Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5ff4b44a-41c9-4bc0-b77e-520fd1d7927e.roa
File: 5ff4b44a-41c9-4bc0-b77e-520fd1d7927e.roa (raw, json)
Hash identifier: mZ1nSMnN1fBekzRR5IS7Dws5ihw8cX46jZLq30fWhQo=
Subject key identifier: 7A:B8:84:EF:AE:8F:8F:92:25:BD:E1:CF:57:B5:CB:D7:D0:6B:50:76
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 40D71375C1F26FD7DDF666365C1755BE19F0C3C7
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5ff4b44a-41c9-4bc0-b77e-520fd1d7927e.roa
Signing time: Fri 11 Apr 2025 00:00:24 +0000
ROA not before: Fri 11 Apr 2025 00:00:24 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 8987
IP address blocks: 23.249.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:d7:13:75:c1:f2:6f:d7:dd:f6:66:36:5c:17:55:be:19:f0:c3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Apr 11 00:00:24 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=5ce59ff5e7543c27c40223c2d0b31766067389076afd2dabf68b0cd92507ebb8, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:07:56:e1:18:f8:b6:10:5b:33:5c:7a:01:98:
4f:7f:89:62:24:cb:ca:fd:44:12:1b:85:49:7a:6a:
16:e5:67:5b:60:4a:4f:22:c6:41:d7:d1:50:e8:6e:
0f:ec:56:4c:88:77:f6:c6:d5:47:1f:4a:ef:03:0b:
d6:90:d5:da:9d:48:a4:ed:8b:56:4c:bd:2b:ad:b4:
e3:eb:32:62:bd:49:7d:41:6e:1d:72:67:05:33:fb:
22:35:15:96:cc:00:9e:cb:96:18:e2:48:bc:32:26:
e8:0d:f6:03:07:56:92:58:ac:5a:3b:20:86:6c:1d:
96:1b:a8:6e:d5:d2:bf:6c:77:0a:01:45:2c:b7:4e:
93:1b:f6:8b:fe:c3:60:1f:a8:39:b9:1a:a6:54:03:
01:da:b1:90:26:58:9f:13:86:2d:1d:96:cb:a6:39:
3b:86:3f:de:a1:9d:48:09:c8:a7:18:07:6b:ca:bf:
85:c1:ff:fc:b2:6c:fe:22:9e:67:87:cb:50:21:0c:
e0:21:55:59:ab:4a:fa:24:d3:fc:77:23:c8:c4:90:
0e:ca:a7:39:9f:74:b7:a5:ac:37:b4:9f:94:cb:95:
65:ca:54:62:8b:1e:65:67:36:ff:da:9e:1c:f9:59:
3a:50:02:18:be:66:75:c2:fb:e2:40:92:0b:73:8d:
6e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B8:84:EF:AE:8F:8F:92:25:BD:E1:CF:57:B5:CB:D7:D0:6B:50:76
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5ff4b44a-41c9-4bc0-b77e-520fd1d7927e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.214.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:11:75:ed:04:2c:d8:0d:31:67:b8:21:d6:38:4f:03:4a:11:
1f:9c:99:4b:da:a0:32:18:5f:d1:62:cc:0f:d8:38:87:fa:af:
87:03:75:3f:fa:cf:9d:ec:d5:71:a0:b6:5a:be:81:2c:af:15:
5c:fa:2d:3e:57:73:f5:12:eb:c3:6a:4e:e0:a6:6d:f6:9c:41:
f8:06:a2:6e:de:1d:f5:1c:14:d8:37:07:cc:44:ce:9a:69:bc:
e1:2f:da:d0:32:76:1e:42:b8:0b:98:3c:9c:d2:87:61:7d:4f:
47:71:57:07:7b:7e:e6:de:a3:d4:79:06:5d:72:d7:ec:36:71:
b7:91:9c:85:a7:88:1e:19:6a:9c:a7:7c:20:38:89:38:e6:86:
d9:ac:12:55:39:30:34:21:d6:1f:f2:32:ea:c3:8a:5c:7c:e4:
1b:91:c8:04:db:57:49:98:6a:a5:b6:65:a3:45:b3:fc:b0:9f:
63:f2:7c:9e:f3:dc:68:5e:d2:70:20:0f:93:ee:65:a2:49:4e:
bf:d1:7a:2d:a5:4d:f8:8c:fb:d4:c2:de:44:ab:dc:df:7e:87:
45:1f:b0:c2:d5:fd:9b:7e:37:61:de:2f:d3:9d:f4:9f:3f:2f:
ab:d8:09:47:38:20:27:0f:cb:3c:9e:db:0c:a1:23:9e:14:cb:
b2:e7:c7:50
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQNcTdcHyb9fd9mY2XBdVvhnww8cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNDExMDAwMDI0WhcNMjUwNTE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A1Y2U1OWZmNWU3NTQzYzI3YzQwMjIzYzJkMGIzMTc2NjA2
NzM4OTA3NmFmZDJkYWJmNjhiMGNkOTI1MDdlYmI4MS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDSB1bhGPi2EFszXHoBmE9/iWIky8r9RBIbhUl6ahblZ1tg
Sk8ixkHX0VDobg/sVkyId/bG1UcfSu8DC9aQ1dqdSKTti1ZMvSuttOPrMmK9SX1B
bh1yZwUz+yI1FZbMAJ7LlhjiSLwyJugN9gMHVpJYrFo7IIZsHZYbqG7V0r9sdwoB
RSy3TpMb9ov+w2AfqDm5GqZUAwHasZAmWJ8Thi0dlsumOTuGP96hnUgJyKcYB2vK
v4XB//yybP4inmeHy1AhDOAhVVmrSvok0/x3I8jEkA7KpzmfdLelrDe0n5TLlWXK
VGKLHmVnNv/anhz5WTpQAhi+ZnXC++JAkgtzjW4xAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUeriE766Pj5IlveHPV7XL19BrUHYwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkLzVmZjRiNDRhLTQxYzktNGJjMC1iNzdlLTUyMGZkMWQ3OTI3ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAX+dYwDQYJKoZIhvcNAQELBQADggEBAGsRde0ELNgNMWe4IdY4TwNKER+c
mUvaoDIYX9FizA/YOIf6r4cDdT/6z53s1XGgtlq+gSyvFVz6LT5Xc/US68NqTuCm
bfacQfgGom7eHfUcFNg3B8xEzpppvOEv2tAydh5CuAuYPJzSh2F9T0dxVwd7fube
o9R5Bl1y1+w2cbeRnIWniB4ZapynfCA4iTjmhtmsElU5MDQh1h/yMurDilx85BuR
yATbV0mYaqW2ZaNFs/ywn2PyfJ7z3Ghe0nAgD5PuZaJJTr/Rei2lTfiM+9TC3kSr
3N9+h0UfsMLV/Zt+N2HeL9Od9J8/L6vYCUc4ICcPyzye2wyhI54Uy7Lnx1A=
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:32 2025 by rpki-client on console.sobornost.net