Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93fa564b-5c1a-49c5-8314-2742e0925cd5.roa
File: 93fa564b-5c1a-49c5-8314-2742e0925cd5.roa (raw, json)
Hash identifier: 9N5iisdYxA+akDTAptXFc2m81BgAVSdIZ5vIO7NwLk0=
Subject key identifier: F7:0A:A3:6F:E4:92:21:67:57:AF:74:7B:4A:52:9C:FB:77:E0:B8:26
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 731FF98CAF80440929F5CCECC740A68A4A3EE4AD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93fa564b-5c1a-49c5-8314-2742e0925cd5.roa
Signing time: Fri 28 Mar 2025 18:11:00 +0000
ROA not before: Fri 28 Mar 2025 18:11:00 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 52.93.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:1f:f9:8c:af:80:44:09:29:f5:cc:ec:c7:40:a6:8a:4a:3e:e4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 28 18:11:00 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: serialNumber=82ec7895e42bb6b293ff2a6bba4e7db72626df6a4bbbf0295a42c471b6cae4e8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:14:da:8e:ab:63:ad:f5:7a:11:c8:45:48:e8:
b9:10:72:b5:cb:13:ee:e7:73:98:f9:10:1b:7d:d9:
63:f7:25:f7:a2:f4:ea:d0:85:be:e5:1d:b6:eb:94:
18:be:ce:e4:56:99:c7:5e:b5:7a:89:a7:ed:1c:48:
25:29:3f:e7:1b:84:59:59:29:43:e3:9e:b4:b5:e5:
85:04:8c:65:0a:98:6b:57:5b:81:07:4d:ec:8d:70:
13:a2:2b:f4:05:fd:cc:3a:35:f2:26:65:5d:90:58:
ff:cd:93:1f:db:b7:3b:c4:69:d4:6c:10:0d:31:a2:
2e:45:18:60:73:c5:18:45:82:72:73:14:1a:e5:95:
fa:13:48:f7:da:63:c8:e5:de:e8:a4:5f:48:b0:4d:
4c:fb:04:5c:30:a7:53:db:5b:a4:ea:e5:39:05:18:
10:73:30:36:0d:8a:d1:ff:fe:26:62:2b:8b:74:88:
8a:1f:a1:7f:52:ce:c8:4c:ec:e5:9a:70:11:b6:84:
43:c2:0b:fe:cb:14:3d:71:45:a2:c0:aa:99:da:72:
5d:4d:2b:8f:ce:38:bd:5e:d5:57:2d:fa:4d:9f:86:
b4:7f:79:97:2e:6f:32:58:77:47:31:e6:b2:6f:0e:
37:2d:e3:de:65:98:da:61:1e:af:68:da:e0:15:06:
ab:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0A:A3:6F:E4:92:21:67:57:AF:74:7B:4A:52:9C:FB:77:E0:B8:26
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93fa564b-5c1a-49c5-8314-2742e0925cd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.93.4.0/24
Signature Algorithm: sha256WithRSAEncryption
70:75:4a:f0:da:b4:7a:5e:4a:fb:e4:c1:92:24:95:e0:b0:7e:
82:90:96:ac:13:07:9c:a0:9f:84:8f:67:fa:20:8a:6d:29:ad:
c2:f7:86:d5:5b:98:1e:ae:43:e0:ec:20:a9:c9:cf:9d:6d:a7:
cd:27:d9:0d:7a:b5:9c:13:16:62:38:1b:16:7f:ae:9d:11:ae:
84:cb:3f:91:7b:ec:08:a0:63:5d:e7:d3:7b:2d:fe:7d:53:18:
9f:ea:10:e5:99:d7:1d:92:3d:07:bd:1c:51:cb:1c:8f:f8:4b:
1b:1a:6d:d6:ad:01:bb:21:de:28:32:d5:c8:70:ce:e5:69:17:
3e:be:51:4d:04:46:41:0d:53:d4:59:e3:14:25:6a:43:2e:7a:
29:c0:0a:dd:ae:af:5f:ed:a2:71:98:62:4e:b4:21:74:1e:6a:
01:29:f2:aa:4d:b6:a7:fa:33:94:fe:e9:d9:a1:56:a0:7a:0a:
50:a1:43:c4:b2:b8:02:80:8f:a0:73:f2:81:7f:89:9d:68:fc:
a2:fa:a7:58:03:d5:fe:78:4f:fa:2a:b0:6e:d8:4f:7b:db:f9:
b1:a4:26:61:ce:56:19:19:2e:c5:56:48:6e:34:f6:43:11:98:
61:09:4d:c8:bb:46:e5:d9:5a:7c:78:88:7f:db:bc:9f:77:fd:
c3:cb:4a:15
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUcx/5jK+ARAkp9czsx0Cmiko+5K0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzI4MTgxMTAwWhcNMjUwNTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A4MmVjNzg5NWU0MmJiNmIyOTNmZjJhNmJiYTRlN2RiNzI2
MjZkZjZhNGJiYmYwMjk1YTQyYzQ3MWI2Y2FlNGU4MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCpFNqOq2Ot9XoRyEVI6LkQcrXLE+7nc5j5EBt92WP3Jfei
9OrQhb7lHbbrlBi+zuRWmcdetXqJp+0cSCUpP+cbhFlZKUPjnrS15YUEjGUKmGtX
W4EHTeyNcBOiK/QF/cw6NfImZV2QWP/Nkx/btzvEadRsEA0xoi5FGGBzxRhFgnJz
FBrllfoTSPfaY8jl3uikX0iwTUz7BFwwp1PbW6Tq5TkFGBBzMDYNitH//iZiK4t0
iIofoX9SzshM7OWacBG2hEPCC/7LFD1xRaLAqpnacl1NK4/OOL1e1Vct+k2fhrR/
eZcubzJYd0cx5rJvDjct495lmNphHq9o2uAVBqtTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU9wqjb+SSIWdXr3R7SlKc+3fguCYwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzkzZmE1NjRiLTVjMWEtNDljNS04MzE0LTI3NDJlMDkyNWNkNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA0XQQwDQYJKoZIhvcNAQELBQADggEBAHB1SvDatHpeSvvkwZIkleCwfoKQ
lqwTB5ygn4SPZ/ogim0prcL3htVbmB6uQ+DsIKnJz51tp80n2Q16tZwTFmI4GxZ/
rp0RroTLP5F77AigY13n03st/n1TGJ/qEOWZ1x2SPQe9HFHLHI/4SxsabdatAbsh
3igy1chwzuVpFz6+UU0ERkENU9RZ4xQlakMueinACt2ur1/tonGYYk60IXQeagEp
8qpNtqf6M5T+6dmhVqB6ClChQ8SyuAKAj6Bz8oF/iZ1o/KL6p1gD1f54T/oqsG7Y
T3vb+bGkJmHOVhkZLsVWSG409kMRmGEJTci7RuXZWnx4iH/bvJ93/cPLShU=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:46 2025 by rpki-client on console.sobornost.net