Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e6fc649-df21-49e2-a93e-321e5fc8451b.roa
File: 1e6fc649-df21-49e2-a93e-321e5fc8451b.roa (raw, json)
Hash identifier: JZlS0mFaD/Lq6GCbeAljtiOz5kGFn8dMc9oyjbFVqDw=
Subject key identifier: FC:2D:29:EF:BF:02:89:1F:67:5D:4A:83:B9:3B:FF:55:59:9E:36:58
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5BF3AA6388DCBEF12D76D5306AB2557D57A6E8DF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e6fc649-df21-49e2-a93e-321e5fc8451b.roa
Signing time: Tue 01 Apr 2025 00:37:45 +0000
ROA not before: Tue 01 Apr 2025 00:37:45 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 220.157.76.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:f3:aa:63:88:dc:be:f1:2d:76:d5:30:6a:b2:55:7d:57:a6:e8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 1 00:37:45 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=2ab423057bc6ced94a5cb904353c8e9a9056cf8bd254dc7bd91cffdb06056739, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:f8:1c:d6:6d:dd:02:28:e4:fa:78:9f:99:
53:0f:2d:84:d0:42:49:35:61:67:ad:35:55:cb:a9:
30:e9:45:c7:57:23:d3:e3:1e:51:35:c6:8c:df:d2:
eb:11:b6:92:c5:65:f1:ea:56:ea:8b:b1:ec:e3:be:
c2:7f:2e:94:0a:83:de:2c:a6:40:d2:9c:ef:b3:f4:
f6:8b:63:da:9a:3d:0d:ec:27:c9:00:4e:a0:78:ae:
3d:7e:6c:4c:83:90:f3:59:15:04:ae:ab:12:a7:e2:
63:3f:e6:1c:0b:74:c5:a2:5b:72:cc:1d:b8:db:bb:
58:df:f0:5f:c6:e1:71:50:61:93:cd:a0:75:a9:00:
cf:92:46:ea:f8:de:37:ac:e1:d6:23:1f:29:2d:61:
c3:f8:36:d3:ed:4b:74:a9:28:57:1d:8c:2f:47:4e:
d6:af:22:3e:e7:2b:f2:3c:46:70:9f:e3:c8:a7:d1:
37:8d:6a:ca:e9:de:7a:65:55:39:03:a9:27:09:e3:
31:ad:28:38:98:33:18:27:12:fa:cc:56:12:19:c0:
bc:41:29:5b:e3:71:43:69:ef:ee:1f:e4:a8:c9:98:
34:5a:79:fe:78:7e:bf:63:fe:7c:0b:73:42:ef:41:
e8:ad:a9:88:e2:eb:09:37:27:bf:ad:d0:e4:4f:6c:
b0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2D:29:EF:BF:02:89:1F:67:5D:4A:83:B9:3B:FF:55:59:9E:36:58
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e6fc649-df21-49e2-a93e-321e5fc8451b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
220.157.76.0/23
Signature Algorithm: sha256WithRSAEncryption
42:2b:d5:ed:6e:29:f2:be:a5:7b:e9:cf:e7:99:d9:db:ef:9b:
74:bd:e5:19:e1:d0:15:ad:c6:44:ba:67:d6:0e:66:ef:c4:d0:
89:52:2d:1f:f1:a2:68:8c:c9:2c:95:d7:6a:9a:74:42:3e:67:
dd:a4:9a:6e:d9:e5:4a:fe:2d:11:e2:9e:25:15:cc:0c:79:f3:
a0:19:39:78:d1:f5:08:a9:e3:0c:cc:f7:b6:2f:cd:d8:cf:1e:
42:42:6f:c2:81:c6:64:48:94:5f:f5:b0:0a:a3:0c:22:2c:59:
47:4f:f3:2c:ae:a0:27:10:f0:12:e5:0b:2f:f4:e2:30:59:b5:
34:ec:b1:6f:fa:d8:e5:f5:76:f7:9f:c5:2c:75:ed:76:77:1e:
09:05:5b:1a:28:e2:15:75:6e:28:20:5c:97:90:01:9e:a0:69:
56:87:6b:7b:86:2e:69:44:f5:d4:f6:62:ae:f5:8c:b3:fe:33:
75:d5:2f:f7:eb:b1:6e:58:35:68:c0:08:4d:28:25:e9:46:01:
83:72:90:f7:6e:c9:63:2f:28:5c:83:ca:3e:73:ce:7c:34:b5:
c7:91:23:12:dc:c3:63:d8:60:15:fa:f0:37:a8:45:42:af:d4:
8d:51:3c:2e:c3:02:fe:c1:07:b6:e5:eb:c1:df:be:57:28:fe:
ab:a9:b0:28
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUW/OqY4jcvvEtdtUwarJVfVem6N8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDAxMDAzNzQ1WhcNMjUwNTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0AyYWI0MjMwNTdiYzZjZWQ5NGE1Y2I5MDQzNTNjOGU5YTkw
NTZjZjhiZDI1NGRjN2JkOTFjZmZkYjA2MDU2NzM5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwNfgc1m3dAijk+nifmVMPLYTQQkk1YWetNVXLqTDpRcdX
I9PjHlE1xozf0usRtpLFZfHqVuqLsezjvsJ/LpQKg94spkDSnO+z9PaLY9qaPQ3s
J8kATqB4rj1+bEyDkPNZFQSuqxKn4mM/5hwLdMWiW3LMHbjbu1jf8F/G4XFQYZPN
oHWpAM+SRur43jes4dYjHyktYcP4NtPtS3SpKFcdjC9HTtavIj7nK/I8RnCf48in
0TeNasrp3nplVTkDqScJ4zGtKDiYMxgnEvrMVhIZwLxBKVvjcUNp7+4f5KjJmDRa
ef54fr9j/nwLc0LvQeitqYji6wk3J7+t0ORPbLAhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU/C0p778CiR9nXUqDuTv/VVmeNlgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFlNmZjNjQ5LWRmMjEtNDllMi1hOTNlLTMyMWU1ZmM4NDUxYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHcnUwwDQYJKoZIhvcNAQELBQADggEBAEIr1e1uKfK+pXvpz+eZ2dvvm3S9
5Rnh0BWtxkS6Z9YOZu/E0IlSLR/xomiMySyV12qadEI+Z92kmm7Z5Ur+LRHiniUV
zAx586AZOXjR9Qip4wzM97YvzdjPHkJCb8KBxmRIlF/1sAqjDCIsWUdP8yyuoCcQ
8BLlCy/04jBZtTTssW/62OX1dvefxSx17XZ3HgkFWxoo4hV1biggXJeQAZ6gaVaH
a3uGLmlE9dT2Yq71jLP+M3XVL/frsW5YNWjACE0oJelGAYNykPduyWMvKFyDyj5z
znw0tceRIxLcw2PYYBX68DeoRUKv1I1RPC7DAv7BB7bl68Hfvlco/qupsCg=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:18:59 2025 by rpki-client on console.sobornost.net