Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a224cd7d-fde7-49b4-81a5-ab7d0d83f83b.roa
File: a224cd7d-fde7-49b4-81a5-ab7d0d83f83b.roa (raw, json)
Hash identifier: qhKrDBmkxvrx7/zblFNHLO0ysU/bQu68pAAQeeWiVAI=
Subject key identifier: BF:99:FE:25:C9:05:24:85:D9:3C:F9:14:84:DE:A6:69:72:2C:BC:04
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7B6EF9E1DA2A0E9746E2190C5CE2E1D7B91B8F23
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a224cd7d-fde7-49b4-81a5-ab7d0d83f83b.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 18.116.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:6e:f9:e1:da:2a:0e:97:46:e2:19:0c:5c:e2:e1:d7:b9:1b:8f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1d:ca:ab:e2:db:27:cc:a9:88:0c:e7:6c:fe:
91:24:74:c2:3a:63:91:7d:19:71:b2:74:26:89:3c:
b4:90:96:00:e0:06:90:ed:6d:a1:f3:b2:e6:ec:44:
12:54:4b:cf:c8:8d:ed:b1:ad:3c:fc:30:48:11:e1:
09:ff:d5:32:a7:25:62:fa:ba:9a:4a:e6:72:8f:ad:
48:c2:85:4d:37:5e:03:3f:b6:3b:a4:54:1d:c6:5b:
1f:81:45:c7:45:a8:f0:66:25:5b:25:d8:16:ee:25:
dd:35:d9:1f:3f:96:ab:07:2f:b1:ae:53:25:be:fe:
ef:75:b7:e6:2d:a8:ef:b1:d1:aa:2c:9d:7f:85:9b:
3c:fa:f1:ee:76:f7:dd:21:48:c8:e7:83:88:45:77:
a0:3f:12:ae:4f:d4:a9:39:22:51:f0:2f:38:6f:25:
ca:44:da:d9:d6:6e:fb:a5:3e:f5:20:cc:82:58:9e:
39:86:7b:b1:a8:b6:52:c7:3f:69:62:1e:9b:e8:22:
60:98:83:ae:d9:b7:47:40:21:24:ba:c6:cc:fb:68:
b5:b3:4e:21:5e:71:b4:d0:5b:7e:bf:4d:a7:50:c6:
5d:1d:b2:a5:7b:c0:c6:09:80:5b:bf:64:7c:97:1a:
e2:80:2a:48:b9:91:73:fd:8c:cb:e6:af:c7:a4:9b:
f3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:99:FE:25:C9:05:24:85:D9:3C:F9:14:84:DE:A6:69:72:2C:BC:04
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a224cd7d-fde7-49b4-81a5-ab7d0d83f83b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.116.0.0/14
Signature Algorithm: sha256WithRSAEncryption
95:d6:9e:da:2a:e9:ea:22:fd:ec:94:20:bd:b7:e3:70:13:01:
ef:5f:8e:b9:a2:0a:ee:59:85:a9:0b:50:3b:a2:d4:8e:11:41:
02:20:4e:45:18:08:7e:80:dd:17:7e:9a:dc:4e:a0:b3:95:4c:
6e:84:32:e6:db:8f:95:1f:6d:c8:69:f3:7e:1a:25:72:36:48:
7a:db:dc:56:6d:80:b4:cf:ad:37:a6:74:34:c1:3d:b8:a7:91:
8a:e9:f8:2a:b0:c6:3e:34:da:48:f4:70:52:16:f7:d2:4b:99:
bb:aa:e6:fc:99:4a:55:e8:05:c6:f3:6d:73:e0:be:8e:d7:40:
fa:89:23:4a:03:92:ac:75:3c:85:41:1b:db:87:69:4c:25:1b:
f5:e0:0f:5c:a6:f7:c5:6b:c7:14:f3:3d:8f:bc:56:06:8f:8b:
ab:25:54:98:da:19:cd:82:44:02:47:79:27:e5:e0:30:51:fe:
70:f6:84:e7:40:c2:a6:85:27:2f:36:49:cd:40:85:17:a6:9e:
3c:ed:93:01:31:0e:ce:21:2b:90:b7:4e:66:68:c5:1d:24:51:
0d:fd:b7:92:b3:00:80:e0:b7:ba:11:8c:8d:da:73:7f:fa:d8:
54:21:46:86:38:74:a1:57:6c:03:ef:97:7f:60:93:16:94:4b:
e0:25:ee:80
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUe2754doqDpdG4hkMXOLh17kbjyMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMjE3MDAwMDAwWhcNMjUwMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BhNTk5MTViYmZlMTNkNTIwMzA5NDQyY2UxMjEzNTllYzQz
ZWU0MjBiNThkNGUxNmQ4YmM1MDZkMWY4MGU4ZDQwMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDBHcqr4tsnzKmIDOds/pEkdMI6Y5F9GXGydCaJPLSQlgDg
BpDtbaHzsubsRBJUS8/Ije2xrTz8MEgR4Qn/1TKnJWL6uppK5nKPrUjChU03XgM/
tjukVB3GWx+BRcdFqPBmJVsl2BbuJd012R8/lqsHL7GuUyW+/u91t+YtqO+x0aos
nX+Fmzz68e52990hSMjng4hFd6A/Eq5P1Kk5IlHwLzhvJcpE2tnWbvulPvUgzIJY
njmGe7GotlLHP2liHpvoImCYg67Zt0dAISS6xsz7aLWzTiFecbTQW36/TadQxl0d
sqV7wMYJgFu/ZHyXGuKAKki5kXP9jMvmr8ekm/PVAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUv5n+JckFJIXZPPkUhN6maXIsvAQwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2EyMjRjZDdkLWZkZTctNDliNC04MWE1LWFiN2QwZDgzZjgzYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwISdDANBgkqhkiG9w0BAQsFAAOCAQEAldae2irp6iL97JQgvbfjcBMB71+O
uaIK7lmFqQtQO6LUjhFBAiBORRgIfoDdF36a3E6gs5VMboQy5tuPlR9tyGnzfhol
cjZIetvcVm2AtM+tN6Z0NME9uKeRiun4KrDGPjTaSPRwUhb30kuZu6rm/JlKVegF
xvNtc+C+jtdA+okjSgOSrHU8hUEb24dpTCUb9eAPXKb3xWvHFPM9j7xWBo+LqyVU
mNoZzYJEAkd5J+XgMFH+cPaE50DCpoUnLzZJzUCFF6aePO2TATEOziErkLdOZmjF
HSRRDf23krMAgOC3uhGMjdpzf/rYVCFGhjh0oVdsA++Xf2CTFpRL4CXugA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:39 2025 by rpki-client