Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2478452-80dc-452f-9401-c25c98f35859.roa
File: b2478452-80dc-452f-9401-c25c98f35859.roa (raw, json)
Hash identifier: FnKxGwExfhbbnyeEvBD5alsdbbMfX8KaAnWzW1nGvPE=
Subject key identifier: 8C:0C:19:66:1A:2D:94:AA:EA:76:44:5F:DC:87:B2:4A:8C:E0:73:71
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 37BBE237D1478AF9D962CD73CF15137258950D02
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2478452-80dc-452f-9401-c25c98f35859.roa
Signing time: Mon 31 Mar 2025 16:40:14 +0000
ROA not before: Mon 31 Mar 2025 16:40:14 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 15.230.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:bb:e2:37:d1:47:8a:f9:d9:62:cd:73:cf:15:13:72:58:95:0d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 31 16:40:14 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=fecc380e79d127e63821820fae2f3b43386e43d8a2d362ad1eea2b1420913a70, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:50:45:0f:70:6e:66:3e:a4:bc:1a:a6:df:75:
bb:39:1a:ad:6a:7e:58:9f:c2:b6:aa:93:e6:17:53:
63:34:cb:16:24:3b:f2:b1:a7:c2:7b:29:85:fe:88:
9f:81:ea:a8:f8:2c:fb:97:eb:6b:ef:22:d0:c1:74:
7e:75:bc:cd:1c:3c:83:83:f8:33:5f:b1:af:5b:b5:
d2:3d:2c:4a:68:88:7c:4d:d2:7b:0e:43:7f:48:a9:
8f:91:d3:dc:71:ab:39:94:bc:69:da:47:0b:76:a3:
36:c9:01:1a:0b:67:27:e0:3b:be:15:c1:ac:66:4f:
32:25:71:17:80:6e:21:00:7b:9c:0c:d1:88:91:66:
75:63:c8:8a:60:76:6c:6d:4d:6f:e0:61:25:33:05:
59:72:22:83:08:1c:a6:12:91:07:ab:1a:1f:74:e0:
97:22:bf:44:b4:26:37:9c:b9:c8:f3:82:09:fe:bc:
1f:bd:a1:e3:1b:36:b6:b9:14:2a:6b:e2:da:0d:bd:
66:e7:6a:69:55:be:d5:88:9e:d1:9b:50:20:c9:e2:
e1:4b:6d:6e:e9:ea:31:75:ab:51:b6:6b:53:96:58:
dc:20:3b:7e:1e:d9:64:0c:8f:6f:2c:b3:70:bb:0d:
38:f3:93:db:e8:77:46:92:c9:7d:e3:d6:3a:0e:b9:
d2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0C:19:66:1A:2D:94:AA:EA:76:44:5F:DC:87:B2:4A:8C:E0:73:71
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2478452-80dc-452f-9401-c25c98f35859.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.230.168.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b9:c1:d6:ee:70:39:bc:d9:34:e4:57:1b:f2:65:d3:76:dd:
b4:4b:11:e7:53:65:db:66:b7:8e:f5:77:b3:ce:47:32:2e:43:
95:e3:51:1a:0f:77:ee:67:f4:c2:c8:cd:fd:6d:e4:53:2d:76:
cd:3b:80:4a:07:2e:cb:cf:6f:d6:b8:59:b4:44:f0:4f:93:97:
a9:7f:44:11:54:9f:15:25:6f:f4:77:43:c9:49:98:c1:0c:29:
1f:c6:bc:f2:2c:59:87:97:db:8f:99:98:70:98:d1:e1:3b:f3:
c8:70:e8:d5:39:c3:84:16:a0:aa:4e:76:04:9a:ff:07:29:c0:
bc:6c:fb:2f:6d:d8:29:29:0d:ff:f1:b8:aa:82:67:bf:d4:69:
88:46:dd:6b:5b:4c:f0:62:4f:f8:f7:18:16:c4:b0:bf:46:d5:
e2:79:77:f5:7f:2c:5b:df:84:f0:92:f9:99:3d:1d:e7:46:8e:
57:1e:5c:43:00:39:86:dc:ba:55:91:df:03:ac:68:7f:c4:bc:
5f:4a:bd:2b:48:75:b2:c1:87:c5:8a:21:91:ed:b4:a0:60:9a:
c0:67:30:7a:46:c3:34:9b:05:83:0d:78:82:ae:ed:7c:71:7a:
a7:f1:eb:59:37:5b:da:ff:11:b3:7c:d4:fc:63:75:6b:87:22:
4f:46:77:13
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUN7viN9FHivnZYs1zzxUTcliVDQIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzMxMTY0MDE0WhcNMjUwNTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BmZWNjMzgwZTc5ZDEyN2U2MzgyMTgyMGZhZTJmM2I0MzM4
NmU0M2Q4YTJkMzYyYWQxZWVhMmIxNDIwOTEzYTcwMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCNUEUPcG5mPqS8Gqbfdbs5Gq1qflifwraqk+YXU2M0yxYk
O/Kxp8J7KYX+iJ+B6qj4LPuX62vvItDBdH51vM0cPIOD+DNfsa9btdI9LEpoiHxN
0nsOQ39IqY+R09xxqzmUvGnaRwt2ozbJARoLZyfgO74VwaxmTzIlcReAbiEAe5wM
0YiRZnVjyIpgdmxtTW/gYSUzBVlyIoMIHKYSkQerGh904Jciv0S0Jjecucjzggn+
vB+9oeMbNra5FCpr4toNvWbnamlVvtWIntGbUCDJ4uFLbW7p6jF1q1G2a1OWWNwg
O34e2WQMj28ss3C7DTjzk9vod0aSyX3j1joOudJ/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUjAwZZhotlKrqdkRf3IeySozgc3EwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2IyNDc4NDUyLTgwZGMtNDUyZi05NDAxLWMyNWM5OGYzNTg1OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAP5qgwDQYJKoZIhvcNAQELBQADggEBAIK5wdbucDm82TTkVxvyZdN23bRL
EedTZdtmt471d7PORzIuQ5XjURoPd+5n9MLIzf1t5FMtds07gEoHLsvPb9a4WbRE
8E+Tl6l/RBFUnxUlb/R3Q8lJmMEMKR/GvPIsWYeX24+ZmHCY0eE788hw6NU5w4QW
oKpOdgSa/wcpwLxs+y9t2CkpDf/xuKqCZ7/UaYhG3WtbTPBiT/j3GBbEsL9G1eJ5
d/V/LFvfhPCS+Zk9HedGjlceXEMAOYbculWR3wOsaH/EvF9KvStIdbLBh8WKIZHt
tKBgmsBnMHpGwzSbBYMNeIKu7Xxxeqfx61k3W9r/EbN81PxjdWuHIk9GdxM=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:48 2025 by rpki-client on console.sobornost.net