Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55f6be6e-a10f-4f03-9a9e-9d4a356580c2.roa
File: 55f6be6e-a10f-4f03-9a9e-9d4a356580c2.roa (raw, json)
Hash identifier: 6O6iNQIhDo8y8r/ZbePoVwICwiJoHJAn/YqHTZzzxFs=
Subject key identifier: D5:5C:75:2E:2B:02:FA:D0:B6:DE:20:71:39:3E:EB:3C:82:5A:B2:6E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 763FB710B748A8F094192B255986AF3025627FE9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55f6be6e-a10f-4f03-9a9e-9d4a356580c2.roa
Signing time: Mon 31 Mar 2025 15:10:28 +0000
ROA not before: Mon 31 Mar 2025 15:10:28 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.22.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:3f:b7:10:b7:48:a8:f0:94:19:2b:25:59:86:af:30:25:62:7f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 15:10:28 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=0fa749c60e9306bfd83e25a1bbaa751eddb3c04ac3a240b019361c68a927f8a9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:e0:80:d1:bd:26:df:6e:76:1e:6e:0a:4a:
be:19:5b:18:01:ab:3d:c1:ff:fc:01:81:00:56:9c:
87:ca:d7:2e:91:61:4b:24:61:b5:46:6a:35:22:bc:
22:c5:56:73:48:42:3f:48:e0:ef:5c:19:f5:2d:78:
f2:3d:55:94:97:d7:27:f1:91:dd:bd:f2:08:81:29:
c1:1c:f5:0c:4e:a6:fa:30:ab:ab:bb:c9:37:b2:4b:
9f:64:d2:4a:00:3b:2e:f0:ed:57:b5:b9:e3:0d:da:
c8:03:63:a5:6c:6d:04:c3:b0:40:78:7d:e3:03:88:
6c:32:0e:32:b5:b6:51:b0:fd:de:5b:ff:b8:23:50:
a6:a6:f7:b6:0f:88:6f:02:37:ca:9f:26:44:ca:c7:
eb:6c:d7:c3:e0:bf:cc:ec:4f:60:5a:68:e7:4d:fa:
30:2c:fc:17:5d:67:5f:46:e2:69:1e:09:5d:69:04:
cf:ba:25:7d:7c:f5:e8:3b:bd:ca:38:21:21:23:b5:
7b:5f:c6:60:40:04:bf:57:cd:62:69:e5:b9:c9:9b:
8b:76:8d:b8:e1:c8:98:78:20:83:77:d2:07:28:d7:
07:f2:b2:1f:1d:44:51:f0:c1:fe:c5:72:b1:c3:e5:
28:4f:14:3a:97:89:59:c3:84:e0:23:c2:9c:4c:24:
f0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5C:75:2E:2B:02:FA:D0:B6:DE:20:71:39:3E:EB:3C:82:5A:B2:6E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55f6be6e-a10f-4f03-9a9e-9d4a356580c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.22.76.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:43:b5:7d:86:1c:2c:07:ca:e0:67:93:c7:1e:ee:66:ea:52:
2d:da:64:42:7e:8a:a0:75:ce:1e:3c:6c:cb:25:d3:df:74:a4:
34:53:5f:f1:2d:23:50:53:7a:1e:33:da:0d:27:c9:d2:2c:6a:
0f:c0:9d:ea:64:6b:c9:59:ef:16:d0:e6:9f:04:ac:bb:a7:42:
3f:1c:6c:71:4c:7f:33:11:9e:57:e7:f4:cc:0d:7f:ea:28:03:
e2:ed:26:27:03:eb:f6:c0:c0:b0:ad:98:ac:6c:94:da:59:67:
89:c5:7a:25:38:30:de:9c:50:d5:19:06:16:30:27:0a:58:86:
5a:bc:2c:9e:76:62:5e:e0:47:9b:72:4b:63:cc:56:76:03:f1:
b9:f8:4e:83:b4:d2:8b:a9:b9:dc:93:07:b4:64:b3:46:10:49:
f0:a5:18:3d:e5:dd:c2:da:32:ca:c9:06:1d:57:9a:42:8b:a2:
19:8d:af:79:1f:e2:5e:ae:2f:bd:91:92:55:2a:33:71:2e:0a:
1e:55:18:76:5e:3d:e0:23:ec:66:cf:d0:f7:e2:20:c3:a8:d7:
35:6a:0a:51:29:0b:bd:9c:24:c0:1d:da:22:b6:42:8b:30:40:
a4:b3:76:c7:47:3c:af:75:33:c7:5a:80:13:6e:40:f7:67:3e:
70:52:48:0c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUdj+3ELdIqPCUGSslWYavMCVif+kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzMxMTUxMDI4WhcNMjUwNTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AwZmE3NDljNjBlOTMwNmJmZDgzZTI1YTFiYmFhNzUxZWRk
YjNjMDRhYzNhMjQwYjAxOTM2MWM2OGE5MjdmOGE5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5IeCA0b0m3252Hm4KSr4ZWxgBqz3B//wBgQBWnIfK1y6R
YUskYbVGajUivCLFVnNIQj9I4O9cGfUtePI9VZSX1yfxkd298giBKcEc9QxOpvow
q6u7yTeyS59k0koAOy7w7Ve1ueMN2sgDY6VsbQTDsEB4feMDiGwyDjK1tlGw/d5b
/7gjUKam97YPiG8CN8qfJkTKx+ts18Pgv8zsT2BaaOdN+jAs/BddZ19G4mkeCV1p
BM+6JX189eg7vco4ISEjtXtfxmBABL9XzWJp5bnJm4t2jbjhyJh4IIN30gco1wfy
sh8dRFHwwf7FcrHD5ShPFDqXiVnDhOAjwpxMJPAvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU1Vx1LisC+tC23iBxOT7rPIJasm4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzU1ZjZiZTZlLWExMGYtNGYwMy05YTllLTlkNGEzNTY1ODBjMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIXFkwwDQYJKoZIhvcNAQELBQADggEBAKJDtX2GHCwHyuBnk8ce7mbqUi3a
ZEJ+iqB1zh48bMsl0990pDRTX/EtI1BTeh4z2g0nydIsag/Anepka8lZ7xbQ5p8E
rLunQj8cbHFMfzMRnlfn9MwNf+ooA+LtJicD6/bAwLCtmKxslNpZZ4nFeiU4MN6c
UNUZBhYwJwpYhlq8LJ52Yl7gR5tyS2PMVnYD8bn4ToO00oupudyTB7Rks0YQSfCl
GD3l3cLaMsrJBh1XmkKLohmNr3kf4l6uL72RklUqM3EuCh5VGHZePeAj7GbP0Pfi
IMOo1zVqClEpC72cJMAd2iK2QoswQKSzdsdHPK91M8dagBNuQPdnPnBSSAw=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:06 2025 by rpki-client on console.sobornost.net