Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04458f53-1b58-4ea6-b808-1d18094e2918.roa
File: 04458f53-1b58-4ea6-b808-1d18094e2918.roa (raw, json)
Hash identifier: x5Kqh+y5iW2S7VbGDL8jKzU0wiTNC7mYdZ2jpGEHZXI=
Subject key identifier: A3:77:5E:4E:63:9D:05:D2:60:96:E9:9C:89:7F:E6:40:AC:8B:D2:E2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0A4FFACDCA03FD3145D88E8E89CBD3370C9D349D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04458f53-1b58-4ea6-b808-1d18094e2918.roa
Signing time: Mon 31 Mar 2025 15:11:09 +0000
ROA not before: Mon 31 Mar 2025 15:11:09 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.182.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:4f:fa:cd:ca:03:fd:31:45:d8:8e:8e:89:cb:d3:37:0c:9d:34:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 15:11:09 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=52c38f5e35bfe116b3457a3982e91dddfe6d70b19d40c34454b026b8acc8bdc4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:35:1e:be:cb:39:92:e1:d7:e4:bf:1d:bd:50:
db:4f:1d:36:16:92:95:73:25:23:f0:1d:cb:22:89:
bb:6e:5b:c3:56:30:dc:45:bd:8f:37:37:01:28:0b:
4d:a2:70:a3:7b:d1:52:f3:de:3e:d3:70:fb:9a:86:
5d:76:77:62:23:e5:e8:bb:69:52:bf:e1:41:5b:79:
90:05:99:07:95:57:0d:d6:00:0a:e4:78:79:56:d1:
b9:45:df:6c:b5:9e:f4:77:e2:bd:db:8e:92:36:a7:
17:83:ab:6b:b2:31:aa:90:c8:94:af:9b:46:27:85:
55:ea:50:d6:6d:35:0b:7d:b4:a0:2c:ab:ff:a0:50:
cc:46:37:fa:95:7e:d8:25:93:d4:2f:4d:82:b1:5a:
b3:26:33:94:ed:5a:8e:4d:76:65:88:5f:ab:7e:be:
62:30:b6:7f:dc:6d:04:52:57:e7:b9:60:58:62:6a:
1c:b5:97:2e:44:b3:f1:f8:30:cb:df:ed:e5:a0:5a:
50:71:ba:f2:b3:81:e3:da:ff:38:21:94:ed:54:13:
fb:4e:b5:b3:c0:6b:d1:cd:44:81:fc:3b:f5:7f:71:
08:b4:22:f3:d7:25:e3:90:50:ec:22:16:de:82:0b:
1e:11:46:36:50:48:6c:70:58:de:3f:9b:11:c5:b9:
33:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:77:5E:4E:63:9D:05:D2:60:96:E9:9C:89:7F:E6:40:AC:8B:D2:E2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04458f53-1b58-4ea6-b808-1d18094e2918.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.182.224.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:7f:32:3b:37:70:e4:97:d0:7f:d9:87:a8:fe:fe:94:8b:fc:
5a:c1:b4:da:4b:3f:6b:49:ab:5e:de:87:89:0f:63:7e:17:11:
44:21:d5:94:50:9a:cc:3f:da:7f:1d:5e:79:26:6b:53:6d:57:
3f:aa:8e:f0:26:49:50:e0:98:21:26:7a:19:5b:27:ee:3c:66:
38:77:ac:10:ac:c1:4f:40:7d:5e:45:97:82:b3:a9:f7:ec:35:
fb:af:4f:48:3e:12:92:e7:6b:b9:50:7d:e7:a0:5a:6b:40:6b:
94:cf:07:a4:38:d1:df:55:3d:86:17:8d:ac:cd:df:17:44:b1:
ea:99:e4:bd:45:55:52:8a:53:f3:92:4b:8f:94:33:59:64:ac:
7b:95:f3:98:55:c0:25:e8:bd:b8:fa:66:4f:6c:a9:8e:ac:fc:
49:47:30:eb:2f:fe:a3:cf:75:4b:50:8f:57:53:bc:6e:8c:db:
7f:6f:5e:25:6a:05:d0:35:3d:bf:1f:e3:81:9d:dc:f4:3d:10:
94:c7:f8:0a:68:48:ec:16:e0:bc:18:b3:17:57:6e:84:c1:f3:
65:80:8b:56:a6:cd:89:c1:c6:1b:2d:bb:f5:29:55:0c:33:9c:
80:31:fe:f5:1b:5e:d5:fb:d1:f7:f4:d4:17:ff:19:22:ee:22:
ed:ae:0d:67
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCk/6zcoD/TFF2I6OicvTNwydNJ0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzMxMTUxMTA5WhcNMjUwNTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MmMzOGY1ZTM1YmZlMTE2YjM0NTdhMzk4MmU5MWRkZGZl
NmQ3MGIxOWQ0MGMzNDQ1NGIwMjZiOGFjYzhiZGM0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCkNR6+yzmS4dfkvx29UNtPHTYWkpVzJSPwHcsiibtuW8NW
MNxFvY83NwEoC02icKN70VLz3j7TcPuahl12d2Ij5ei7aVK/4UFbeZAFmQeVVw3W
AArkeHlW0blF32y1nvR34r3bjpI2pxeDq2uyMaqQyJSvm0YnhVXqUNZtNQt9tKAs
q/+gUMxGN/qVftglk9QvTYKxWrMmM5TtWo5NdmWIX6t+vmIwtn/cbQRSV+e5YFhi
ahy1ly5Es/H4MMvf7eWgWlBxuvKzgePa/zghlO1UE/tOtbPAa9HNRIH8O/V/cQi0
IvPXJeOQUOwiFt6CCx4RRjZQSGxwWN4/mxHFuTOhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUo3deTmOdBdJglumciX/mQKyL0uIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA0NDU4ZjUzLTFiNTgtNGVhNi1iODA4LTFkMTgwOTRlMjkxOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAPYtuAwDQYJKoZIhvcNAQELBQADggEBAKV/Mjs3cOSX0H/Zh6j+/pSL/FrB
tNpLP2tJq17eh4kPY34XEUQh1ZRQmsw/2n8dXnkma1NtVz+qjvAmSVDgmCEmehlb
J+48Zjh3rBCswU9AfV5Fl4KzqffsNfuvT0g+EpLna7lQfeegWmtAa5TPB6Q40d9V
PYYXjazN3xdEseqZ5L1FVVKKU/OSS4+UM1lkrHuV85hVwCXovbj6Zk9sqY6s/ElH
MOsv/qPPdUtQj1dTvG6M239vXiVqBdA1Pb8f44Gd3PQ9EJTH+ApoSOwW4LwYsxdX
boTB82WAi1amzYnBxhstu/UpVQwznIAx/vUbXtX70ff01Bf/GSLuIu2uDWc=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:18:57 2025 by rpki-client on console.sobornost.net