Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f1a52e1-3747-4c2e-9683-e98f354caa3d.roa
File: 4f1a52e1-3747-4c2e-9683-e98f354caa3d.roa (raw, json)
Hash identifier: lSp/EXh8yxUw5DrVtL8z0qMDrWP+t+g+2E8dH2PLWQw=
Subject key identifier: 7C:10:58:45:C6:8E:D9:F6:14:2E:22:10:CD:91:D9:06:F7:EB:42:FD
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 35029447AA0ED623D2DFF6D9A0550F071DCF7510
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f1a52e1-3747-4c2e-9683-e98f354caa3d.roa
Signing time: Fri 28 Mar 2025 17:40:12 +0000
ROA not before: Fri 28 Mar 2025 17:40:12 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 13.239.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:02:94:47:aa:0e:d6:23:d2:df:f6:d9:a0:55:0f:07:1d:cf:75:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 28 17:40:12 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: serialNumber=e0709dd544a182247907c02ceb0d70a45796aff05adf365c236149ae1562a3da, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6e:53:f2:8f:09:e6:66:75:98:e6:ec:37:1c:
9f:0f:3f:cd:7a:ab:e4:eb:0c:a6:7b:fd:d5:ff:1c:
de:32:0d:b6:45:1e:49:ed:e2:e7:b5:9c:7c:bc:63:
52:2f:01:02:00:ac:2f:18:74:d3:9d:a7:78:fc:64:
bf:34:9b:a8:ec:b8:fd:9c:0d:03:57:76:94:b2:ef:
a0:22:64:04:c1:22:e2:92:72:77:93:bc:37:92:a9:
d5:18:64:18:0c:e7:f1:a8:e2:f2:89:d7:c5:6c:bf:
32:4f:45:96:41:b8:bf:e2:bc:a6:27:70:3c:99:3d:
00:e5:bb:cc:89:71:48:2e:42:9b:6b:0d:a2:37:ad:
05:a5:3e:14:ca:7f:12:fa:2e:e8:e2:74:7d:80:04:
85:1b:a4:2c:b2:d8:d5:54:ff:db:c1:0f:66:a8:06:
77:8e:af:0c:ff:86:7c:7f:b5:4f:97:ee:8b:1c:1f:
29:c3:80:db:18:7d:a8:bc:bd:a8:77:e2:8a:9d:43:
bc:3d:8a:b7:de:0f:48:14:5b:47:cb:2e:c4:e7:43:
ca:62:ef:2c:ae:1f:30:9b:3e:96:aa:72:15:fa:ce:
ab:f3:a5:b5:02:be:9d:70:6c:34:41:10:77:85:1b:
cb:21:39:4c:8b:6a:73:44:82:4c:c7:89:2e:1e:f8:
2e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:10:58:45:C6:8E:D9:F6:14:2E:22:10:CD:91:D9:06:F7:EB:42:FD
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f1a52e1-3747-4c2e-9683-e98f354caa3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.239.245.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:6d:bf:95:b5:70:40:5f:c3:78:35:db:9e:3e:77:3c:d0:64:
d1:cf:ef:ca:0d:8e:08:ec:95:07:67:7a:68:20:7e:75:37:c7:
85:8f:5d:3f:33:de:8c:ef:18:76:19:72:ed:91:e8:5c:ad:50:
da:c1:72:45:26:dd:e4:a1:fd:2f:ba:1e:14:8e:58:55:0a:5c:
1f:fc:80:ed:e8:e2:06:3c:35:82:35:61:e4:e6:da:46:ae:f3:
73:fe:3f:3a:2b:de:3f:d8:b1:1a:42:00:0b:0b:b7:f8:f5:c1:
8a:f5:c7:e1:45:e3:38:45:b8:69:fc:46:89:ab:7c:ce:15:81:
a2:56:d9:44:51:08:4b:c2:5e:ee:98:2c:d8:94:e3:8c:7b:33:
10:29:09:de:b5:6d:78:6b:05:23:d8:20:96:b2:a7:44:bf:50:
21:52:30:ca:ab:60:b1:5d:27:c1:a9:1b:20:75:4a:fc:ad:f3:
b2:2f:39:f2:30:66:4f:d8:a7:18:a6:d8:36:6e:fd:b7:dc:e2:
2a:02:d0:a8:61:df:72:f8:aa:bb:4e:62:9e:0d:ae:c7:4b:6d:
d6:ad:64:31:69:72:cc:a9:4f:95:1f:37:e2:20:0e:4e:1d:6d:
c2:b5:73:14:05:30:75:9a:3c:e2:4b:d1:d0:1d:e3:93:00:9d:
f5:b0:fd:0a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNQKUR6oO1iPS3/bZoFUPBx3PdRAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzI4MTc0MDEyWhcNMjUwNTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BlMDcwOWRkNTQ0YTE4MjI0NzkwN2MwMmNlYjBkNzBhNDU3
OTZhZmYwNWFkZjM2NWMyMzYxNDlhZTE1NjJhM2RhMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDnblPyjwnmZnWY5uw3HJ8PP816q+TrDKZ7/dX/HN4yDbZF
Hknt4ue1nHy8Y1IvAQIArC8YdNOdp3j8ZL80m6jsuP2cDQNXdpSy76AiZATBIuKS
cneTvDeSqdUYZBgM5/Go4vKJ18VsvzJPRZZBuL/ivKYncDyZPQDlu8yJcUguQptr
DaI3rQWlPhTKfxL6LujidH2ABIUbpCyy2NVU/9vBD2aoBneOrwz/hnx/tU+X7osc
HynDgNsYfai8vah34oqdQ7w9irfeD0gUW0fLLsTnQ8pi7yyuHzCbPpaqchX6zqvz
pbUCvp1wbDRBEHeFG8shOUyLanNEgkzHiS4e+C4pAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUfBBYRcaO2fYULiIQzZHZBvfrQv0wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzRmMWE1MmUxLTM3NDctNGMyZS05NjgzLWU5OGYzNTRjYWEzZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAN7/UwDQYJKoZIhvcNAQELBQADggEBABptv5W1cEBfw3g1254+dzzQZNHP
78oNjgjslQdnemggfnU3x4WPXT8z3ozvGHYZcu2R6FytUNrBckUm3eSh/S+6HhSO
WFUKXB/8gO3o4gY8NYI1YeTm2kau83P+Pzor3j/YsRpCAAsLt/j1wYr1x+FF4zhF
uGn8RomrfM4VgaJW2URRCEvCXu6YLNiU44x7MxApCd61bXhrBSPYIJayp0S/UCFS
MMqrYLFdJ8GpGyB1Svyt87IvOfIwZk/Ypxim2DZu/bfc4ioC0Khh33L4qrtOYp4N
rsdLbdatZDFpcsypT5UfN+IgDk4dbcK1cxQFMHWaPOJL0dAd45MAnfWw/Qo=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:41 2025 by rpki-client on console.sobornost.net