Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cbf5d801-721e-4953-81f0-9e768c3e68c5.roa
File: cbf5d801-721e-4953-81f0-9e768c3e68c5.roa (raw, json)
Hash identifier: HCY6VRW8e071Te132zJZS8yethsNyweXrvB5o0HYGfQ=
Subject key identifier: 6B:70:2D:82:13:FC:F0:90:EA:4B:0A:AF:72:AE:DC:89:DD:74:22:66
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2C4264C07CDD0CEBA1DAF2D49CFE3B5B25209F28
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cbf5d801-721e-4953-81f0-9e768c3e68c5.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 13.208.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:42:64:c0:7c:dd:0c:eb:a1:da:f2:d4:9c:fe:3b:5b:25:20:9f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:69:1f:23:18:02:39:39:ef:a1:6d:d0:ac:55:
18:47:17:44:36:2a:c5:c1:ea:70:ee:fb:66:23:e8:
1c:19:34:7e:cc:9d:c4:2e:f5:d1:00:4b:94:73:18:
62:65:fc:1a:c4:01:71:00:57:a7:95:05:a2:7c:5d:
8e:f7:24:cd:7e:92:2b:29:3f:00:7d:87:d4:d4:ce:
d3:0a:36:f4:35:d8:7b:86:1e:83:85:dc:e8:81:bb:
cc:e6:10:40:99:c6:af:2f:d7:15:c3:8f:ee:6f:97:
4c:5c:98:ad:06:1c:ae:01:53:5d:75:95:b5:a8:d3:
ef:6e:b8:f9:fd:33:8a:95:3b:17:d7:c0:73:56:9c:
d2:fd:bc:a9:e3:d1:3e:de:a2:b3:da:ab:86:47:80:
e4:19:b9:df:06:80:88:2d:c1:be:c8:b7:ba:9c:05:
e6:13:31:39:82:7d:1c:d5:8f:2e:d8:62:45:fa:28:
51:9f:af:81:42:f8:b8:8d:23:ae:af:ef:65:af:b9:
b6:f0:72:39:06:9e:b6:ec:41:9d:a9:f2:6d:3a:db:
45:9b:a9:26:95:e9:b5:8b:41:20:73:76:3a:aa:ae:
22:3f:88:f4:8d:22:ff:6a:b5:b8:22:6e:71:cc:86:
52:b4:ce:87:34:49:39:e5:26:5a:b4:9f:07:ac:45:
47:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:70:2D:82:13:FC:F0:90:EA:4B:0A:AF:72:AE:DC:89:DD:74:22:66
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cbf5d801-721e-4953-81f0-9e768c3e68c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.208.0.0/14
Signature Algorithm: sha256WithRSAEncryption
44:de:ae:05:28:4f:d4:6a:46:41:33:2a:94:b6:99:1d:45:94:
f7:f8:92:74:fd:0c:8c:30:7f:ac:47:8b:2c:4a:ea:19:49:fa:
3c:4f:cf:d1:7d:3a:a0:b3:a4:29:cc:89:13:28:fe:7b:4d:27:
d9:17:94:41:a5:3f:d2:e8:bf:b9:45:72:11:10:39:87:d8:a9:
f8:48:a8:d9:11:68:aa:5b:e7:48:23:8e:01:cd:99:e1:e3:48:
66:ee:d3:7d:10:de:4a:c7:62:80:76:ee:ea:a6:c4:5c:57:46:
24:b4:e3:58:f9:e1:ad:1a:d1:a2:37:d1:e1:5c:06:88:c5:2a:
93:7c:dc:24:63:32:69:c5:a9:85:46:dd:7d:09:4d:37:13:84:
cf:8a:cd:27:7d:56:52:4e:7f:2f:74:55:ac:b5:96:ee:ed:96:
1a:59:2d:8a:1a:0c:e6:88:64:f3:1f:18:18:77:7e:cb:0b:16:
61:85:41:ec:1c:a8:b2:63:a1:1f:b2:c6:0b:f7:35:2c:47:fb:
59:aa:92:c4:0f:41:a0:19:b2:b7:18:e7:59:19:ee:81:b5:72:
fd:2f:04:a5:85:6d:c6:9e:39:39:31:43:b2:d9:c1:77:3d:9c:
3c:c3:65:dc:6d:58:3f:1d:d4:06:8d:33:24:55:2d:50:c4:6a:
3a:7f:87:60
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIULEJkwHzdDOuh2vLUnP47WyUgnygwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMjE2MDAwMDAwWhcNMjUwMTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BkNmRmNjZlZDllMmYxZTA4OTI3NjgyZDE1NmZmOTMzZGU5
NWIzYTY5ZjNjNjliMWI0NWRkNDBiZTBhNTU5YTlkMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDRaR8jGAI5Oe+hbdCsVRhHF0Q2KsXB6nDu+2Yj6BwZNH7M
ncQu9dEAS5RzGGJl/BrEAXEAV6eVBaJ8XY73JM1+kispPwB9h9TUztMKNvQ12HuG
HoOF3OiBu8zmEECZxq8v1xXDj+5vl0xcmK0GHK4BU111lbWo0+9uuPn9M4qVOxfX
wHNWnNL9vKnj0T7eorPaq4ZHgOQZud8GgIgtwb7It7qcBeYTMTmCfRzVjy7YYkX6
KFGfr4FC+LiNI66v72WvubbwcjkGnrbsQZ2p8m0620WbqSaV6bWLQSBzdjqqriI/
iPSNIv9qtbgibnHMhlK0zoc0STnlJlq0nwesRUdlAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUa3AtghP88JDqSwqvcq7cid10ImYwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2NiZjVkODAxLTcyMWUtNDk1My04MWYwLTllNzY4YzNlNjhjNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwIN0DANBgkqhkiG9w0BAQsFAAOCAQEARN6uBShP1GpGQTMqlLaZHUWU9/iS
dP0MjDB/rEeLLErqGUn6PE/P0X06oLOkKcyJEyj+e00n2ReUQaU/0ui/uUVyERA5
h9ip+Eio2RFoqlvnSCOOAc2Z4eNIZu7TfRDeSsdigHbu6qbEXFdGJLTjWPnhrRrR
ojfR4VwGiMUqk3zcJGMyacWphUbdfQlNNxOEz4rNJ31WUk5/L3RVrLWW7u2WGlkt
ihoM5ohk8x8YGHd+ywsWYYVB7ByosmOhH7LGC/c1LEf7WaqSxA9BoBmytxjnWRnu
gbVy/S8EpYVtxp45OTFDstnBdz2cPMNl3G1YPx3UBo0zJFUtUMRqOn+HYA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:04:18 2025 by rpki-client