Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/07f3f9f9-6ab0-46bd-bc5f-9dfb2f8b8bd0.roa
File: 07f3f9f9-6ab0-46bd-bc5f-9dfb2f8b8bd0.roa (raw, json)
Hash identifier: WezERVOIkT+wJa/oMnPWNAQFdBcS9ySTVPY6QHKqq2k=
Subject key identifier: 4D:2C:02:45:3E:E1:78:14:04:16:74:4B:F8:8D:D5:3B:04:AA:A6:11
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 088EC4233D4EF12D58AACE2477C713E3621E44DF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/07f3f9f9-6ab0-46bd-bc5f-9dfb2f8b8bd0.roa
Signing time: Tue 01 Apr 2025 00:41:29 +0000
ROA not before: Tue 01 Apr 2025 00:41:29 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.94.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:8e:c4:23:3d:4e:f1:2d:58:aa:ce:24:77:c7:13:e3:62:1e:44:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Apr 1 00:41:29 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=4528f8f4f486e4c61169142741dfd885de9cced6ececfb09342b49c2317b9c5f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e6:5f:dc:f2:19:13:55:8e:53:85:e4:8e:78:
aa:6d:24:54:58:e4:f2:39:6f:4b:bc:fc:d1:2b:94:
eb:9f:c8:04:13:d8:1e:3e:65:af:be:f9:fb:bb:75:
82:bd:43:f1:0e:ae:a2:43:a5:87:58:65:93:37:7c:
a4:fa:fc:65:15:98:28:ac:83:31:46:38:8d:e7:65:
af:02:98:69:07:36:62:72:2c:13:9b:60:ce:41:45:
f5:ec:83:b6:bc:b1:5b:83:cc:27:5b:fb:3f:54:4d:
10:aa:b6:df:71:a3:60:6c:cf:4b:6d:34:88:cc:5f:
45:da:21:77:4b:d2:90:75:ae:ec:e9:cc:b0:62:7b:
6b:ff:b9:bd:1c:82:7c:ea:9a:5d:20:4c:92:83:2c:
82:cd:88:9f:4f:98:66:51:d0:09:dc:7d:3e:b8:a6:
2c:a4:38:c4:e7:af:3e:3b:81:28:1f:0d:0f:9f:a6:
f9:4b:a0:ca:d8:9b:00:16:ae:36:6c:0b:1c:74:64:
3f:48:8c:b3:30:55:73:38:e9:2a:27:a2:26:a0:4e:
66:67:67:05:b8:d8:97:af:b1:51:93:86:9a:1d:78:
ca:d2:8f:4e:b0:6d:f8:15:8d:96:89:38:1c:40:0d:
dc:71:ce:c8:94:9f:e0:43:e0:75:f1:fc:b1:e6:6b:
f1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2C:02:45:3E:E1:78:14:04:16:74:4B:F8:8D:D5:3B:04:AA:A6:11
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/07f3f9f9-6ab0-46bd-bc5f-9dfb2f8b8bd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.94.0.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:63:8d:e2:a7:d6:11:df:22:0e:2d:69:ce:fe:87:f8:54:b6:
b4:70:e2:43:76:54:f8:4b:4c:1b:39:60:f5:19:7f:3f:c1:96:
24:2f:73:86:a9:17:61:36:10:a0:7e:6c:6a:05:04:5c:41:ad:
15:66:f0:1f:15:66:51:45:80:66:54:7e:2a:d5:f1:04:5a:96:
db:d9:ce:cd:30:0f:40:a7:5e:f2:16:ba:2e:66:16:f0:83:e7:
b3:20:1a:4a:bc:bb:9e:9d:d6:0e:da:a1:fe:90:fc:52:d6:b5:
6d:ab:be:fd:16:7e:83:39:14:fe:bf:43:2e:47:04:ad:c3:4c:
c4:66:1b:4f:e3:6a:72:a2:94:3e:56:b9:a2:3c:95:c4:54:38:
14:25:a5:71:0b:7b:f5:67:ea:f7:e7:8c:4e:59:19:65:42:82:
90:3f:c1:a5:ba:ad:3c:3a:f5:d9:da:39:63:1a:06:64:63:d9:
d6:13:59:b2:80:ee:6f:15:1c:d2:ed:1d:0f:98:2f:f3:31:df:
7b:c7:07:f2:51:ad:3f:4a:e5:71:4f:5a:8f:0b:e8:ae:da:60:
00:65:25:9c:ca:cf:f0:2d:6a:ff:b5:87:1a:30:a7:89:08:0e:
66:2c:a0:6b:ca:7d:5c:aa:b6:c8:5f:cc:e0:a5:ad:a2:4a:c6:
6d:63:33:d7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCI7EIz1O8S1Yqs4kd8cT42IeRN8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDAxMDA0MTI5WhcNMjUwNTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A0NTI4ZjhmNGY0ODZlNGM2MTE2OTE0Mjc0MWRmZDg4NWRl
OWNjZWQ2ZWNlY2ZiMDkzNDJiNDljMjMxN2I5YzVmMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDR5l/c8hkTVY5TheSOeKptJFRY5PI5b0u8/NErlOufyAQT
2B4+Za+++fu7dYK9Q/EOrqJDpYdYZZM3fKT6/GUVmCisgzFGOI3nZa8CmGkHNmJy
LBObYM5BRfXsg7a8sVuDzCdb+z9UTRCqtt9xo2Bsz0ttNIjMX0XaIXdL0pB1ruzp
zLBie2v/ub0cgnzqml0gTJKDLILNiJ9PmGZR0AncfT64piykOMTnrz47gSgfDQ+f
pvlLoMrYmwAWrjZsCxx0ZD9IjLMwVXM46SonoiagTmZnZwW42JevsVGThpodeMrS
j06wbfgVjZaJOBxADdxxzsiUn+BD4HXx/LHma/H1AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUTSwCRT7heBQEFnRL+I3VOwSqphEwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzA3ZjNmOWY5LTZhYjAtNDZiZC1iYzVmLTlkZmIyZjhiOGJkMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAI0XgAwDQYJKoZIhvcNAQELBQADggEBACpjjeKn1hHfIg4tac7+h/hUtrRw
4kN2VPhLTBs5YPUZfz/BliQvc4apF2E2EKB+bGoFBFxBrRVm8B8VZlFFgGZUfirV
8QRaltvZzs0wD0CnXvIWui5mFvCD57MgGkq8u56d1g7aof6Q/FLWtW2rvv0WfoM5
FP6/Qy5HBK3DTMRmG0/janKilD5WuaI8lcRUOBQlpXELe/Vn6vfnjE5ZGWVCgpA/
waW6rTw69dnaOWMaBmRj2dYTWbKA7m8VHNLtHQ+YL/Mx33vHB/JRrT9K5XFPWo8L
6K7aYABlJZzKz/Atav+1hxowp4kIDmYsoGvKfVyqtshfzOClraJKxm1jM9c=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:36 2025 by rpki-client on console.sobornost.net