Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90fae2e5-c8bc-47de-87ae-797d871d78ab.roa
File: 90fae2e5-c8bc-47de-87ae-797d871d78ab.roa (raw, json)
Hash identifier: ph6EvDEM6HluydppemSaCbPdB5fyalHswFHyxkbwe70=
Subject key identifier: 8D:B9:5A:3B:52:6C:52:74:6C:EA:43:84:75:6E:98:2A:F4:66:28:3A
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6E43BE5E5E7051A509B8DF9E4FCC64273BC24C6A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90fae2e5-c8bc-47de-87ae-797d871d78ab.roa
Signing time: Tue 04 Mar 2025 18:40:13 +0000
ROA not before: Tue 04 Mar 2025 18:40:13 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.181.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:43:be:5e:5e:70:51:a5:09:b8:df:9e:4f:cc:64:27:3b:c2:4c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 4 18:40:13 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c3:e2:27:b8:38:ea:b8:4c:e7:4b:da:f4:e0:
61:a0:e9:36:61:5f:91:d0:20:39:f0:55:05:a1:4a:
58:60:3d:c3:bc:9b:e3:90:8e:f7:c5:46:da:f9:1f:
c7:8b:5c:c7:2d:f7:36:c0:f6:3c:30:67:84:9a:d4:
19:08:5f:77:ea:45:ae:c4:0f:40:c6:15:09:8d:96:
e4:66:60:56:33:b7:5a:eb:09:3e:f7:b2:bd:6e:36:
a2:f6:ff:5d:73:1d:e4:c4:f6:fd:c6:eb:f2:e7:a7:
b5:b3:8f:00:27:5e:a5:36:ed:70:f5:84:f0:df:01:
bc:11:14:88:42:74:ee:51:ab:14:96:39:de:87:a3:
ae:2d:0c:28:a8:65:89:10:af:ab:88:51:87:47:98:
11:aa:9a:0a:9a:d8:9a:bc:22:21:bb:eb:cb:0a:fc:
fb:7d:b4:6a:b6:04:72:74:f4:ee:52:09:b3:c5:a5:
8c:63:c7:f2:a5:25:bc:40:75:4c:48:80:e1:10:2d:
00:9f:67:88:63:9f:07:b6:0a:85:31:86:3b:17:62:
bf:63:8a:fd:e9:d2:b3:fd:c4:13:1e:de:cf:7b:9c:
ea:b4:55:fe:5d:7c:47:63:7b:f8:55:18:fb:ad:0b:
b6:19:8d:27:83:3e:b0:7d:e6:29:07:4b:c2:b1:13:
f9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B9:5A:3B:52:6C:52:74:6C:EA:43:84:75:6E:98:2A:F4:66:28:3A
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90fae2e5-c8bc-47de-87ae-797d871d78ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.181.248.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ff:31:d3:23:4c:bf:3a:67:3c:c7:0c:3b:e9:45:39:51:a6:
9c:37:02:f0:4e:a0:d7:77:a5:ae:30:99:66:81:24:c9:fa:80:
3b:3c:f2:5d:18:32:40:9d:19:25:b9:fa:0d:95:dd:52:4b:02:
0a:bb:7b:7e:b9:ce:d4:ee:71:f3:e9:76:19:5d:e7:06:fc:18:
9e:a0:2e:25:36:a4:aa:de:de:47:27:7d:fd:80:67:4e:04:a7:
17:d4:3a:cc:68:a0:ec:e2:1a:b3:02:61:ed:23:7d:47:5b:90:
b2:aa:0d:e9:50:d7:50:8e:23:39:24:01:bb:93:e0:a7:56:3d:
5a:9e:1d:6c:28:ee:19:72:33:b9:c3:e5:86:b4:7a:f5:0b:12:
29:19:cd:06:71:d5:81:7a:66:47:51:f3:9f:14:80:dd:b5:28:
45:5a:f9:93:52:5c:13:5a:57:a0:5d:0a:98:62:7b:ff:79:a0:
19:44:51:5b:3b:2e:a6:56:5b:2e:17:c9:67:6f:11:66:c4:19:
1e:f9:29:26:b3:b2:31:ae:bc:2f:d4:20:2e:0b:28:01:ef:5a:
d7:f6:25:60:ff:1d:65:af:13:7c:dd:77:dc:4e:93:35:f6:66:
85:81:f3:f2:af:ec:fe:46:bf:34:78:cf:8a:39:76:15:7a:a3:
de:5b:56:1e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbkO+Xl5wUaUJuN+eT8xkJzvCTGowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzA0MTg0MDEzWhcNMjUwNDA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BiOThhN2E5ZDMzNWJkOTFhYTJiYWY3ZDE3MDhlMGFjOWI3
NmVlMzNhNzliNDgyY2FhM2RhY2E3OWQwNmY2N2Q1MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCWw+InuDjquEznS9r04GGg6TZhX5HQIDnwVQWhSlhgPcO8
m+OQjvfFRtr5H8eLXMct9zbA9jwwZ4Sa1BkIX3fqRa7ED0DGFQmNluRmYFYzt1rr
CT73sr1uNqL2/11zHeTE9v3G6/Lnp7WzjwAnXqU27XD1hPDfAbwRFIhCdO5RqxSW
Od6Ho64tDCioZYkQr6uIUYdHmBGqmgqa2Jq8IiG768sK/Pt9tGq2BHJ09O5SCbPF
pYxjx/KlJbxAdUxIgOEQLQCfZ4hjnwe2CoUxhjsXYr9jiv3p0rP9xBMe3s97nOq0
Vf5dfEdje/hVGPutC7YZjSeDPrB95ikHS8KxE/kpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUjblaO1JsUnRs6kOEdW6YKvRmKDowHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzkwZmFlMmU1LWM4YmMtNDdkZS04N2FlLTc5N2Q4NzFkNzhhYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAPtfgwDQYJKoZIhvcNAQELBQADggEBAGv/MdMjTL86ZzzHDDvpRTlRppw3
AvBOoNd3pa4wmWaBJMn6gDs88l0YMkCdGSW5+g2V3VJLAgq7e365ztTucfPpdhld
5wb8GJ6gLiU2pKre3kcnff2AZ04EpxfUOsxooOziGrMCYe0jfUdbkLKqDelQ11CO
IzkkAbuT4KdWPVqeHWwo7hlyM7nD5Ya0evULEikZzQZx1YF6ZkdR858UgN21KEVa
+ZNSXBNaV6BdCphie/95oBlEUVs7LqZWWy4XyWdvEWbEGR75KSazsjGuvC/UIC4L
KAHvWtf2JWD/HWWvE3zdd9xOkzX2ZoWB8/Kv7P5GvzR4z4o5dhV6o95bVh4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:10 2025 by rpki-client