Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4ef442e-27f8-49b0-a798-2b6ef16092ec.roa
File: e4ef442e-27f8-49b0-a798-2b6ef16092ec.roa (raw, json)
Hash identifier: gy4TvAoqxeo6hXReazrCy2ba9ekV611N2Htv54LsVDY=
Subject key identifier: 32:0D:42:63:02:A9:F0:4A:A1:55:7F:2E:3C:05:CF:8B:0A:39:F0:BB
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6142466FC73CB4B175DFAE222954621B86182434
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4ef442e-27f8-49b0-a798-2b6ef16092ec.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.230.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:42:46:6f:c7:3c:b4:b1:75:df:ae:22:29:54:62:1b:86:18:24:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:86:9e:0a:d5:34:f4:32:51:6c:8b:61:24:20:
1f:17:74:26:44:71:1b:60:c1:6c:a5:1a:c9:30:db:
36:6a:8b:74:ad:bb:80:f9:c2:a6:8c:24:17:d2:5a:
59:4f:f4:6d:fc:24:75:0f:41:fc:11:93:75:55:28:
a3:46:d6:00:43:aa:ca:b7:60:fd:ef:dc:6d:f4:12:
8c:55:d3:78:a4:53:96:aa:b9:45:0b:f7:6c:ef:43:
fa:d6:23:8c:f5:0c:de:97:cb:85:be:17:90:69:c9:
02:c1:db:3b:da:2f:b7:16:47:37:b0:a1:9d:df:6d:
6e:38:e8:51:79:80:3e:c0:71:f9:4c:8c:1d:f4:cf:
6c:c4:aa:2f:3f:fd:e6:0f:0d:1a:f7:3f:39:c4:db:
4b:30:18:ab:d6:26:72:bc:c6:75:91:28:ec:5f:22:
71:dd:76:0c:f5:fc:8f:b0:bf:2d:61:f3:11:4c:c1:
87:cc:82:d1:aa:f0:ef:4c:e7:54:40:b8:37:af:e1:
81:10:7c:14:03:34:6a:1e:ef:49:c2:67:eb:4e:ab:
de:6b:e4:40:9d:2f:4b:0e:24:ca:80:3f:e8:63:8b:
b2:e1:94:13:d8:96:d2:26:43:b4:ec:c8:01:ec:82:
23:1c:bd:c8:ea:32:d8:8c:65:87:6d:7b:cd:4b:eb:
9c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0D:42:63:02:A9:F0:4A:A1:55:7F:2E:3C:05:CF:8B:0A:39:F0:BB
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4ef442e-27f8-49b0-a798-2b6ef16092ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.230.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:36:c9:ea:4d:f4:a8:7f:66:dd:16:91:bb:77:a6:05:96:d3:
19:e4:43:f6:fe:9a:00:29:49:b6:b8:02:a5:7c:c1:b8:e0:58:
dc:72:16:5d:1f:f0:9a:58:53:ea:1e:89:89:aa:a8:1b:ad:ea:
c6:bb:66:e7:e9:32:1a:3e:f4:9a:6b:d3:a9:1f:b0:3a:3c:f5:
0e:a5:d1:29:9b:64:b8:6c:67:fa:87:62:89:9f:29:cf:5d:c4:
9f:9f:83:e6:a4:00:38:b2:73:ff:a1:d0:32:a9:c5:be:22:d9:
a0:39:bc:70:0d:09:5c:a5:85:9b:29:e9:9a:bb:d5:1c:82:9e:
21:88:b4:dc:c1:6a:fc:9f:ee:d0:f0:25:6a:04:aa:c7:fe:df:
c5:66:c2:4d:2a:29:98:25:29:0f:f0:2d:55:49:60:ea:8a:f9:
4f:a8:1a:5a:8c:79:e0:49:2c:fc:9d:15:86:93:e8:e3:ea:81:
30:4e:a9:c9:43:31:c7:72:a5:ce:3c:fd:52:86:2a:d6:fb:2a:
ab:73:ad:72:33:87:be:b0:16:d5:81:60:bf:95:34:8f:cf:e4:
07:f8:12:31:25:b9:20:95:0b:ea:3a:54:64:db:b9:30:c8:0f:
0a:9e:80:d1:93:eb:f6:27:51:f5:b4:c9:35:e4:de:91:6a:47:
1a:0f:c5:ee
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYUJGb8c8tLF1364iKVRiG4YYJDQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMjE3MDAwMDAwWhcNMjUwMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A1YjYxMzRlYzdkZmJhNDJiMzkyYzdiMmU5ZDE2ODFhN2Ew
ZmZlZTM0N2Y0MzcwYTkxZmY0MzcxOWYzNGViMzRlMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCahp4K1TT0MlFsi2EkIB8XdCZEcRtgwWylGskw2zZqi3St
u4D5wqaMJBfSWllP9G38JHUPQfwRk3VVKKNG1gBDqsq3YP3v3G30EoxV03ikU5aq
uUUL92zvQ/rWI4z1DN6Xy4W+F5BpyQLB2zvaL7cWRzewoZ3fbW446FF5gD7AcflM
jB30z2zEqi8//eYPDRr3PznE20swGKvWJnK8xnWRKOxfInHddgz1/I+wvy1h8xFM
wYfMgtGq8O9M51RAuDev4YEQfBQDNGoe70nCZ+tOq95r5ECdL0sOJMqAP+hji7Lh
lBPYltImQ7TsyAHsgiMcvcjqMtiMZYdte81L65yZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUMg1CYwKp8EqhVX8uPAXPiwo58LswHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2U0ZWY0NDJlLTI3ZjgtNDliMC1hNzk4LTJiNmVmMTYwOTJlYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAP5oEwDQYJKoZIhvcNAQELBQADggEBAIo2yepN9Kh/Zt0Wkbt3pgWW0xnk
Q/b+mgApSba4AqV8wbjgWNxyFl0f8JpYU+oeiYmqqBut6sa7ZufpMho+9Jpr06kf
sDo89Q6l0SmbZLhsZ/qHYomfKc9dxJ+fg+akADiyc/+h0DKpxb4i2aA5vHANCVyl
hZsp6Zq71RyCniGItNzBavyf7tDwJWoEqsf+38Vmwk0qKZglKQ/wLVVJYOqK+U+o
GlqMeeBJLPydFYaT6OPqgTBOqclDMcdypc48/VKGKtb7KqtzrXIzh76wFtWBYL+V
NI/P5Af4EjEluSCVC+o6VGTbuTDIDwqegNGT6/YnUfW0yTXk3pFqRxoPxe4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:10 2025 by rpki-client