Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ea2f7d19-be31-43ee-949a-318f4dc9e8b2.roa
File: ea2f7d19-be31-43ee-949a-318f4dc9e8b2.roa (raw, json)
Hash identifier: eh2kfH3STyFnwGnZ5J0ZDc5JSqFcjcSgNmcOO6/CwJo=
Subject key identifier: 87:74:AB:93:3D:68:F3:41:4F:8D:4C:F6:7C:3A:63:B1:43:F1:32:51
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7E12E57604A53F6C3C1761389184A2FD7AA1B449
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ea2f7d19-be31-43ee-949a-318f4dc9e8b2.roa
Signing time: Mon 24 Mar 2025 15:51:47 +0000
ROA not before: Mon 24 Mar 2025 15:51:47 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 14618
IP address blocks: 52.94.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:12:e5:76:04:a5:3f:6c:3c:17:61:38:91:84:a2:fd:7a:a1:b4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 24 15:51:47 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: serialNumber=d296320fdde4a33a8e11e980e311180786e2ccbce8831ed5171ff3e5764fa32e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:94:84:be:61:18:89:b2:48:e1:c1:c1:88:4f:
03:ad:95:e3:65:bb:a1:80:ae:85:ac:b6:62:d1:83:
f0:6c:e0:02:02:28:45:20:38:6e:60:a0:99:c7:35:
32:1f:c6:37:3d:05:be:f0:7c:0f:48:9f:2e:37:c3:
c6:12:b0:27:61:92:44:c8:ff:17:e6:87:a5:73:d4:
bf:55:bc:59:70:ea:9b:03:aa:06:c8:a0:07:21:28:
64:fc:be:1a:34:e3:1a:2e:95:af:ce:31:7d:26:ce:
e8:66:24:63:45:7d:08:7a:56:67:d9:22:63:07:bf:
16:48:28:96:3e:75:79:59:b0:49:a6:ea:4a:f4:ca:
db:da:85:ba:0b:d4:2c:16:d7:72:19:b3:fe:93:5e:
c1:1a:55:02:79:9f:e5:ed:38:90:a6:ea:6f:4e:f5:
51:80:58:29:da:22:6f:57:2b:9e:86:d5:09:63:99:
a6:5e:4b:0d:ff:fb:b5:38:cd:f7:e1:2e:ea:c7:a8:
b7:3f:bc:e7:2a:9d:e5:bd:92:66:7b:df:d0:97:5c:
87:6a:1d:e5:a2:8b:56:11:de:01:26:b4:9f:65:50:
74:66:21:c6:e5:28:6b:74:90:57:41:92:19:f8:29:
34:2a:a8:c4:1b:ee:e9:ad:c0:24:45:7b:8c:fd:0f:
b4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:74:AB:93:3D:68:F3:41:4F:8D:4C:F6:7C:3A:63:B1:43:F1:32:51
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ea2f7d19-be31-43ee-949a-318f4dc9e8b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.94.124.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:02:bb:1f:42:98:65:5e:f9:c5:50:94:05:d9:71:5c:74:7d:
89:ec:47:2c:e6:f8:2b:34:39:89:65:c1:bf:94:4b:91:5f:5c:
7b:11:99:54:0b:8c:96:37:24:97:08:6a:04:f0:28:6d:43:ea:
1b:d0:01:1e:eb:e1:60:e3:c5:e9:a5:92:9d:63:37:37:c9:71:
2c:d7:f7:9a:c1:b2:22:d9:bc:6f:ef:41:bd:75:89:21:a8:2b:
b2:fa:a4:5f:d0:06:61:d0:bb:12:a7:cc:c7:67:5a:a0:4d:1a:
04:e6:44:df:71:8e:10:e0:1b:ae:c2:3b:86:94:ac:af:66:34:
7e:2e:39:7a:63:3c:dd:f8:d7:5f:6d:ee:93:00:84:ca:32:bc:
a6:1c:96:db:9c:a6:71:ee:6e:cb:57:93:16:51:98:e8:97:a7:
69:69:db:a1:ac:d7:a7:6a:e5:c5:0d:da:28:fb:43:18:f2:38:
4b:be:1e:25:fc:67:20:3f:ee:53:c4:37:14:43:e0:f4:54:c2:
ac:1f:98:ad:1e:1f:f6:77:5d:ed:b6:c7:13:e8:89:9c:5d:a2:
0b:66:f9:6e:4a:e9:c6:41:5b:cf:7e:15:64:d5:c6:17:75:c3:
f3:36:70:7e:90:5a:09:6f:b7:f3:a0:0e:52:5a:ea:8d:70:10:
23:d8:c7:24
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfhLldgSlP2w8F2E4kYSi/XqhtEkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzI0MTU1MTQ3WhcNMjUwNDI4MjM1OTU5
WjB6MUkwRwYDVQQFE0BkMjk2MzIwZmRkZTRhMzNhOGUxMWU5ODBlMzExMTgwNzg2
ZTJjY2JjZTg4MzFlZDUxNzFmZjNlNTc2NGZhMzJlMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCUlIS+YRiJskjhwcGITwOtleNlu6GAroWstmLRg/Bs4AIC
KEUgOG5goJnHNTIfxjc9Bb7wfA9Iny43w8YSsCdhkkTI/xfmh6Vz1L9VvFlw6psD
qgbIoAchKGT8vho04xoula/OMX0mzuhmJGNFfQh6VmfZImMHvxZIKJY+dXlZsEmm
6kr0ytvahboL1CwW13IZs/6TXsEaVQJ5n+XtOJCm6m9O9VGAWCnaIm9XK56G1Qlj
maZeSw3/+7U4zffhLurHqLc/vOcqneW9kmZ739CXXIdqHeWii1YR3gEmtJ9lUHRm
IcblKGt0kFdBkhn4KTQqqMQb7umtwCRFe4z9D7R7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUh3Srkz1o80FPjUz2fDpjsUPxMlEwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2VhMmY3ZDE5LWJlMzEtNDNlZS05NDlhLTMxOGY0ZGM5ZThiMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAI0XnwwDQYJKoZIhvcNAQELBQADggEBALACux9CmGVe+cVQlAXZcVx0fYns
Ryzm+Cs0OYllwb+US5FfXHsRmVQLjJY3JJcIagTwKG1D6hvQAR7r4WDjxemlkp1j
NzfJcSzX95rBsiLZvG/vQb11iSGoK7L6pF/QBmHQuxKnzMdnWqBNGgTmRN9xjhDg
G67CO4aUrK9mNH4uOXpjPN34119t7pMAhMoyvKYcltucpnHubstXkxZRmOiXp2lp
26Gs16dq5cUN2ij7QxjyOEu+HiX8ZyA/7lPENxRD4PRUwqwfmK0eH/Z3Xe22xxPo
iZxdogtm+W5K6cZBW89+FWTVxhd1w/M2cH6QWglvt/OgDlJa6o1wECPYxyQ=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:53 2025 by rpki-client on console.sobornost.net