95:9b:
42:40:24:71:a9:2c:e7:fb:5b:8c:d2:7b:96:dd:f4:
b5:78:0b:c3:90:4a:1f:fd:da:9c:98:9d:c4:fa:f7:
ba:64:c6:8c:f3:9d:2e:21:cb:4c:05:20:2f:3c:b3:
af:f5:76:e9:20:a0:4f:ca:df:ea:e8:e4:16:1c:7c:
1c:81:ff:ae:66:9c:a5:e9:cf:3f:69:8e:aa:8b:a2:
98:43:31:98:32:ad:7c:4d:f0:d6:de:6d:ca:da:a6:
e2:1c:5e:de:41:e9:09:3b:63:71:47:ab:da:5b:ca:
22:d5:bb:b1:b7:a1:7b:06:1b:28:8f:81:ec:0c:08:
73:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:25:5B:F5:52:D6:B9:54:7B:02:72:E0:31:6D:35:96:F0:67:96:F6
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7419f9fa-e6a9-4303-83fb-982e122c8638.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.130.0.0/16
Signature Algorithm: sha256WithRSAEncryption
60:a7:f2:81:63:db:c8:c4:6a:33:f5:20:4f:e1:dd:bc:08:03:
95:79:1d:da:d9:85:4b:c6:6a:b2:78:5d:b3:33:14:d4:60:e1:
58:fe:e1:12:d5:1d:a7:18:94:20:03:3f:8b:8d:1e:6b:ce:92:
99:29:7b:bc:fd:46:17:76:60:9f:c8:ae:83:8e:3f:03:77:df:
87:6b:5c:ba:c2:f1:fc:b5:8a:e9:0c:83:1e:60:c5:aa:1c:53:
81:68:5a:07:d9:76:03:19:93:3b:ea:9b:8c:e4:c7:00:28:00:
d4:bc:ee:ee:d2:88:b5:c7:16:85:32:ec:a9:14:87:cd:36:c6:
13:dd:34:01:e0:50:1b:82:80:d9:fd:62:37:76:59:6c:fb:ce:
a2:d3:57:55:84:c0:96:25:b5:ae:47:44:f3:a3:50:43:f8:6d:
a1:19:cf:b2:47:ac:1d:fc:a4:b4:2c:2d:ce:ff:5c:c9:a6:31:
36:f9:ef:5b:3e:6a:7d:5f:92:d4:a7:aa:73:fb:5c:80:52:b6:
b0:02:8c:b2:e7:69:3a:7c:a8:26:2b:ea:67:06:81:d7:6e:30:
4a:b4:0b:93:1d:c9:e8:e8:55:39:95:a4:87:18:a6:8e:c9:8c:
c4:60:72:61:7f:f0:66:29:3a:8a:3e:d9:e9:04:ce:44:cd:7e:
98:37:bf:c6
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUBw2AS78iPjbdt5qK/YvUVgbIJnwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMjE2MDAwMDAwWhcNMjUwMTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BlZmI4YzBmZDZlMjc4ZjVmZmEzNzA3NDA3NWFmYTdiM2Yy
NWQ0ZDdiM2U3YzRmOTU5NTNiZmM1MjRmYjE0NGU4MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8b1lk9CR+BgJPDNzDYgMHAiP2OQp/zbhMg+wNucQY7SiS
23ta6tgp3hxlwf9knk1NzCmNmbCgUX8atIp59R0PM1BSA/HJrogcbobqlw3D3WD+
iUFi8plpP2CG2ZvZ8rk95nuIVc5hRLnRXHgQOLK1IdyCzPtjIFlk1abr/m1ZMzez
3ySVm0JAJHGpLOf7W4zSe5bd9LV4C8OQSh/92pyYncT697pkxozznS4hy0wFIC88
s6/1dukgoE/K3+ro5BYcfByB/65mnKXpzz9pjqqLophDMZgyrXxN8NbebcrapuIc
Xt5B6Qk7Y3FHq9pbyiLVu7G3oXsGGyiPgewMCHOfAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUNCVb9VLWuVR7AnLgMW01lvBnlvYwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzc0MTlmOWZhLWU2YTktNDMwMy04M2ZiLTk4MmUxMjJjODYzOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwASgjANBgkqhkiG9w0BAQsFAAOCAQEAYKfygWPbyMRqM/UgT+HdvAgDlXkd
2tmFS8ZqsnhdszMU1GDhWP7hEtUdpxiUIAM/i40ea86SmSl7vP1GF3Zgn8iug44/
A3ffh2tcusLx/LWK6QyDHmDFqhxTgWhaB9l2AxmTO+qbjOTHACgA1Lzu7tKItccW
hTLsqRSHzTbGE900AeBQG4KA2f1iN3ZZbPvOotNXVYTAliW1rkdE86NQQ/htoRnP
skesHfyktCwtzv9cyaYxNvnvWz5qfV+S1Keqc/tcgFK2sAKMsudpOnyoJivqZwaB
124wSrQLkx3J6OhVOZWkhximjsmMxGByYX/wZik6ij7Z6QTORM1+mDe/xg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:04:18 2025 by rpki-client