Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f566bb29-f2a4-47a7-a98d-3bd53d752be9.roa
File: f566bb29-f2a4-47a7-a98d-3bd53d752be9.roa (raw, json)
Hash identifier: wj5REHgp1/wFUMpw+/SsHhvYcATDhfjaLOF3QUYDXX0=
Subject key identifier: 0D:DD:B0:42:13:8B:4A:BB:AA:73:D5:68:70:7E:C1:E9:5A:2B:8A:93
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 525F4D811DAE570AD3E64EFE594BAB4FD593D85D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f566bb29-f2a4-47a7-a98d-3bd53d752be9.roa
Signing time: Sat 22 Mar 2025 00:21:37 +0000
ROA not before: Sat 22 Mar 2025 00:21:37 +0000
ROA not after: Sat 26 Apr 2025 23:59:59 +0000
asID: 14618
IP address blocks: 15.181.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:5f:4d:81:1d:ae:57:0a:d3:e6:4e:fe:59:4b:ab:4f:d5:93:d8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 22 00:21:37 2025 GMT
Not After : Apr 26 23:59:59 2025 GMT
Subject: serialNumber=6406d5c6f11a7d89bfdd92ff872e07f70357ee45b57d3ac5093230c2792012d1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0f:a0:a3:2d:e5:1f:9f:08:4e:4d:22:b6:ac:
19:fd:5c:57:09:de:9e:5b:b4:93:09:ed:06:3f:f9:
da:80:bd:23:ce:5f:65:99:37:fa:b6:ef:86:60:29:
52:db:af:96:a0:34:50:ca:d5:c0:97:fa:00:a8:46:
d6:1b:a9:ef:86:a3:5d:32:90:fe:16:ee:ea:54:c6:
1a:9b:d4:09:f6:87:9a:43:b0:93:e2:8d:0d:f8:c7:
3b:9f:55:01:23:12:89:04:7c:3e:51:49:bb:02:e9:
7b:9b:4c:d3:65:12:e0:7b:3e:23:d0:07:be:a1:ac:
67:e2:4b:b2:d2:73:b5:82:22:6f:6b:77:ca:48:5e:
30:42:09:21:56:1f:a4:98:45:94:06:fd:78:1d:f3:
e5:ac:9d:e1:f3:36:73:c2:fc:b5:dc:1d:17:45:26:
91:0c:7d:98:9f:99:d8:88:81:57:2e:c2:da:24:0d:
38:ae:f9:85:da:19:30:c8:bd:04:44:ba:c4:95:a4:
ec:a7:7b:fa:98:5b:fb:6f:e4:94:8b:69:90:8e:bf:
21:2f:16:f1:27:44:7b:6e:fc:ed:b0:b9:20:6d:86:
3d:0d:4a:24:53:5d:3f:4d:5e:c5:97:00:34:10:bf:
7c:b6:c7:d4:36:ab:58:6d:70:6a:02:b1:db:95:44:
67:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DD:B0:42:13:8B:4A:BB:AA:73:D5:68:70:7E:C1:E9:5A:2B:8A:93
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f566bb29-f2a4-47a7-a98d-3bd53d752be9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.181.243.0/24
Signature Algorithm: sha256WithRSAEncryption
10:60:63:4e:c7:5e:b1:d1:f1:fe:9d:de:49:e8:3a:c8:34:7c:
66:0a:71:58:9f:6f:9d:54:6a:4b:75:14:cc:4e:85:7d:c5:bd:
21:97:4b:c3:32:58:c5:11:2d:19:c1:08:01:96:2c:02:28:ea:
13:62:87:fb:52:90:49:83:a1:c1:28:4c:88:5c:34:45:8c:f6:
85:e1:ac:ca:c6:5f:37:11:74:79:89:5f:06:61:62:b4:bf:6d:
cd:e0:a9:97:21:b8:1b:37:5c:26:f7:8c:46:f2:17:e2:60:68:
62:27:2b:06:de:25:dd:3e:42:0a:0b:49:5f:20:dd:cc:1f:96:
e5:fe:72:91:fc:6a:8a:8a:e0:24:94:47:6b:7a:5a:9d:62:ca:
b9:8f:41:cb:6c:40:6a:5c:f4:6c:f0:6e:8c:7e:fa:ea:c5:0d:
d9:62:b1:49:b6:b6:3e:fa:f3:1e:aa:cb:68:1c:47:42:2d:82:
23:3b:79:2a:3f:a3:c5:f0:4b:2f:af:eb:1e:b3:db:0a:c5:21:
02:b8:84:e9:19:2b:f2:26:1e:b5:3a:27:c5:c7:ed:41:0a:d8:
61:b2:c1:58:9b:d7:ea:01:f2:2a:cc:78:0b:24:90:65:43:26:
97:95:e1:9a:29:7d:35:0e:83:71:9a:37:e5:93:36:a9:3a:6c:
b3:67:f1:fd
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUl9NgR2uVwrT5k7+WUurT9WT2F0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzIyMDAyMTM3WhcNMjUwNDI2MjM1OTU5
WjB6MUkwRwYDVQQFE0A2NDA2ZDVjNmYxMWE3ZDg5YmZkZDkyZmY4NzJlMDdmNzAz
NTdlZTQ1YjU3ZDNhYzUwOTMyMzBjMjc5MjAxMmQxMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDZD6CjLeUfnwhOTSK2rBn9XFcJ3p5btJMJ7QY/+dqAvSPO
X2WZN/q274ZgKVLbr5agNFDK1cCX+gCoRtYbqe+Go10ykP4W7upUxhqb1An2h5pD
sJPijQ34xzufVQEjEokEfD5RSbsC6XubTNNlEuB7PiPQB76hrGfiS7LSc7WCIm9r
d8pIXjBCCSFWH6SYRZQG/Xgd8+WsneHzNnPC/LXcHRdFJpEMfZifmdiIgVcuwtok
DTiu+YXaGTDIvQREusSVpOyne/qYW/tv5JSLaZCOvyEvFvEnRHtu/O2wuSBthj0N
SiRTXT9NXsWXADQQv3y2x9Q2q1htcGoCsduVRGexAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUDd2wQhOLSruqc9VocH7B6VoripMwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2Y1NjZiYjI5LWYyYTQtNDdhNy1hOThkLTNiZDUzZDc1MmJlOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAPtfMwDQYJKoZIhvcNAQELBQADggEBABBgY07HXrHR8f6d3knoOsg0fGYK
cVifb51Uakt1FMxOhX3FvSGXS8MyWMURLRnBCAGWLAIo6hNih/tSkEmDocEoTIhc
NEWM9oXhrMrGXzcRdHmJXwZhYrS/bc3gqZchuBs3XCb3jEbyF+JgaGInKwbeJd0+
QgoLSV8g3cwfluX+cpH8aoqK4CSUR2t6Wp1iyrmPQctsQGpc9Gzwbox++urFDdli
sUm2tj768x6qy2gcR0ItgiM7eSo/o8XwSy+v6x6z2wrFIQK4hOkZK/ImHrU6J8XH
7UEK2GGywVib1+oB8irMeAskkGVDJpeV4ZopfTUOg3GaN+WTNqk6bLNn8f0=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:54 2025 by rpki-client on console.sobornost.net