Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259d77c8-b072-4d7a-bc33-ac5ef1fadfeb.roa
File: 259d77c8-b072-4d7a-bc33-ac5ef1fadfeb.roa (raw, json)
Hash identifier: nKk4XPho9oMqo9z/uzPSfFYHKljbcVurxZZfvlk+NNw=
Subject key identifier: D9:96:C9:38:B9:AB:CF:E0:ED:00:5C:06:EE:D7:1F:DC:89:0B:6C:3C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1455E855332BD7586ED9B0A3D59613F79BA8FB63
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259d77c8-b072-4d7a-bc33-ac5ef1fadfeb.roa
Signing time: Mon 31 Mar 2025 16:01:37 +0000
ROA not before: Mon 31 Mar 2025 16:01:37 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 98.88.0.0/13 maxlen: 13
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:55:e8:55:33:2b:d7:58:6e:d9:b0:a3:d5:96:13:f7:9b:a8:fb:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 16:01:37 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=8e01bc72fbb12b594d9e24a32aa8fcfa2d7e33bbf1f23bb54f98d5be09985926, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:3a:a5:e1:e3:22:13:b4:17:cb:58:5c:67:
af:d5:66:9b:84:ee:7c:7e:55:57:59:80:0c:a9:19:
6a:56:d9:ec:dc:f7:77:bc:ee:29:16:ce:67:92:c7:
87:1b:01:87:4f:41:d0:ae:fb:4a:e4:b5:9a:62:20:
0d:62:1c:35:4c:ed:78:2b:66:03:e2:52:28:bb:f4:
4a:31:53:94:4f:2b:5e:34:9d:d0:86:b1:8d:9a:98:
9a:0e:80:a2:70:29:53:3b:87:25:68:74:61:e3:01:
4d:5c:09:3d:bf:05:36:96:ff:95:2d:a6:5c:d0:47:
0e:a2:49:9a:5a:c8:80:62:9c:7d:a8:49:94:6b:0d:
e3:f4:aa:9f:92:fc:35:9b:56:eb:a6:b8:4e:95:f2:
51:6e:97:c6:6e:fb:b8:7b:c5:13:88:e5:25:2a:0d:
40:cc:b8:a8:90:8e:10:e8:45:0b:07:43:40:75:1a:
2d:79:5b:5a:d3:cc:b1:ee:5e:10:66:cf:a8:f1:87:
53:12:8b:67:ca:d6:e0:6f:e1:33:69:07:38:12:4f:
ef:38:1e:01:8e:24:8c:bd:b6:41:24:c7:1b:db:94:
9d:56:ed:2c:33:6c:1d:37:1e:7b:74:ef:69:d3:b8:
1d:f7:72:73:f5:64:61:22:05:31:09:f7:7a:1e:54:
de:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:96:C9:38:B9:AB:CF:E0:ED:00:5C:06:EE:D7:1F:DC:89:0B:6C:3C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259d77c8-b072-4d7a-bc33-ac5ef1fadfeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.88.0.0/13
Signature Algorithm: sha256WithRSAEncryption
7c:5e:d4:a4:4b:32:ef:c3:ae:3c:0b:a8:3f:cd:02:7f:43:10:
9e:3c:6e:52:10:ef:8e:06:12:48:4c:54:79:ac:c1:ed:c3:63:
5a:6c:7a:f6:a7:1a:81:ef:39:cb:9f:2b:ae:02:14:bc:7b:c8:
a1:c1:65:fb:e3:bc:e3:df:34:88:d5:cb:bc:97:78:59:96:97:
5d:08:96:37:e0:0c:d2:7a:d3:df:8c:38:09:a4:6f:ff:95:90:
f6:83:70:2a:e5:76:09:51:64:e3:83:51:bb:bc:98:1e:a3:78:
e7:39:46:05:d2:01:b8:7b:76:e5:0d:86:e1:af:83:26:50:d7:
10:d5:5e:e8:72:9d:51:27:be:9c:4d:45:dd:5a:aa:30:ec:b3:
69:aa:8f:d3:92:4a:45:1c:1d:b7:d4:03:f2:9f:da:5d:18:6b:
73:4a:2a:d0:46:ab:f2:17:ba:c6:22:ce:70:ab:6d:c3:e6:50:
7a:09:1b:cd:6e:37:06:a7:dd:e5:8b:36:1f:08:af:eb:5f:a0:
fd:7e:f9:81:f3:f7:ae:9c:ff:a5:bc:fc:de:a1:9a:78:37:65:
4f:13:e2:aa:65:42:d6:a3:bc:6d:b1:9f:5e:c7:11:34:f1:bf:
3a:80:d5:1e:ed:b2:b1:da:eb:a7:e4:c3:c3:1b:c8:9f:97:a9:
2d:9c:05:86
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUFFXoVTMr11hu2bCj1ZYT95uo+2MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzMxMTYwMTM3WhcNMjUwNTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A4ZTAxYmM3MmZiYjEyYjU5NGQ5ZTI0YTMyYWE4ZmNmYTJk
N2UzM2JiZjFmMjNiYjU0Zjk4ZDViZTA5OTg1OTI2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxWDql4eMiE7QXy1hcZ6/VZpuE7nx+VVdZgAypGWpW2ezc
93e87ikWzmeSx4cbAYdPQdCu+0rktZpiIA1iHDVM7XgrZgPiUii79EoxU5RPK140
ndCGsY2amJoOgKJwKVM7hyVodGHjAU1cCT2/BTaW/5UtplzQRw6iSZpayIBinH2o
SZRrDeP0qp+S/DWbVuumuE6V8lFul8Zu+7h7xROI5SUqDUDMuKiQjhDoRQsHQ0B1
Gi15W1rTzLHuXhBmz6jxh1MSi2fK1uBv4TNpBzgST+84HgGOJIy9tkEkxxvblJ1W
7SwzbB03Hnt072nTuB33cnP1ZGEiBTEJ93oeVN53AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU2ZbJOLmrz+DtAFwG7tcf3IkLbDwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI1OWQ3N2M4LWIwNzItNGQ3YS1iYzMzLWFjNWVmMWZhZGZlYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwNiWDANBgkqhkiG9w0BAQsFAAOCAQEAfF7UpEsy78OuPAuoP80Cf0MQnjxu
UhDvjgYSSExUeazB7cNjWmx69qcage85y58rrgIUvHvIocFl++O84980iNXLvJd4
WZaXXQiWN+AM0nrT34w4CaRv/5WQ9oNwKuV2CVFk44NRu7yYHqN45zlGBdIBuHt2
5Q2G4a+DJlDXENVe6HKdUSe+nE1F3VqqMOyzaaqP05JKRRwdt9QD8p/aXRhrc0oq
0Ear8he6xiLOcKttw+ZQegkbzW43Bqfd5Ys2Hwiv61+g/X75gfP3rpz/pbz83qGa
eDdlTxPiqmVC1qO8bbGfXscRNPG/OoDVHu2ysdrrp+TDwxvIn5epLZwFhg==
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:00 2025 by rpki-client on console.sobornost.net