Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/801f51f8-c4c3-4c2d-98cc-4e685b871aab.roa
File: 801f51f8-c4c3-4c2d-98cc-4e685b871aab.roa (raw, json)
Hash identifier: z5ZYfifItv0x5c/wBOVViQf1y+0XENXGSKYwThudhs4=
Subject key identifier: 72:66:CB:66:2C:57:9A:50:33:84:74:7A:9A:02:E3:52:48:0D:05:E7
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 2FBD64681104B7B66FED76FF6C023E2E58DADD89
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/801f51f8-c4c3-4c2d-98cc-4e685b871aab.roa
Signing time: Sat 18 Jan 2025 00:00:00 +0000
ROA not before: Sat 18 Jan 2025 00:00:00 +0000
ROA not after: Sat 22 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 173.82.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:bd:64:68:11:04:b7:b6:6f:ed:76:ff:6c:02:3e:2e:58:da:dd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 18 00:00:00 2025 GMT
Not After : Feb 22 23:59:59 2025 GMT
Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:60:45:7f:b9:2a:fd:93:39:99:61:f6:93:4f:
28:76:67:04:90:ec:3c:3a:92:44:37:fa:84:3b:a0:
7e:a0:63:8d:19:5a:10:90:cc:c6:b4:a7:e1:a7:60:
f3:41:67:55:92:00:77:7d:7f:92:21:2e:14:c8:02:
68:fc:56:8a:3a:49:6a:62:68:9f:81:8e:e3:bd:38:
ce:e8:1b:dd:b2:a5:20:0f:63:dd:8c:a1:ee:6c:c7:
93:b1:a5:f2:1e:4e:6f:95:fe:5a:e5:e4:e9:1e:7d:
3f:48:33:ee:3a:21:88:f9:d4:b2:a9:dc:c8:74:bc:
07:28:f2:de:65:3c:28:d0:ba:75:f1:51:d6:77:47:
5a:6e:30:05:8d:9d:9e:d7:11:b5:56:d8:b6:38:af:
16:41:49:69:8a:e3:24:fb:4c:8b:96:7d:3c:1c:a5:
03:4a:12:16:f7:86:03:cf:3b:b4:c1:22:0d:8b:43:
d9:95:64:0f:a1:45:39:4d:e3:4b:2b:6a:d9:23:05:
76:cb:b9:5c:b8:b6:2a:f3:dd:f6:82:6a:20:d1:f0:
2e:33:d5:0b:e9:4f:6c:b3:92:8a:d2:1a:7a:53:80:
fc:5e:d0:88:6b:7d:01:4d:52:c4:01:d9:7c:68:df:
3e:30:bf:09:b5:0a:c7:73:5d:94:8c:63:04:6b:a7:
cc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:66:CB:66:2C:57:9A:50:33:84:74:7A:9A:02:E3:52:48:0D:05:E7
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/801f51f8-c4c3-4c2d-98cc-4e685b871aab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.255.0/24
Signature Algorithm: sha256WithRSAEncryption
15:74:15:0b:c9:0c:32:77:2b:7f:47:5c:eb:73:43:d7:e1:3b:
93:2d:31:51:5f:4c:c6:47:42:b0:8d:84:ad:f0:e5:b6:5d:3f:
5f:e9:a0:a6:2b:ef:2a:fa:4e:37:d8:a6:93:38:c7:9e:b4:0e:
9e:16:54:d3:b0:a7:8f:d4:c9:04:67:77:01:97:fd:d8:e4:4d:
e4:69:c2:d3:74:91:39:c8:22:2c:94:a3:14:6b:5b:03:bc:8f:
ee:b0:89:9d:b7:ae:fc:4f:fd:5e:0f:b4:8a:c1:49:d4:92:ce:
de:28:eb:f0:d7:2a:11:1c:56:91:7b:90:93:33:02:67:e5:55:
cc:35:fd:27:5e:d9:d8:c8:c5:78:9b:5c:04:13:13:29:fa:c6:
52:2d:42:96:78:87:ea:57:07:55:f2:7a:04:9e:98:73:38:8e:
c4:10:d0:cc:7f:15:3b:b2:56:b3:60:41:35:7f:68:14:5a:27:
50:6b:45:52:19:e8:ab:00:d6:30:66:00:29:1e:00:68:a6:f9:
54:3f:13:37:ea:39:bb:21:78:d4:91:a9:93:fc:65:58:8e:11:
53:5c:2b:24:29:f8:a1:f5:79:08:33:e6:b6:c5:ed:31:65:4f:
66:3f:a2:1b:56:66:c0:d8:b8:92:c7:58:9d:19:75:11:d4:a0:
26:6d:39:6f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUL71kaBEEt7Zv7Xb/bAI+Llja3YkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMTE4MDAwMDAwWhcNMjUwMjIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A5NjAxOWM0NWYzZmU5MGNmZWFlOWMwYzIyNGJmYzdiYjVm
N2Q2MmFlNTVkZmJkMzc0ZjllYWIyYjk5MmQwNmNhMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDbYEV/uSr9kzmZYfaTTyh2ZwSQ7Dw6kkQ3+oQ7oH6gY40Z
WhCQzMa0p+GnYPNBZ1WSAHd9f5IhLhTIAmj8Voo6SWpiaJ+BjuO9OM7oG92ypSAP
Y92Moe5sx5OxpfIeTm+V/lrl5OkefT9IM+46IYj51LKp3Mh0vAco8t5lPCjQunXx
UdZ3R1puMAWNnZ7XEbVW2LY4rxZBSWmK4yT7TIuWfTwcpQNKEhb3hgPPO7TBIg2L
Q9mVZA+hRTlN40sratkjBXbLuVy4tirz3faCaiDR8C4z1QvpT2yzkorSGnpTgPxe
0IhrfQFNUsQB2Xxo3z4wvwm1CsdzXZSMYwRrp8xzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUcmbLZixXmlAzhHR6mgLjUkgNBecwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzgwMWY1MWY4LWM0YzMtNGMyZC05OGNjLTRlNjg1Yjg3MWFhYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACtUv8wDQYJKoZIhvcNAQELBQADggEBABV0FQvJDDJ3K39HXOtzQ9fhO5Mt
MVFfTMZHQrCNhK3w5bZdP1/poKYr7yr6TjfYppM4x560Dp4WVNOwp4/UyQRndwGX
/djkTeRpwtN0kTnIIiyUoxRrWwO8j+6wiZ23rvxP/V4PtIrBSdSSzt4o6/DXKhEc
VpF7kJMzAmflVcw1/Sde2djIxXibXAQTEyn6xlItQpZ4h+pXB1XyegSemHM4jsQQ
0Mx/FTuyVrNgQTV/aBRaJ1BrRVIZ6KsA1jBmACkeAGim+VQ/EzfqObsheNSRqZP8
ZViOEVNcKyQp+KH1eQgz5rbF7TFlT2Y/ohtWZsDYuJLHWJ0ZdRHUoCZtOW8=
-----END CERTIFICATE-----
Generated at Mon Feb 10 16:39:01 2025 by rpki-client