Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5104db5f-fd45-4603-92d6-05f0fd6e1def.roa
File: 5104db5f-fd45-4603-92d6-05f0fd6e1def.roa (raw, json)
Hash identifier: FNqQ7M6lUl1tc+eOWxmkWcqrIkB3IAm2o2AOhOT208c=
Subject key identifier: 19:4F:C9:47:F8:AD:AA:F3:30:F7:7C:BB:37:76:B2:CC:48:8D:95:EE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 098BDF7B9F866C72A36ECAF7C8EFE27CCA81DABE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5104db5f-fd45-4603-92d6-05f0fd6e1def.roa
Signing time: Mon 31 Mar 2025 15:40:30 +0000
ROA not before: Mon 31 Mar 2025 15:40:30 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.125.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:8b:df:7b:9f:86:6c:72:a3:6e:ca:f7:c8:ef:e2:7c:ca:81:da:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 15:40:30 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=0244537237124def569d1d9526a77cc64ef37d73141c568cfcfb690e9a906561, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:33:b4:58:6d:48:6f:a8:47:5a:28:69:63:ee:
12:74:1d:4d:96:89:1d:0a:81:1c:1d:48:dd:31:16:
e1:1c:d0:27:fc:1d:65:80:b8:32:7c:7b:c4:25:3c:
a3:b9:72:17:16:7b:37:57:07:1d:4a:02:a4:f8:6c:
30:16:1c:69:e0:13:cd:59:1c:0f:2b:ec:68:ca:3c:
6c:89:ef:7d:df:a0:3d:2e:bf:a9:6d:60:0b:d1:11:
a6:d5:4a:ef:89:d1:51:ca:60:ae:44:27:d3:71:39:
aa:ab:7e:c5:ae:b5:05:85:46:20:57:26:c0:38:18:
50:6a:e3:8c:94:38:60:08:5b:c5:5f:1b:45:f4:b0:
63:36:38:ea:25:1a:92:c7:a2:0a:26:2c:51:95:d0:
d8:38:fa:b9:7e:3a:cf:06:6c:b2:b4:b2:3c:e1:4d:
86:6a:06:85:9e:91:3b:3e:5c:e6:0b:78:6f:41:51:
77:fb:9a:6e:1b:67:e4:ce:b8:a5:5c:67:83:64:e8:
05:d8:70:6a:e0:b4:60:d4:58:6f:07:0c:9a:55:8e:
37:ab:6a:b6:ab:dc:11:72:3d:25:9d:76:3d:73:a6:
b1:40:ad:cb:7c:fa:6a:ff:f5:11:60:6a:1f:38:15:
99:93:10:71:2d:d3:3c:9d:5d:4d:07:a8:62:61:56:
1e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4F:C9:47:F8:AD:AA:F3:30:F7:7C:BB:37:76:B2:CC:48:8D:95:EE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5104db5f-fd45-4603-92d6-05f0fd6e1def.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.125.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:d8:81:7e:48:d1:f3:03:d7:86:d7:a5:c2:b7:45:12:63:24:
15:6c:85:f6:a6:51:4d:75:cb:7e:d2:31:0c:9d:cd:52:df:f8:
c4:7d:84:44:ca:71:ae:80:52:70:db:ff:4c:e8:50:df:84:5b:
8a:ac:d5:43:cc:22:ee:7b:28:fb:0c:ca:64:23:5b:e1:fa:61:
f7:b4:2d:d5:d3:e7:42:59:4f:e4:4b:f5:fc:bc:74:0a:27:6b:
cb:a7:d6:5f:a7:7b:fd:88:a6:1d:14:1a:72:2d:9a:f2:77:44:
20:c3:ce:d3:d4:1f:38:ad:34:b5:8a:24:1f:75:fd:a8:6f:ed:
80:f8:c6:76:9c:ad:94:10:48:3d:92:7a:c7:a8:41:76:6d:d0:
93:6d:f1:04:42:aa:f6:76:1b:e4:62:0f:99:1d:63:3d:19:87:
9d:1b:de:09:9b:95:88:9f:58:f1:5b:4f:d6:9b:49:ae:6f:e6:
11:b7:eb:2f:14:80:a6:bf:81:17:88:a8:23:31:c3:88:0e:3e:
7a:18:ad:9b:04:d1:a9:11:d8:e9:fd:97:dd:63:b5:ab:53:73:
db:b0:d6:a0:36:de:df:f9:9d:8d:04:a5:35:01:a1:6d:e8:2f:
19:ba:83:67:37:10:32:74:8f:ac:69:b6:b6:2f:14:ce:4a:20:
87:ed:f9:99
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUCYvfe5+GbHKjbsr3yO/ifMqB2r4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzMxMTU0MDMwWhcNMjUwNTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AwMjQ0NTM3MjM3MTI0ZGVmNTY5ZDFkOTUyNmE3N2NjNjRl
ZjM3ZDczMTQxYzU2OGNmY2ZiNjkwZTlhOTA2NTYxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCMM7RYbUhvqEdaKGlj7hJ0HU2WiR0KgRwdSN0xFuEc0Cf8
HWWAuDJ8e8QlPKO5chcWezdXBx1KAqT4bDAWHGngE81ZHA8r7GjKPGyJ733foD0u
v6ltYAvREabVSu+J0VHKYK5EJ9NxOaqrfsWutQWFRiBXJsA4GFBq44yUOGAIW8Vf
G0X0sGM2OOolGpLHogomLFGV0Ng4+rl+Os8GbLK0sjzhTYZqBoWekTs+XOYLeG9B
UXf7mm4bZ+TOuKVcZ4Nk6AXYcGrgtGDUWG8HDJpVjjerarar3BFyPSWddj1zprFA
rct8+mr/9RFgah84FZmTEHEt0zydXU0HqGJhVh51AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUGU/JR/itqvMw93y7N3ayzEiNle4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzUxMDRkYjVmLWZkNDUtNDYwMy05MmQ2LTA1ZjBmZDZlMWRlZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4fTANBgkqhkiG9w0BAQsFAAOCAQEAcdiBfkjR8wPXhtelwrdFEmMkFWyF
9qZRTXXLftIxDJ3NUt/4xH2ERMpxroBScNv/TOhQ34RbiqzVQ8wi7nso+wzKZCNb
4fph97Qt1dPnQllP5Ev1/Lx0Cidry6fWX6d7/YimHRQaci2a8ndEIMPO09QfOK00
tYokH3X9qG/tgPjGdpytlBBIPZJ6x6hBdm3Qk23xBEKq9nYb5GIPmR1jPRmHnRve
CZuViJ9Y8VtP1ptJrm/mEbfrLxSApr+BF4ioIzHDiA4+ehitmwTRqRHY6f2X3WO1
q1Nz27DWoDbe3/mdjQSlNQGhbegvGbqDZzcQMnSPrGm2ti8Uzkogh+35mQ==
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:05 2025 by rpki-client on console.sobornost.net