Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/730c30f4-b9c5-4357-8ec7-06334f835343.roa
File: 730c30f4-b9c5-4357-8ec7-06334f835343.roa (raw, json)
Hash identifier: EdGDAFBVwg3JcoUup0q8sC/k8W0D6ApnE7IZZQn7OsQ=
Subject key identifier: D3:A3:72:E0:A4:AA:1C:1A:B9:E6:75:65:E4:7C:13:78:56:3A:C5:40
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0CB450DF568BE85CDA2F28E68EA03DDA3BC1E4E8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/730c30f4-b9c5-4357-8ec7-06334f835343.roa
Signing time: Mon 31 Mar 2025 17:20:52 +0000
ROA not before: Mon 31 Mar 2025 17:20:52 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.134.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:b4:50:df:56:8b:e8:5c:da:2f:28:e6:8e:a0:3d:da:3b:c1:e4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 31 17:20:52 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=9b018cd9d3c0aeaea8dbdaf41d761355f3bd457a17b15a5305dc5bb026a4f506, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:79:00:0b:83:83:d4:df:3c:1b:b6:ac:d7:45:
05:bc:78:29:0a:93:a2:8f:ae:bb:e3:9a:04:3a:ac:
76:b6:ee:92:f6:36:aa:f4:66:84:4e:b6:0b:fe:3d:
07:8e:30:48:e0:7f:7c:c8:7d:c3:59:b3:30:27:88:
32:32:9b:9f:31:8b:5b:cd:7c:24:ab:65:05:ea:a7:
dd:15:6c:1e:8d:65:e0:b6:10:97:7a:33:6e:3a:f7:
e1:90:44:8e:b2:d4:18:56:da:cc:14:5c:c9:37:f3:
fd:8b:32:b1:b8:2c:6c:a2:62:70:9f:89:ab:af:52:
19:2b:32:cb:80:16:dd:bc:84:e3:e4:a2:68:77:62:
02:ae:d1:13:1e:ff:b3:65:86:c3:db:6c:1b:ff:ed:
8c:6a:fe:cd:46:d1:a8:37:70:d8:07:db:9a:87:75:
38:ac:a0:d8:04:f4:b7:2f:ea:38:29:34:72:1c:5b:
c6:c5:a6:94:41:23:05:de:11:c4:20:d4:66:94:96:
3b:2b:6c:08:7b:5e:cc:29:81:8a:e3:17:4f:c9:59:
94:3f:3b:b4:59:fb:0b:13:45:9d:76:b7:ff:6c:1e:
14:f2:c5:f8:67:7d:12:44:ee:71:4b:b4:9f:86:2c:
43:ba:80:1c:20:04:e7:c4:fa:23:d1:0b:35:e7:54:
59:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A3:72:E0:A4:AA:1C:1A:B9:E6:75:65:E4:7C:13:78:56:3A:C5:40
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/730c30f4-b9c5-4357-8ec7-06334f835343.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.134.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:e4:c9:09:e0:68:0a:6d:f3:33:4d:b7:9c:aa:a7:2f:31:a7:
d3:ae:dc:5b:a1:3a:fa:f8:6e:8c:b5:24:ca:46:05:71:bc:45:
28:d7:bc:97:dc:41:c3:a0:d6:0f:fa:31:b9:23:3d:c0:bc:60:
c5:8b:7a:04:ad:4d:a1:97:10:a0:cc:3c:f3:37:07:71:13:87:
88:f1:de:cd:05:e9:c5:e5:3c:50:0e:39:43:46:b0:81:23:f5:
1b:7f:89:23:40:7c:3a:77:8b:74:a9:3a:15:c1:7b:35:ed:e0:
49:58:04:58:82:d4:03:97:73:13:0c:52:fd:ab:87:89:c9:3d:
cd:ab:4b:4b:b7:ca:a4:63:6f:36:65:91:15:2a:bb:b0:7f:45:
fe:81:cc:70:de:14:87:c2:cc:2f:61:a3:44:97:dc:1a:33:da:
28:87:7b:0d:6d:7e:39:4b:85:6d:23:08:21:ac:90:d2:8d:bd:
43:28:24:36:eb:47:e9:d7:15:c5:e5:50:13:c8:91:d9:f6:75:
22:7a:13:c3:0d:5c:5b:70:51:46:87:4a:4b:3f:a8:25:4d:15:
32:5b:17:62:fe:39:42:6b:38:e1:d2:bc:0d:d3:c2:6d:eb:48:
ba:e6:2b:9a:d0:22:c8:4f:28:a8:0e:28:60:a3:e0:b8:27:3d:
36:e5:98:57
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUDLRQ31aL6FzaLyjmjqA92jvB5OgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzMxMTcyMDUyWhcNMjUwNTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A5YjAxOGNkOWQzYzBhZWFlYThkYmRhZjQxZDc2MTM1NWYz
YmQ0NTdhMTdiMTVhNTMwNWRjNWJiMDI2YTRmNTA2MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCXeQALg4PU3zwbtqzXRQW8eCkKk6KPrrvjmgQ6rHa27pL2
Nqr0ZoROtgv+PQeOMEjgf3zIfcNZszAniDIym58xi1vNfCSrZQXqp90VbB6NZeC2
EJd6M2469+GQRI6y1BhW2swUXMk38/2LMrG4LGyiYnCfiauvUhkrMsuAFt28hOPk
omh3YgKu0RMe/7NlhsPbbBv/7Yxq/s1G0ag3cNgH25qHdTisoNgE9Lcv6jgpNHIc
W8bFppRBIwXeEcQg1GaUljsrbAh7XswpgYrjF0/JWZQ/O7RZ+wsTRZ12t/9sHhTy
xfhnfRJE7nFLtJ+GLEO6gBwgBOfE+iPRCzXnVFk7AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU06Ny4KSqHBq55nVl5HwTeFY6xUAwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzczMGMzMGY0LWI5YzUtNDM1Ny04ZWM3LTA2MzM0ZjgzNTM0My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCIhjANBgkqhkiG9w0BAQsFAAOCAQEAduTJCeBoCm3zM023nKqnLzGn067c
W6E6+vhujLUkykYFcbxFKNe8l9xBw6DWD/oxuSM9wLxgxYt6BK1NoZcQoMw88zcH
cROHiPHezQXpxeU8UA45Q0awgSP1G3+JI0B8OneLdKk6FcF7Ne3gSVgEWILUA5dz
EwxS/auHick9zatLS7fKpGNvNmWRFSq7sH9F/oHMcN4Uh8LML2GjRJfcGjPaKId7
DW1+OUuFbSMIIayQ0o29QygkNutH6dcVxeVQE8iR2fZ1InoTww1cW3BRRodKSz+o
JU0VMlsXYv45Qms44dK8DdPCbetIuuYrmtAiyE8oqA4oYKPguCc9NuWYVw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:44 2025 by rpki-client on console.sobornost.net