Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21224473-433c-4fa2-9491-e141ae8efbea.roa
File: 21224473-433c-4fa2-9491-e141ae8efbea.roa (raw, json)
Hash identifier: HrnaxTqnVwJid8bFcoSx948O79uNfnw4ALpQfOUXhic=
Subject key identifier: 01:B1:1F:15:9E:A1:39:7B:B4:E8:00:83:99:B6:9B:08:DB:80:75:39
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0F5E71794DAFF00F35C396C22FB7C4301B196AFE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21224473-433c-4fa2-9491-e141ae8efbea.roa
Signing time: Mon 31 Mar 2025 16:00:48 +0000
ROA not before: Mon 31 Mar 2025 16:00:48 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 75.3.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:5e:71:79:4d:af:f0:0f:35:c3:96:c2:2f:b7:c4:30:1b:19:6a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 16:00:48 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=ada9671fd20b5d37c3e1b14110a0b94a8f0f46967fc3f5331cc93ac5bfa08015, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2b:8b:82:09:14:02:2b:b1:99:d1:ac:ee:fe:
8c:3d:30:02:c3:83:9e:d7:3a:ae:4e:cc:33:8b:36:
9e:a6:69:81:02:1f:6b:ce:f2:c5:e3:4d:99:2a:1b:
6b:81:62:99:45:72:be:33:38:f7:48:65:49:de:fc:
fe:1f:30:1b:b8:9d:6c:d7:8a:32:c6:ec:a8:27:c7:
ff:d1:df:1f:02:36:b1:08:a6:0e:9f:0b:10:bf:30:
69:73:a7:c1:ff:7c:26:e3:da:c0:26:e9:a6:65:58:
3a:0d:f0:5f:80:70:d3:1c:62:50:66:f6:03:e8:5c:
ea:e2:a6:2b:a0:c3:27:41:51:64:f3:1e:f0:a9:ff:
e6:dd:2c:bf:66:0c:56:62:93:e4:74:21:ea:19:58:
9c:2f:47:81:6f:58:ad:cc:19:7e:89:36:02:5b:36:
66:08:66:83:d2:48:63:15:2d:3a:a2:12:09:d8:21:
65:a2:0a:97:07:4e:d7:9e:3a:5a:52:f9:6b:99:99:
6a:b4:33:f1:6a:4a:cb:81:84:01:47:1d:8a:b1:16:
ae:0d:7b:39:96:4f:38:62:28:3e:9c:a2:e6:7b:99:
8b:2d:41:d9:30:c5:ee:ea:4a:4b:30:7c:d7:01:14:
89:54:25:f6:f4:6b:74:0a:f3:37:bb:f7:1f:9c:d2:
e6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B1:1F:15:9E:A1:39:7B:B4:E8:00:83:99:B6:9B:08:DB:80:75:39
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21224473-433c-4fa2-9491-e141ae8efbea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
75.3.128.0/18
Signature Algorithm: sha256WithRSAEncryption
8f:c8:24:9f:c5:4a:27:e9:ef:11:b4:ad:f2:85:b8:90:c7:56:
fd:8e:42:56:6a:62:ad:5f:86:1f:03:73:2d:74:da:37:ac:7c:
b4:b9:01:be:85:13:1c:b6:b6:21:51:23:27:a6:9c:13:d3:5c:
7e:16:55:10:99:a8:29:4d:8e:f5:54:e2:d1:60:5f:29:58:d6:
95:2f:d1:71:4e:aa:44:d2:91:b6:a1:bb:20:9e:57:f4:3f:3a:
86:65:e7:d0:0e:32:a6:5f:a9:fa:59:f0:31:e4:f2:a7:60:c5:
71:32:ee:6a:1d:73:0d:34:80:55:a7:51:63:46:68:91:7f:41:
d7:9d:77:e8:8e:02:a3:3e:4e:46:bc:5c:e6:a5:ac:e9:e9:ae:
a6:9e:a7:14:4e:30:a0:04:4f:b1:61:ce:8d:e5:60:e4:28:79:
1d:45:d2:5a:dd:12:cf:d5:90:8f:06:8e:7f:7d:a2:98:85:64:
11:47:c3:8d:96:37:9c:df:9a:72:7f:c1:f9:04:d7:28:62:f3:
ab:8c:7d:7e:08:e5:0d:0c:4c:92:7e:12:00:cf:c0:f0:5b:6e:
a0:48:9b:06:f8:d1:ea:61:97:3c:9f:ce:f1:77:75:8e:43:e2:
f3:be:9f:14:55:41:95:a6:b5:34:de:d1:0c:69:3e:7c:a5:63:
6d:22:ac:ae
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUD15xeU2v8A81w5bCL7fEMBsZav4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzMxMTYwMDQ4WhcNMjUwNTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BhZGE5NjcxZmQyMGI1ZDM3YzNlMWIxNDExMGEwYjk0YThm
MGY0Njk2N2ZjM2Y1MzMxY2M5M2FjNWJmYTA4MDE1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDpK4uCCRQCK7GZ0azu/ow9MALDg57XOq5OzDOLNp6maYEC
H2vO8sXjTZkqG2uBYplFcr4zOPdIZUne/P4fMBu4nWzXijLG7Kgnx//R3x8CNrEI
pg6fCxC/MGlzp8H/fCbj2sAm6aZlWDoN8F+AcNMcYlBm9gPoXOripiugwydBUWTz
HvCp/+bdLL9mDFZik+R0IeoZWJwvR4FvWK3MGX6JNgJbNmYIZoPSSGMVLTqiEgnY
IWWiCpcHTteeOlpS+WuZmWq0M/FqSsuBhAFHHYqxFq4NezmWTzhiKD6couZ7mYst
Qdkwxe7qSkswfNcBFIlUJfb0a3QK8ze79x+c0uYvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUAbEfFZ6hOXu06ACDmbabCNuAdTkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzIxMjI0NDczLTQzM2MtNGZhMi05NDkxLWUxNDFhZThlZmJlYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZLA4AwDQYJKoZIhvcNAQELBQADggEBAI/IJJ/FSifp7xG0rfKFuJDHVv2O
QlZqYq1fhh8Dcy102jesfLS5Ab6FExy2tiFRIyemnBPTXH4WVRCZqClNjvVU4tFg
XylY1pUv0XFOqkTSkbahuyCeV/Q/OoZl59AOMqZfqfpZ8DHk8qdgxXEy7modcw00
gFWnUWNGaJF/Qdedd+iOAqM+Tka8XOalrOnprqaepxROMKAET7Fhzo3lYOQoeR1F
0lrdEs/VkI8Gjn99opiFZBFHw42WN5zfmnJ/wfkE1yhi86uMfX4I5Q0MTJJ+EgDP
wPBbbqBImwb40ephlzyfzvF3dY5D4vO+nxRVQZWmtTTe0QxpPnylY20irK4=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:18:59 2025 by rpki-client on console.sobornost.net