Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8a20944-17f0-4a63-a7f1-7d195e0e4bd3.roa
File: c8a20944-17f0-4a63-a7f1-7d195e0e4bd3.roa (raw, json)
Hash identifier: 2hEOAPQ1mp0xZArYJXJafyy2s8g88sZoT8p5m5zsL/o=
Subject key identifier: 7E:44:30:19:49:58:2C:9C:A9:8A:A5:D3:6B:E7:DF:DC:B4:1A:2D:04
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 15CD24591669CAD6E390726ECDF28D4EE70D27D7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8a20944-17f0-4a63-a7f1-7d195e0e4bd3.roa
Signing time: Fri 20 Dec 2024 00:00:00 +0000
ROA not before: Fri 20 Dec 2024 00:00:00 +0000
ROA not after: Fri 24 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.93.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:cd:24:59:16:69:ca:d6:e3:90:72:6e:cd:f2:8d:4e:e7:0d:27:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 20 00:00:00 2024 GMT
Not After : Jan 24 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0e:bd:17:9b:a1:d3:db:e1:45:c8:bb:de:3b:
2a:3c:a1:34:e9:4d:85:fa:a6:9d:99:fd:d9:f6:75:
00:51:22:5b:de:02:59:db:f6:3b:a5:17:7a:19:41:
1c:fd:e0:96:60:94:eb:f4:b8:12:58:a2:ec:03:86:
9e:4c:25:c9:14:e8:e5:3a:93:65:c6:e4:19:8d:11:
66:d3:ce:60:00:ae:87:1f:0d:8b:9e:eb:fe:79:e4:
21:13:f7:26:9e:c7:9c:0b:33:2d:e2:05:7c:d7:b8:
6c:e4:6a:e7:0c:e5:0c:59:05:c8:05:58:2b:bd:55:
bc:37:f1:a2:a3:39:a5:e8:5d:d7:66:05:71:d1:79:
46:35:54:bf:57:12:fb:49:33:ba:2e:bc:16:56:e3:
07:de:6a:60:2a:56:1f:80:c8:72:15:14:83:1c:41:
82:3b:fb:7f:84:6b:f8:76:f1:bc:c6:dc:30:35:ac:
19:80:da:27:76:15:3d:c0:1c:b6:81:8c:2c:20:b9:
11:70:d5:ef:79:98:f1:ea:ad:27:cc:74:e3:71:d6:
5b:0f:38:b6:96:d3:d3:8e:6c:33:6c:9d:c8:d0:c6:
03:94:f7:a4:24:0b:e1:4c:0d:4d:04:a2:94:dc:04:
06:7e:5c:d8:d9:2e:dc:25:de:f0:f0:69:65:a6:03:
45:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:44:30:19:49:58:2C:9C:A9:8A:A5:D3:6B:E7:DF:DC:B4:1A:2D:04
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8a20944-17f0-4a63-a7f1-7d195e0e4bd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.93.150.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:01:d4:30:fd:7f:31:23:cc:d9:f7:49:55:4d:5d:ca:df:0c:
4a:4e:ac:b8:9b:b3:68:92:00:78:10:66:c0:fd:97:d3:cf:e5:
ac:cb:10:0c:72:f1:7a:66:0a:7d:17:17:9a:ea:df:8b:c4:89:
9b:70:17:9f:fe:0d:97:1d:6a:d0:0d:e6:a2:48:7c:0a:5f:e7:
f0:b9:b4:69:38:41:f3:56:e1:e2:6f:3f:57:80:27:91:92:c0:
ef:6b:d9:e5:a8:fa:7a:2c:81:16:51:42:5c:85:00:01:9e:5b:
dc:68:c4:e6:27:03:9f:f0:7a:48:8c:97:d7:07:99:b8:5d:ae:
14:f2:fb:8c:c5:a8:30:55:3f:5a:d5:21:14:5f:39:b1:6f:b0:
1a:08:cc:75:95:93:db:3b:1e:cd:d2:43:11:13:28:b4:f7:5a:
1c:67:2a:17:18:5d:0d:41:34:71:ef:32:d2:79:89:bd:6b:5c:
24:60:cc:99:e2:d1:cf:09:a0:38:80:b8:43:42:49:56:4f:58:
e9:4e:1b:f2:a6:df:1b:d3:ee:04:bc:a9:e7:87:5a:3c:52:96:
be:56:b2:24:32:f9:ad:69:24:d8:6c:bc:21:0f:10:97:8b:a5:
ad:b5:8e:c7:97:de:88:f3:86:79:37:ff:95:0e:1c:23:09:4a:
81:97:42:70
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFc0kWRZpytbjkHJuzfKNTucNJ9cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMjIwMDAwMDAwWhcNMjUwMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BmZjMxYzk0NGIzNGQxYjhmOTZmNGNjMDdlODIyYTllMDA1
MDhhMzY1YWIyOTA4YTc4YTIwZDZhNWEyMzYxOGUxMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDxDr0Xm6HT2+FFyLveOyo8oTTpTYX6pp2Z/dn2dQBRIlve
Alnb9julF3oZQRz94JZglOv0uBJYouwDhp5MJckU6OU6k2XG5BmNEWbTzmAArocf
DYue6/555CET9yaex5wLMy3iBXzXuGzkaucM5QxZBcgFWCu9Vbw38aKjOaXoXddm
BXHReUY1VL9XEvtJM7ouvBZW4wfeamAqVh+AyHIVFIMcQYI7+3+Ea/h28bzG3DA1
rBmA2id2FT3AHLaBjCwguRFw1e95mPHqrSfMdONx1lsPOLaW09OObDNsncjQxgOU
96QkC+FMDU0EopTcBAZ+XNjZLtwl3vDwaWWmA0UfAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUfkQwGUlYLJypiqXTa+ff3LQaLQQwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2M4YTIwOTQ0LTE3ZjAtNGE2My1hN2YxLTdkMTk1ZTBlNGJkMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA0XZYwDQYJKoZIhvcNAQELBQADggEBAKsB1DD9fzEjzNn3SVVNXcrfDEpO
rLibs2iSAHgQZsD9l9PP5azLEAxy8XpmCn0XF5rq34vEiZtwF5/+DZcdatAN5qJI
fApf5/C5tGk4QfNW4eJvP1eAJ5GSwO9r2eWo+nosgRZRQlyFAAGeW9xoxOYnA5/w
ekiMl9cHmbhdrhTy+4zFqDBVP1rVIRRfObFvsBoIzHWVk9s7Hs3SQxETKLT3Whxn
KhcYXQ1BNHHvMtJ5ib1rXCRgzJni0c8JoDiAuENCSVZPWOlOG/Km3xvT7gS8qeeH
WjxSlr5WsiQy+a1pJNhsvCEPEJeLpa21jseX3ojzhnk3/5UOHCMJSoGXQnA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:04:12 2025 by rpki-client