Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3754532b-2417-490e-8cb4-26b8fc034925.roa
File: 3754532b-2417-490e-8cb4-26b8fc034925.roa (raw, json)
Hash identifier: I+d8Xjf/0YJbgE/H11++h2XAPC6+UpzuHPX7IRWx+B4=
Subject key identifier: 5A:29:C2:51:4D:59:B7:E3:DB:7D:4F:09:0A:6B:0A:F9:4A:EC:7E:63
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 3DFD94BD8FEA221605F0587CC01287D431014093
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3754532b-2417-490e-8cb4-26b8fc034925.roa
Signing time: Fri 11 Apr 2025 00:00:14 +0000
ROA not before: Fri 11 Apr 2025 00:00:14 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 8987
IP address blocks: 23.249.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:fd:94:bd:8f:ea:22:16:05:f0:58:7c:c0:12:87:d4:31:01:40:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Apr 11 00:00:14 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=74194f8aea02587c1a9db96f4cb911bee2b9c4ae37ef9091a202685318cd48ad, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0d:94:14:7f:6d:ad:60:e9:25:75:51:6e:51:
89:4d:12:69:33:08:55:25:a5:08:b9:09:62:81:2b:
cf:90:05:d5:77:31:fb:36:47:34:75:f6:6d:c3:a6:
49:d2:63:a8:ce:3f:0d:f1:ab:ac:dc:e2:77:33:1a:
68:eb:de:a7:90:31:ac:41:8b:44:74:28:5e:c4:47:
95:fa:72:bc:22:e0:43:ca:de:8a:24:ae:0a:f5:84:
2c:ac:25:51:b3:1e:45:87:7a:51:e8:5c:12:29:07:
92:df:b1:24:1f:45:9d:da:ef:4e:65:be:30:54:1f:
bc:8a:ba:31:da:80:ca:89:10:18:2b:5a:26:c3:b7:
60:9a:95:d9:c3:0c:51:4d:ce:8c:d2:88:24:d7:ea:
2b:79:61:c1:42:c7:da:27:06:30:32:39:d8:d4:02:
13:a1:ae:f9:58:3c:68:98:ed:03:ce:f4:fc:6d:4f:
87:55:c0:e5:a4:16:51:a0:c9:c7:0b:60:56:23:6b:
29:53:0e:c3:e1:45:2a:04:25:1d:b3:98:7e:bc:fe:
9e:b6:30:0d:2d:5d:ee:bc:4d:da:17:3c:d5:ea:25:
c5:5f:e9:e7:ce:10:b3:05:53:90:7b:f1:fe:91:06:
82:7d:9c:37:a0:19:22:6d:59:bf:5e:50:72:be:f0:
a7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:29:C2:51:4D:59:B7:E3:DB:7D:4F:09:0A:6B:0A:F9:4A:EC:7E:63
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3754532b-2417-490e-8cb4-26b8fc034925.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.212.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:8c:90:34:27:1c:44:7a:b9:0f:10:62:58:16:00:17:3e:e6:
07:c0:61:b1:9b:72:c0:2c:86:b5:d9:46:80:e8:88:e6:61:de:
20:10:5f:ee:69:22:7f:93:97:4e:90:af:70:1c:3a:72:01:7b:
45:11:00:be:2c:3e:c4:4d:a1:78:ed:a9:64:b2:4d:5c:71:71:
31:82:a5:66:a1:d7:0a:00:27:08:8b:23:fd:cf:de:fa:a6:e0:
d6:9d:17:43:52:b9:5e:1d:e6:23:f1:6b:b8:a8:f3:99:33:5d:
d5:3b:38:3e:bc:85:c5:89:15:91:98:f5:12:3b:b9:ae:aa:56:
7b:df:d8:b4:17:e8:52:5f:4b:b4:16:2e:ef:6c:61:2f:ce:cd:
ba:91:d9:2c:82:85:e4:f9:08:32:64:53:cb:c7:f0:61:58:a1:
e8:d5:de:a1:a6:a9:21:02:f7:c3:99:d4:89:9a:34:a3:26:ba:
09:05:c2:57:8c:d0:a2:35:9f:46:65:5a:7a:3c:71:28:b5:cf:
14:64:50:6c:fc:09:24:57:f0:57:db:ef:79:45:dd:f0:d6:f3:
28:4b:18:a0:ad:01:d7:a8:81:ec:8e:4f:95:ab:ce:b6:db:5b:
61:78:47:a9:b7:9c:1c:53:05:bf:e7:cc:5f:5d:65:7f:99:67:
ee:03:78:2e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPf2UvY/qIhYF8Fh8wBKH1DEBQJMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNDExMDAwMDE0WhcNMjUwNTE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A3NDE5NGY4YWVhMDI1ODdjMWE5ZGI5NmY0Y2I5MTFiZWUy
YjljNGFlMzdlZjkwOTFhMjAyNjg1MzE4Y2Q0OGFkMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCDZQUf22tYOkldVFuUYlNEmkzCFUlpQi5CWKBK8+QBdV3
Mfs2RzR19m3DpknSY6jOPw3xq6zc4nczGmjr3qeQMaxBi0R0KF7ER5X6crwi4EPK
3ookrgr1hCysJVGzHkWHelHoXBIpB5LfsSQfRZ3a705lvjBUH7yKujHagMqJEBgr
WibDt2CaldnDDFFNzozSiCTX6it5YcFCx9onBjAyOdjUAhOhrvlYPGiY7QPO9Pxt
T4dVwOWkFlGgyccLYFYjaylTDsPhRSoEJR2zmH68/p62MA0tXe68TdoXPNXqJcVf
6efOELMFU5B78f6RBoJ9nDegGSJtWb9eUHK+8KeHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUWinCUU1Zt+PbfU8JCmsK+UrsfmMwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkLzM3NTQ1MzJiLTI0MTctNDkwZS04Y2I0LTI2YjhmYzAzNDkyNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAX+dQwDQYJKoZIhvcNAQELBQADggEBAEuMkDQnHER6uQ8QYlgWABc+5gfA
YbGbcsAshrXZRoDoiOZh3iAQX+5pIn+Tl06Qr3AcOnIBe0URAL4sPsRNoXjtqWSy
TVxxcTGCpWah1woAJwiLI/3P3vqm4NadF0NSuV4d5iPxa7io85kzXdU7OD68hcWJ
FZGY9RI7ua6qVnvf2LQX6FJfS7QWLu9sYS/OzbqR2SyCheT5CDJkU8vH8GFYoejV
3qGmqSEC98OZ1ImaNKMmugkFwleM0KI1n0ZlWno8cSi1zxRkUGz8CSRX8Ffb73lF
3fDW8yhLGKCtAdeogeyOT5WrzrbbW2F4R6m3nBxTBb/nzF9dZX+ZZ+4DeC4=
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:32 2025 by rpki-client on console.sobornost.net