Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/805aa163-38ec-4123-b4c1-55955c809e8a.roa
File: 805aa163-38ec-4123-b4c1-55955c809e8a.roa (raw, json)
Hash identifier: xRMgCkDTGIueE213DFPlDGMcLxbja+vy3truRvnEiBU=
Subject key identifier: F4:61:F6:70:63:BA:BD:65:FB:A1:B6:E3:D5:95:87:82:08:28:16:1E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 21F20936D053F7EE71F89A981C8CDE5CA24C8A35
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/805aa163-38ec-4123-b4c1-55955c809e8a.roa
Signing time: Mon 31 Mar 2025 17:30:30 +0000
ROA not before: Mon 31 Mar 2025 17:30:30 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 8987
IP address blocks: 18.253.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:f2:09:36:d0:53:f7:ee:71:f8:9a:98:1c:8c:de:5c:a2:4c:8a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 31 17:30:30 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=67d3e8eeefb631fd7f6c153778ad03cee256fbc9ba5f2a35a60ae34ffd491687, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:a3:be:d9:00:62:56:23:88:0f:0f:9a:dd:
83:e2:05:7e:33:f3:da:3d:91:52:ee:1d:69:ce:74:
02:a0:72:fc:6a:68:03:59:56:67:b1:f0:6b:dd:d4:
08:30:99:54:c6:7b:fa:f5:64:f8:c7:80:8a:d9:d8:
16:a6:3f:1a:53:68:21:7b:07:fd:4b:cb:a2:b9:4c:
7f:ce:33:d9:0c:86:a4:6d:01:ba:72:3c:27:89:56:
96:df:52:49:71:37:1a:3a:c5:f6:22:79:f6:e6:53:
6d:20:9a:b6:30:a8:99:05:9d:20:fe:58:d7:23:a1:
e3:0a:16:a6:d2:26:3a:bb:0e:55:a0:d2:37:32:fa:
2e:ad:f1:1b:6d:59:ea:58:92:a6:f1:44:56:f2:10:
aa:56:f1:d3:9d:5e:ef:15:d6:79:33:3f:a9:ab:22:
59:73:43:41:5b:45:85:26:d1:0a:b0:07:f7:56:a1:
93:91:6c:d6:7a:f2:04:10:bf:ff:b3:c2:3f:29:1b:
04:f9:d3:3e:7b:20:30:2d:cf:92:b0:f1:0a:cd:72:
f5:f7:22:7b:c4:11:8a:bb:5e:7f:85:b6:66:12:af:
ec:fc:1f:ec:27:1f:b0:b5:37:97:fa:4e:5d:80:e2:
39:a8:59:14:de:e1:24:16:b8:4b:34:c0:28:93:20:
b2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:61:F6:70:63:BA:BD:65:FB:A1:B6:E3:D5:95:87:82:08:28:16:1E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/805aa163-38ec-4123-b4c1-55955c809e8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.253.0.0/24
Signature Algorithm: sha256WithRSAEncryption
52:8f:89:c4:25:aa:fd:3e:b3:f1:fd:4c:2c:4a:f6:67:34:ac:
1f:c2:da:17:10:17:cf:da:07:06:ce:bc:34:aa:06:f7:f9:1c:
da:89:07:0e:07:7e:e5:75:56:06:ce:a5:98:af:99:0c:85:3f:
50:b9:6e:69:62:28:f7:e5:c9:14:84:5f:48:0e:ab:b3:65:7e:
e7:13:70:02:a5:57:43:97:53:0d:29:a0:fd:80:2a:6a:68:8b:
ea:b9:5b:61:e9:7b:97:71:8b:97:03:95:dc:e5:a9:48:1d:17:
3a:ff:45:81:99:18:f4:30:2a:ea:dc:1d:9b:74:41:52:16:ab:
e9:03:21:2b:cd:a2:e8:4c:45:48:f9:99:f5:d2:8d:01:87:11:
32:bd:29:29:d3:04:c7:87:20:ba:61:09:85:19:9e:0e:ad:a4:
8d:03:60:df:06:4c:3f:42:54:f0:21:65:98:ed:d1:00:b8:e3:
e4:20:2f:6c:83:60:a2:6e:dc:78:a3:0e:c1:38:1a:98:1e:c1:
40:72:16:1f:46:ac:23:37:25:84:a7:73:08:61:99:7e:44:7e:
e4:90:c9:3b:a1:c9:c7:82:e3:a8:0e:53:be:bb:5b:8b:7a:f8:
93:41:77:b1:95:0c:d3:30:06:9b:4c:b9:44:62:1c:a7:2d:8c:
4f:41:a1:bf
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIfIJNtBT9+5x+JqYHIzeXKJMijUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzMxMTczMDMwWhcNMjUwNTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A2N2QzZThlZWVmYjYzMWZkN2Y2YzE1Mzc3OGFkMDNjZWUy
NTZmYmM5YmE1ZjJhMzVhNjBhZTM0ZmZkNDkxNjg3MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDElqO+2QBiViOIDw+a3YPiBX4z89o9kVLuHWnOdAKgcvxq
aANZVmex8Gvd1AgwmVTGe/r1ZPjHgIrZ2BamPxpTaCF7B/1Ly6K5TH/OM9kMhqRt
AbpyPCeJVpbfUklxNxo6xfYiefbmU20gmrYwqJkFnSD+WNcjoeMKFqbSJjq7DlWg
0jcy+i6t8RttWepYkqbxRFbyEKpW8dOdXu8V1nkzP6mrIllzQ0FbRYUm0QqwB/dW
oZORbNZ68gQQv/+zwj8pGwT50z57IDAtz5Kw8QrNcvX3InvEEYq7Xn+FtmYSr+z8
H+wnH7C1N5f6Tl2A4jmoWRTe4SQWuEs0wCiTILJjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU9GH2cGO6vWX7obbj1ZWHgggoFh4wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzgwNWFhMTYzLTM4ZWMtNDEyMy1iNGMxLTU1OTU1YzgwOWU4YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAS/QAwDQYJKoZIhvcNAQELBQADggEBAFKPicQlqv0+s/H9TCxK9mc0rB/C
2hcQF8/aBwbOvDSqBvf5HNqJBw4HfuV1VgbOpZivmQyFP1C5bmliKPflyRSEX0gO
q7NlfucTcAKlV0OXUw0poP2AKmpoi+q5W2Hpe5dxi5cDldzlqUgdFzr/RYGZGPQw
KurcHZt0QVIWq+kDISvNouhMRUj5mfXSjQGHETK9KSnTBMeHILphCYUZng6tpI0D
YN8GTD9CVPAhZZjt0QC44+QgL2yDYKJu3HijDsE4GpgewUByFh9GrCM3JYSncwhh
mX5EfuSQyTuhyceC46gOU767W4t6+JNBd7GVDNMwBptMuURiHKctjE9Bob8=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:45 2025 by rpki-client on console.sobornost.net