Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09ed608e-d07c-4cf2-90b2-d4c73733a9f0.roa
File: 09ed608e-d07c-4cf2-90b2-d4c73733a9f0.roa (raw, json)
Hash identifier: ilBjYZspIXKtdTfI6lGXNn3l3uF6MFIVLxS41HkTKs0=
Subject key identifier: 6D:74:18:09:59:C2:81:73:5C:0D:96:21:BC:84:7F:60:8A:28:E4:55
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 036DEE3ABCF185D112E6DA604982638666231D86
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09ed608e-d07c-4cf2-90b2-d4c73733a9f0.roa
Signing time: Wed 09 Apr 2025 00:41:28 +0000
ROA not before: Wed 09 Apr 2025 00:41:28 +0000
ROA not after: Wed 14 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 96.0.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:6d:ee:3a:bc:f1:85:d1:12:e6:da:60:49:82:63:86:66:23:1d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 9 00:41:28 2025 GMT
Not After : May 14 23:59:59 2025 GMT
Subject: serialNumber=c7f8bcc83791e18f94fc818582d7079f4688c9dc7f8d239a7a383ec5e742d481, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:c2:6e:b3:ed:8a:77:69:e2:17:47:af:7b:
99:57:06:46:57:11:14:78:42:73:29:e6:50:75:cd:
7e:2b:cf:25:f4:68:2f:5a:14:f0:da:c1:17:e5:c7:
f4:95:53:7f:92:1e:d5:68:f8:a3:41:7e:36:0e:f0:
38:d7:42:25:a1:6a:8e:54:30:00:cc:97:3c:cc:31:
5c:0e:21:af:df:4e:c3:ef:3d:9e:95:bb:88:41:f3:
b5:ae:ad:5e:3c:61:ea:4f:36:b2:68:5c:c9:7a:2e:
f4:da:38:6d:11:cd:f2:45:f0:44:8a:e4:f1:ec:5c:
f6:a5:bb:8d:23:d8:bd:77:c1:bf:11:dd:f5:46:bd:
8e:7c:c2:4e:dc:0c:a5:a9:a2:fb:8e:90:37:ac:e9:
d6:68:22:c3:ce:31:a5:26:8c:e0:35:62:16:a8:fd:
1a:91:c4:6a:4e:cb:91:e7:35:28:ec:1f:c0:30:59:
6c:c6:b0:8b:b5:43:f8:5b:23:49:7b:5a:7f:7c:a9:
98:7d:87:83:d5:4a:e9:51:14:2b:d4:b0:3d:81:92:
67:f7:9f:dc:f1:fb:39:74:64:6f:40:44:17:a7:5b:
7b:65:55:17:5e:80:1b:71:f3:d6:84:66:80:9e:a4:
6d:06:01:d7:0f:fe:39:ee:fb:8a:04:c5:09:7d:26:
96:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:74:18:09:59:C2:81:73:5C:0D:96:21:BC:84:7F:60:8A:28:E4:55
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09ed608e-d07c-4cf2-90b2-d4c73733a9f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.0.12.0/22
Signature Algorithm: sha256WithRSAEncryption
74:e9:10:a2:95:0f:49:0a:3a:6d:36:ee:02:e5:46:e8:88:af:
03:42:f4:db:3e:7d:c0:40:60:18:04:e5:5c:7f:0b:04:9e:2c:
e6:14:e8:03:81:6e:49:26:81:1f:b3:ce:ac:67:5e:fe:9f:3e:
a5:de:73:cf:0a:7c:3c:54:a5:ea:5a:01:50:e1:ac:b9:36:02:
ea:0d:47:bf:e0:0e:ad:67:48:31:45:15:83:38:1a:a9:58:c9:
05:e5:33:7a:85:17:af:52:63:17:4a:48:39:1c:7c:2f:d0:04:
c3:dd:39:91:59:41:9e:38:8e:00:cf:99:ae:04:38:02:d0:4c:
78:3c:5f:e1:f1:d2:04:b4:56:78:1e:e4:28:d3:ac:18:10:e2:
6b:3c:41:ca:f4:f1:c9:60:5c:10:00:2f:85:eb:ca:3e:fb:43:
8a:2f:fa:13:2d:7c:05:45:b8:e6:21:b8:c8:3d:f4:5f:48:14:
01:34:2e:23:1e:29:d8:89:b8:7c:b9:27:bd:95:06:fc:62:d5:
ec:d8:aa:c9:8d:b4:43:54:50:3a:e4:b7:9a:15:38:70:5f:b3:
c8:e4:fa:31:cf:1f:d9:86:a9:fd:66:13:fe:c5:a6:2c:b6:93:
b6:bc:61:2a:0e:cb:b1:55:d3:73:9d:af:3a:0c:85:d9:37:02:
61:56:78:7d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUA23uOrzxhdES5tpgSYJjhmYjHYYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA5MDA0MTI4WhcNMjUwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BjN2Y4YmNjODM3OTFlMThmOTRmYzgxODU4MmQ3MDc5ZjQ2
ODhjOWRjN2Y4ZDIzOWE3YTM4M2VjNWU3NDJkNDgxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvicJus+2Kd2niF0eve5lXBkZXERR4QnMp5lB1zX4rzyX0
aC9aFPDawRflx/SVU3+SHtVo+KNBfjYO8DjXQiWhao5UMADMlzzMMVwOIa/fTsPv
PZ6Vu4hB87WurV48YepPNrJoXMl6LvTaOG0RzfJF8ESK5PHsXPalu40j2L13wb8R
3fVGvY58wk7cDKWpovuOkDes6dZoIsPOMaUmjOA1Yhao/RqRxGpOy5HnNSjsH8Aw
WWzGsIu1Q/hbI0l7Wn98qZh9h4PVSulRFCvUsD2Bkmf3n9zx+zl0ZG9ARBenW3tl
VRdegBtx89aEZoCepG0GAdcP/jnu+4oExQl9Jpb9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUbXQYCVnCgXNcDZYhvIR/YIoo5FUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA5ZWQ2MDhlLWQwN2MtNGNmMi05MGIyLWQ0YzczNzMzYTlmMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJgAAwwDQYJKoZIhvcNAQELBQADggEBAHTpEKKVD0kKOm027gLlRuiIrwNC
9Ns+fcBAYBgE5Vx/CwSeLOYU6AOBbkkmgR+zzqxnXv6fPqXec88KfDxUpepaAVDh
rLk2AuoNR7/gDq1nSDFFFYM4GqlYyQXlM3qFF69SYxdKSDkcfC/QBMPdOZFZQZ44
jgDPma4EOALQTHg8X+Hx0gS0Vnge5CjTrBgQ4ms8Qcr08clgXBAAL4Xryj77Q4ov
+hMtfAVFuOYhuMg99F9IFAE0LiMeKdiJuHy5J72VBvxi1ezYqsmNtENUUDrkt5oV
OHBfs8jk+jHPH9mGqf1mE/7Fpiy2k7a8YSoOy7FV03OdrzoMhdk3AmFWeH0=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:18:57 2025 by rpki-client on console.sobornost.net