Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7cffaece-f331-4e9b-84a6-dc84bad79837.roa
File: 7cffaece-f331-4e9b-84a6-dc84bad79837.roa (raw, json)
Hash identifier: D+KtVequATdznLZ5hazOJLaiDzGGBdE4Wdqz7hQA/Rg=
Subject key identifier: BD:0E:6E:77:01:BB:CA:40:0F:35:1C:31:36:75:5A:65:E3:8A:D8:CC
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 342EB044767FA14B55A76488D709926C65C3EF0A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7cffaece-f331-4e9b-84a6-dc84bad79837.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 13.248.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:2e:b0:44:76:7f:a1:4b:55:a7:64:88:d7:09:92:6c:65:c3:ef:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5c:75:8d:b0:75:99:de:22:99:5e:2f:4d:8d:
d2:c8:49:b3:94:f9:14:2f:5e:96:bb:ff:77:99:0f:
c4:a0:84:12:02:1c:b7:f1:9d:6a:a7:eb:00:a9:7d:
1d:a3:6f:72:0b:d7:61:80:a1:bd:21:6d:35:ec:00:
a1:91:7a:f1:fd:b2:26:e7:0c:90:54:d0:27:38:a7:
d2:08:00:60:91:99:bc:da:bc:d0:44:35:4e:18:2a:
e6:4e:e7:26:3b:5d:70:5f:6e:25:09:32:cb:84:07:
3a:63:a6:5f:05:fc:26:86:13:32:f5:00:96:a1:cb:
d7:46:5d:cc:fd:b9:dc:6d:f8:b8:59:85:31:45:9b:
6b:8e:ba:38:a7:06:10:2e:ba:3b:5c:60:91:5d:b8:
c0:d2:3b:61:19:d2:73:23:bd:14:99:f2:0b:fd:90:
04:ea:e1:91:8a:fa:cd:b3:7a:01:90:e3:2b:a5:bc:
fb:1f:00:db:ef:53:8d:09:c3:e7:34:19:34:64:c8:
ed:bc:c7:84:25:ee:25:0a:93:45:f7:1b:9d:63:51:
34:fd:13:cd:7b:49:02:80:27:ee:a2:7a:e7:01:85:
7d:26:cf:2f:49:a7:fa:36:2c:c7:9c:bd:62:fe:f4:
7c:43:4e:e4:43:1c:d2:e4:d1:4a:5d:8d:60:81:c0:
bb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0E:6E:77:01:BB:CA:40:0F:35:1C:31:36:75:5A:65:E3:8A:D8:CC
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7cffaece-f331-4e9b-84a6-dc84bad79837.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.248.107.0/24
Signature Algorithm: sha256WithRSAEncryption
98:99:96:44:ae:b3:42:67:f8:fc:f7:79:fd:6b:e3:b0:0d:ef:
7c:a2:00:44:90:22:e6:93:4a:69:63:c6:1d:18:68:16:55:99:
54:9b:03:31:ee:e5:e0:53:ca:f6:aa:35:76:1e:d7:04:13:3f:
30:3b:a0:e5:58:b9:1b:aa:8d:ae:88:9d:02:28:00:48:09:c2:
6c:e9:0f:73:73:d9:57:23:3a:81:aa:93:d1:75:98:e3:5f:b2:
42:03:55:43:82:c5:f9:15:52:0b:b3:1e:38:41:f5:eb:f6:c3:
7c:c2:90:03:5c:94:13:e1:8c:f4:cd:4e:2b:3f:40:d2:16:82:
64:23:b7:69:99:df:56:f0:96:3e:3b:26:00:ba:c2:8a:90:84:
16:39:1e:c6:0d:90:c8:fb:ab:ff:8e:ef:c7:64:bb:35:b2:70:
33:48:bb:97:16:fd:df:4f:1f:d4:56:86:ed:4c:d5:07:bf:fc:
60:ef:8c:37:b2:37:34:4e:65:5a:70:94:8b:e6:b8:50:d5:d3:
2c:d0:3b:b8:db:87:1d:55:62:6e:d8:be:11:89:12:90:d6:ab:
80:2a:81:02:d4:89:63:24:bd:a3:97:86:58:7e:f7:e4:98:59:
86:a9:83:ff:76:c3:39:46:15:e2:b5:54:a2:d2:a5:1a:9f:2c:
5e:d5:b4:94
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNC6wRHZ/oUtVp2SI1wmSbGXD7wowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMjEwMDAwMDAwWhcNMjUwMTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BmMDRhOTNkZDVmZTY3MzhhYzZmYjJjYzhhYWVlMzRlYjNj
Mjc1MDZiZjAxMjRkYzU0YTY5OGJkM2UwN2Q4YTlhMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDaXHWNsHWZ3iKZXi9NjdLISbOU+RQvXpa7/3eZD8SghBIC
HLfxnWqn6wCpfR2jb3IL12GAob0hbTXsAKGRevH9sibnDJBU0Cc4p9IIAGCRmbza
vNBENU4YKuZO5yY7XXBfbiUJMsuEBzpjpl8F/CaGEzL1AJahy9dGXcz9udxt+LhZ
hTFFm2uOujinBhAuujtcYJFduMDSO2EZ0nMjvRSZ8gv9kATq4ZGK+s2zegGQ4yul
vPsfANvvU40Jw+c0GTRkyO28x4Ql7iUKk0X3G51jUTT9E817SQKAJ+6ieucBhX0m
zy9Jp/o2LMecvWL+9HxDTuRDHNLk0UpdjWCBwLtTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUvQ5udwG7ykAPNRwxNnVaZeOK2MwwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzdjZmZhZWNlLWYzMzEtNGU5Yi04NGE2LWRjODRiYWQ3OTgzNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAN+GswDQYJKoZIhvcNAQELBQADggEBAJiZlkSus0Jn+Pz3ef1r47AN73yi
AESQIuaTSmljxh0YaBZVmVSbAzHu5eBTyvaqNXYe1wQTPzA7oOVYuRuqja6InQIo
AEgJwmzpD3Nz2VcjOoGqk9F1mONfskIDVUOCxfkVUguzHjhB9ev2w3zCkANclBPh
jPTNTis/QNIWgmQjt2mZ31bwlj47JgC6woqQhBY5HsYNkMj7q/+O78dkuzWycDNI
u5cW/d9PH9RWhu1M1Qe//GDvjDeyNzROZVpwlIvmuFDV0yzQO7jbhx1VYm7YvhGJ
EpDWq4AqgQLUiWMkvaOXhlh+9+SYWYapg/92wzlGFeK1VKLSpRqfLF7VtJQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:09:22 2025 by rpki-client