Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a324e17-7433-414a-adaa-75924fda97b8.roa
File: 9a324e17-7433-414a-adaa-75924fda97b8.roa (raw, json)
Hash identifier: cHO3fGjPokp8tEuO2CxBuUdOGdRCI9ElWK353AS5o0w=
Subject key identifier: 4A:65:47:BA:59:E0:C0:C6:0B:53:25:DB:33:DC:54:78:34:0D:D7:B2
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 485931E11930D5BD2FA6C5E61D4506FB589EAF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a324e17-7433-414a-adaa-75924fda97b8.roa
Signing time: Tue 01 Apr 2025 00:10:55 +0000
ROA not before: Tue 01 Apr 2025 00:10:55 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 150.222.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:59:31:e1:19:30:d5:bd:2f:a6:c5:e6:1d:45:06:fb:58:9e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Apr 1 00:10:55 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=b57014975c0854a1e4c1591335256790e06ed4c851a3e1a8341e08cf85f8bcf6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e7:f7:bd:0c:9a:16:f3:bc:50:e2:03:69:c4:
64:04:ce:d8:95:2a:8e:a1:8b:fc:12:87:77:d6:76:
ac:6c:81:f9:f0:cf:2b:a6:49:e9:9d:dd:67:1b:ec:
bf:79:76:fb:78:82:97:e6:f6:ba:ff:82:53:84:50:
2e:e0:c3:e7:c3:28:98:c1:ff:fb:a2:71:68:4e:cf:
60:12:90:17:0b:e7:53:ef:61:04:e9:06:46:53:17:
a2:b8:3e:4f:1b:7c:ea:37:cc:7a:7e:aa:ca:47:39:
b0:d3:c9:a4:d8:ef:47:29:18:28:4f:68:36:20:eb:
47:3b:74:78:cb:a7:20:40:9b:81:d0:1d:a1:8f:98:
69:f4:c5:80:5a:56:82:80:07:e2:e8:96:b9:fc:79:
03:fb:3d:cc:3d:ba:df:2d:70:c8:9e:09:df:79:79:
d6:66:dd:eb:a3:6b:97:a8:2a:76:1b:35:c6:00:21:
1f:c4:99:d9:fc:cd:12:63:80:6b:bb:0c:df:ab:b6:
0f:0e:4a:e8:52:18:77:fa:3e:7a:80:55:59:c9:a3:
ef:17:74:20:64:dc:73:b3:2f:27:d4:7a:2d:34:22:
2b:2b:48:00:d4:7c:9a:d8:34:91:65:a2:3a:1d:52:
ac:57:2e:ba:91:6d:eb:e2:83:d1:89:64:a9:18:05:
a2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:65:47:BA:59:E0:C0:C6:0B:53:25:DB:33:DC:54:78:34:0D:D7:B2
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a324e17-7433-414a-adaa-75924fda97b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.222.206.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:95:88:13:9d:68:e7:7d:70:ff:23:62:d9:f0:f0:f1:b6:c1:
66:17:4c:6c:cc:28:2c:06:c0:17:ad:9b:6e:28:10:c3:6e:e5:
6e:93:35:74:f2:2c:1d:4d:1c:d5:82:ed:58:93:3c:85:bb:04:
63:6c:af:40:c2:39:fc:49:5d:0e:18:ba:b1:1c:a3:1c:53:36:
f8:43:9f:2b:7b:44:e6:66:53:af:b2:d9:e1:05:a0:90:a7:c7:
c7:82:fc:13:8f:7f:93:fa:e4:b1:85:9a:97:99:57:30:95:41:
3b:5e:c2:4c:ca:8b:e4:3e:ea:df:34:58:bf:b3:34:f2:ab:17:
93:dd:c1:e0:1c:db:5a:37:e5:39:02:9e:69:35:82:66:2b:eb:
4a:03:51:ab:36:c5:cb:e7:59:cc:55:40:05:e4:19:42:87:8f:
2e:7a:13:4a:b6:a0:7c:34:6a:0b:d8:0e:4a:53:94:6d:2d:b6:
bd:4d:c4:e7:49:66:b1:60:ee:46:af:63:b9:25:fd:3f:da:e2:
33:1f:32:85:46:e3:38:60:49:81:01:54:df:71:4d:7a:ab:08:
7a:8c:c3:f4:bf:33:dc:4d:9e:ee:e0:61:aa:f0:63:d6:83:8c:
e2:73:97:fc:cc:b0:9c:c3:f2:f7:aa:72:61:ac:35:55:57:71:
3e:08:d4:82
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgITSFkx4Rkw1b0vpsXmHUUG+1ierzANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx
ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA0MDEwMDEwNTVaFw0yNTA1MDYyMzU5NTla
MHoxSTBHBgNVBAUTQGI1NzAxNDk3NWMwODU0YTFlNGMxNTkxMzM1MjU2NzkwZTA2
ZWQ0Yzg1MWEzZTFhODM0MWUwOGNmODVmOGJjZjYxLTArBgNVBAMTJDVmMjc2MDQ1
LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI3n970MmhbzvFDiA2nEZATO2JUqjqGL/BKHd9Z2rGyB+fDP
K6ZJ6Z3dZxvsv3l2+3iCl+b2uv+CU4RQLuDD58MomMH/+6JxaE7PYBKQFwvnU+9h
BOkGRlMXorg+Txt86jfMen6qykc5sNPJpNjvRykYKE9oNiDrRzt0eMunIECbgdAd
oY+YafTFgFpWgoAH4uiWufx5A/s9zD263y1wyJ4J33l51mbd66Nrl6gqdhs1xgAh
H8SZ2fzNEmOAa7sM36u2Dw5K6FIYd/o+eoBVWcmj7xd0IGTcc7MvJ9R6LTQiKytI
ANR8mtg0kWWiOh1SrFcuupFt6+KD0YlkqRgFossCAwEAAaOCArEwggKtMB0GA1Ud
DgQWBBRKZUe6WeDAxgtTJdsz3FR4NA3XsjAfBgNVHSMEGDAWgBQlrdNCsB63pY6t
GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz
MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4
ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw
OTA0ZTQyZDIvOWEzMjRlMTctNzQzMy00MTRhLWFkYWEtNzU5MjRmZGE5N2I4LnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt
NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAJbezjANBgkqhkiG9w0BAQsFAAOCAQEAPpWIE51o531w/yNi2fDw8bbBZhdM
bMwoLAbAF62bbigQw27lbpM1dPIsHU0c1YLtWJM8hbsEY2yvQMI5/EldDhi6sRyj
HFM2+EOfK3tE5mZTr7LZ4QWgkKfHx4L8E49/k/rksYWal5lXMJVBO17CTMqL5D7q
3zRYv7M08qsXk93B4BzbWjflOQKeaTWCZivrSgNRqzbFy+dZzFVABeQZQoePLnoT
SragfDRqC9gOSlOUbS22vU3E50lmsWDuRq9juSX9P9riMx8yhUbjOGBJgQFU33FN
eqsIeozD9L8z3E2e7uBhqvBj1oOM4nOX/MywnMPy96pyYaw1VVdxPgjUgg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:47 2025 by rpki-client on console.sobornost.net