Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/80ed20b8-4e7f-4204-b845-7bc2315106c8.roa
File: 80ed20b8-4e7f-4204-b845-7bc2315106c8.roa (raw, json)
Hash identifier: KZfl5gZGx5NLCU3o1FL9YF8bJsa5hUo82HCRm4CYwic=
Subject key identifier: 8B:EB:24:AF:04:87:D2:F0:B0:3B:7D:0E:78:01:23:07:E6:54:1A:46
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6DE7F52650F1E357203EDAF27C1CE767C0742457
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/80ed20b8-4e7f-4204-b845-7bc2315106c8.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 136.19.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:e7:f5:26:50:f1:e3:57:20:3e:da:f2:7c:1c:e7:67:c0:74:24:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9d:56:4c:95:aa:25:bc:d1:b9:17:43:52:d7:
9f:2c:5d:c6:8e:84:d8:77:fb:14:7a:cd:48:22:56:
24:86:7c:d8:a7:cd:1f:3a:82:42:d7:32:aa:06:85:
fb:72:2f:22:54:3b:42:14:85:a8:23:a2:2c:21:0e:
c8:ab:eb:f9:13:e4:88:66:a6:70:31:3e:c2:b7:e7:
2c:db:c1:0a:52:67:e6:18:58:7a:1f:67:37:55:8c:
17:a4:63:e3:84:7a:ae:f6:e0:fe:1d:06:63:c5:bd:
45:ca:45:b7:da:fe:3f:a0:9c:29:f7:43:62:8b:64:
3e:0c:b7:f8:37:ff:e1:ac:fb:a8:00:3e:e1:17:b7:
b0:04:15:0f:5a:fa:d8:29:ff:e6:ad:8d:2d:09:ef:
ab:9f:5b:03:c5:c8:78:99:8b:86:58:61:fd:3a:db:
1b:c1:4f:d2:ea:b2:d3:b0:d7:08:ec:95:08:2d:56:
dd:57:c9:c3:26:b7:51:18:8c:47:8d:97:c6:73:82:
8e:09:24:f4:8d:2c:a7:22:d2:8f:e5:12:6b:ea:fa:
90:06:53:e1:a8:48:3d:2e:5f:3c:b3:35:b5:b8:28:
40:7a:b8:0d:90:3b:b8:36:f7:c1:34:9f:ed:db:40:
0b:4e:a6:2c:49:a0:91:2d:7f:41:8a:25:4a:ac:20:
85:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EB:24:AF:04:87:D2:F0:B0:3B:7D:0E:78:01:23:07:E6:54:1A:46
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/80ed20b8-4e7f-4204-b845-7bc2315106c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.19.0.0/16
Signature Algorithm: sha256WithRSAEncryption
30:70:0c:58:8d:64:0c:07:a5:86:14:62:54:ef:ca:29:a9:f1:
ea:0e:72:b0:0a:b6:1e:ab:f8:34:8e:fc:78:ac:a4:b2:ac:ac:
a7:e8:92:0b:ab:00:0f:e2:18:ce:e2:d0:9f:d1:f0:b7:2c:71:
1a:77:69:8a:1e:32:4b:e4:74:00:bd:f5:12:73:a5:c2:72:a5:
7e:f9:9f:04:11:d1:73:5a:69:ab:2f:0c:32:ce:91:0b:39:0e:
64:55:33:fe:57:52:f7:76:a2:71:b2:ce:d8:17:0e:e3:b0:1b:
04:0b:e6:af:90:db:25:6c:01:3a:cd:29:5d:68:80:b8:a4:58:
ce:51:e7:22:c6:76:f5:9b:53:11:c5:e0:38:1b:44:66:08:31:
df:dc:97:05:f7:65:bd:23:3f:2a:58:0d:3d:5b:b5:45:44:65:
60:3b:a4:95:84:aa:94:e8:9c:fd:06:b6:f5:ba:e3:d6:c5:4a:
64:35:f6:9e:d3:52:51:85:a3:12:fc:44:74:ad:ac:00:07:65:
26:d6:eb:77:07:d4:2b:da:f1:8b:bb:14:90:ec:98:d8:05:cd:
da:da:96:9c:3b:15:5e:2f:32:a7:4d:84:0f:b9:6b:0e:0f:85:
d1:95:71:78:31:0e:e7:56:f6:d3:5d:a0:53:84:de:14:da:91:
dd:c4:51:7b
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUbef1JlDx41cgPtryfBznZ8B0JFcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTE0MDAwMDAwWhcNMjUwMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AxNjU3NTEyNGY5MTIyMWUxYzBhYWFmZjI4ZDM5ODhkM2Fl
NjEzNTA1ZjgxZjFhMTJmYTQ0NDkzNmY5ZGI2YjkyMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDXnVZMlaolvNG5F0NS158sXcaOhNh3+xR6zUgiViSGfNin
zR86gkLXMqoGhftyLyJUO0IUhagjoiwhDsir6/kT5IhmpnAxPsK35yzbwQpSZ+YY
WHofZzdVjBekY+OEeq724P4dBmPFvUXKRbfa/j+gnCn3Q2KLZD4Mt/g3/+Gs+6gA
PuEXt7AEFQ9a+tgp/+atjS0J76ufWwPFyHiZi4ZYYf062xvBT9LqstOw1wjslQgt
Vt1XycMmt1EYjEeNl8Zzgo4JJPSNLKci0o/lEmvq+pAGU+GoSD0uXzyzNbW4KEB6
uA2QO7g298E0n+3bQAtOpixJoJEtf0GKJUqsIIV/AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUi+skrwSH0vCwO30OeAEjB+ZUGkYwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzgwZWQyMGI4LTRlN2YtNDIwNC1iODQ1LTdiYzIzMTUxMDZjOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCIEzANBgkqhkiG9w0BAQsFAAOCAQEAMHAMWI1kDAelhhRiVO/KKanx6g5y
sAq2Hqv4NI78eKyksqysp+iSC6sAD+IYzuLQn9HwtyxxGndpih4yS+R0AL31EnOl
wnKlfvmfBBHRc1ppqy8MMs6RCzkOZFUz/ldS93aicbLO2BcO47AbBAvmr5DbJWwB
Os0pXWiAuKRYzlHnIsZ29ZtTEcXgOBtEZggx39yXBfdlvSM/KlgNPVu1RURlYDuk
lYSqlOic/Qa29brj1sVKZDX2ntNSUYWjEvxEdK2sAAdlJtbrdwfUK9rxi7sUkOyY
2AXN2tqWnDsVXi8yp02ED7lrDg+F0ZVxeDEO51b2012gU4TeFNqR3cRRew==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:09:16 2025 by rpki-client