Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27aff6e8-577a-42bb-8881-56b16bef8f81.roa
File: 27aff6e8-577a-42bb-8881-56b16bef8f81.roa (raw, json)
Hash identifier: 41FzQs00EnENvB3DjYrwnZ8+UdRrHxAn8q9uenGMJBo=
Subject key identifier: 8C:9B:FE:0D:ED:14:34:C2:E9:D8:12:D4:94:58:BA:94:DA:B7:3F:3A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6117C1A4675DBD48E13451346B6422D73EB0C735
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27aff6e8-577a-42bb-8881-56b16bef8f81.roa
Signing time: Mon 31 Mar 2025 15:31:11 +0000
ROA not before: Mon 31 Mar 2025 15:31:11 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 40.164.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:17:c1:a4:67:5d:bd:48:e1:34:51:34:6b:64:22:d7:3e:b0:c7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 15:31:11 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=1b40a668a5142a2eb836d7a80fd9b296c92fa2ec2aeb89681526a6436af7b8e2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e3:3b:86:3c:1b:25:04:ff:8f:14:24:76:76:
0c:ae:98:75:e8:c2:62:b5:b3:f2:d2:7c:66:4b:2b:
d5:04:9a:b2:88:e3:70:25:be:c3:cb:dc:c1:91:f8:
c1:7b:12:2c:0e:ec:ce:a0:df:3e:e2:19:8a:08:ac:
84:9a:b3:f7:7e:d4:f1:b1:77:8b:0c:e7:a0:cd:4a:
3b:6f:a9:b2:b7:e9:71:83:f6:a0:c6:ab:7b:11:ca:
4b:32:08:c0:ff:a0:20:da:a5:18:12:23:50:2a:a3:
94:42:cf:56:b3:48:2c:ab:53:b4:50:31:39:0d:17:
c3:ed:3b:01:53:3f:8b:dd:11:68:5c:ba:1e:e4:c4:
bb:10:12:c4:e2:7b:c9:18:a8:68:f9:cb:e4:8d:1c:
1f:6c:d6:d3:1b:e2:4f:2b:d6:26:dd:d4:45:76:53:
f4:e5:1e:17:2e:b4:74:8c:c4:41:07:27:cb:af:9c:
2d:a1:d0:46:be:93:79:51:83:76:31:76:90:41:59:
b9:24:cc:47:37:34:bc:f3:05:50:26:c2:68:53:39:
0e:0d:c1:57:fc:92:4f:3c:89:a8:27:1d:0c:20:86:
dd:86:75:df:ee:dd:3c:93:05:89:65:b2:a6:48:bf:
9b:a4:e9:f7:65:d0:8f:bc:9c:d7:11:f8:4a:79:ab:
62:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9B:FE:0D:ED:14:34:C2:E9:D8:12:D4:94:58:BA:94:DA:B7:3F:3A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27aff6e8-577a-42bb-8881-56b16bef8f81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.164.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a7:43:44:c8:d3:0e:bc:6a:d4:27:7a:7f:12:b5:0d:fa:d9:15:
9d:0d:ff:25:0f:1c:90:ed:7a:54:73:89:d4:aa:84:fc:5c:8c:
90:8e:f6:77:3a:ed:07:e6:45:c6:11:b3:9b:08:9e:bd:db:0e:
88:9a:d9:68:71:d4:4b:aa:a8:99:0c:b1:50:ec:35:1b:7f:cf:
38:29:6d:35:c4:4a:5f:37:b6:cb:fd:44:af:8b:f2:57:2f:e2:
16:18:8e:c8:da:4d:f4:db:f9:00:6f:2e:27:25:01:52:29:8e:
0d:32:b3:26:51:de:af:f9:37:4e:1a:35:90:c3:a9:82:b9:7f:
48:25:0a:93:ca:96:94:fc:1d:7f:12:83:bf:9b:b6:3f:e6:e5:
7f:07:14:a9:62:1a:7b:e1:f0:55:1f:98:e0:73:2c:60:31:27:
e3:1a:2b:43:11:b5:e8:22:b7:68:6d:c2:a0:f2:ad:9f:17:30:
53:08:bf:c1:31:ba:f7:fb:a9:f2:bf:26:d2:89:81:9a:a0:d5:
b5:19:ac:90:6b:7e:ec:4b:c7:27:fd:a4:15:3b:ab:15:91:b4:
3f:01:aa:3e:35:a6:4a:2c:8b:9c:09:22:ca:99:62:68:77:fc:
b1:1c:e2:dc:73:0f:28:6d:99:0c:48:a0:f6:32:59:8e:36:86:
b3:27:03:86
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUYRfBpGddvUjhNFE0a2Qi1z6wxzUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzMxMTUzMTExWhcNMjUwNTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AxYjQwYTY2OGE1MTQyYTJlYjgzNmQ3YTgwZmQ5YjI5NmM5
MmZhMmVjMmFlYjg5NjgxNTI2YTY0MzZhZjdiOGUyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDm4zuGPBslBP+PFCR2dgyumHXowmK1s/LSfGZLK9UEmrKI
43AlvsPL3MGR+MF7EiwO7M6g3z7iGYoIrISas/d+1PGxd4sM56DNSjtvqbK36XGD
9qDGq3sRyksyCMD/oCDapRgSI1Aqo5RCz1azSCyrU7RQMTkNF8PtOwFTP4vdEWhc
uh7kxLsQEsTie8kYqGj5y+SNHB9s1tMb4k8r1ibd1EV2U/TlHhcutHSMxEEHJ8uv
nC2h0Ea+k3lRg3YxdpBBWbkkzEc3NLzzBVAmwmhTOQ4NwVf8kk88iagnHQwght2G
dd/u3TyTBYllsqZIv5uk6fdl0I+8nNcR+Ep5q2LTAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUjJv+De0UNMLp2BLUlFi6lNq3PzowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI3YWZmNmU4LTU3N2EtNDJiYi04ODgxLTU2YjE2YmVmOGY4MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAopDANBgkqhkiG9w0BAQsFAAOCAQEAp0NEyNMOvGrUJ3p/ErUN+tkVnQ3/
JQ8ckO16VHOJ1KqE/FyMkI72dzrtB+ZFxhGzmwievdsOiJrZaHHUS6qomQyxUOw1
G3/POCltNcRKXze2y/1Er4vyVy/iFhiOyNpN9Nv5AG8uJyUBUimODTKzJlHer/k3
Tho1kMOpgrl/SCUKk8qWlPwdfxKDv5u2P+blfwcUqWIae+HwVR+Y4HMsYDEn4xor
QxG16CK3aG3CoPKtnxcwUwi/wTG69/up8r8m0omBmqDVtRmskGt+7EvHJ/2kFTur
FZG0PwGqPjWmSiyLnAkiypliaHf8sRzi3HMPKG2ZDEig9jJZjjaGsycDhg==
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:00 2025 by rpki-client on console.sobornost.net