Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/579713b0-f99f-4653-8f39-039a43f1fb58.roa
File: 579713b0-f99f-4653-8f39-039a43f1fb58.roa (raw, json)
Hash identifier: BUPeGC7ILTz1/+C45a2onTqI/DtMgLAlck31iDZ9wes=
Subject key identifier: EE:12:E9:51:95:65:3A:31:C0:D2:44:DE:5C:9A:FB:04:64:BA:FE:BA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5BD0F8BA7A4F725E3299229304018D9D42E2413E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/579713b0-f99f-4653-8f39-039a43f1fb58.roa
Signing time: Tue 01 Apr 2025 00:00:22 +0000
ROA not before: Tue 01 Apr 2025 00:00:22 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 135.133.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:d0:f8:ba:7a:4f:72:5e:32:99:22:93:04:01:8d:9d:42:e2:41:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 1 00:00:22 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=4bdd03682ab61e7261e13830b98f2e3c77f688a623b9eaef4fb820fb693730f7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:24:77:fb:38:6c:2a:6e:63:b2:a1:44:ed:27:
dd:75:71:43:9c:01:9f:46:69:2d:02:67:34:a9:9d:
c2:4f:c6:52:a3:74:b7:20:e9:c2:d1:00:b0:fc:f8:
d2:50:aa:33:a5:12:fb:a6:d1:b9:d6:77:2e:8c:fb:
17:fb:5e:b8:a9:78:c5:4e:d3:b2:1f:5c:49:88:5c:
7a:5b:cf:bb:d6:eb:84:f8:c8:fe:f5:89:06:79:9d:
ca:21:41:ca:69:57:4b:13:bf:4c:c7:ab:d2:17:f8:
37:16:ad:09:59:8a:34:14:80:5f:dc:e7:a3:83:d7:
97:da:01:dd:dd:d2:35:a8:b0:cc:56:1b:82:b0:fc:
0f:36:c8:ce:a5:b8:a3:56:d7:c4:82:20:0e:41:19:
69:f5:05:fc:4e:ed:ec:a6:b9:a4:19:92:2f:1d:86:
23:9a:2a:4c:fe:55:d6:d1:c1:69:0b:33:73:b3:fc:
13:d3:e0:7a:1e:c4:e4:14:fd:2e:0b:36:6f:bb:94:
ea:62:4b:f4:b3:51:17:21:1f:78:13:2f:06:95:2e:
14:37:ef:98:3e:cc:18:91:b3:97:5d:96:ca:c6:11:
e1:68:7f:9a:0d:da:27:32:35:06:a9:5f:d5:b4:2d:
08:4e:45:a9:24:01:78:ef:c3:38:2d:bf:fe:5d:04:
59:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:12:E9:51:95:65:3A:31:C0:D2:44:DE:5C:9A:FB:04:64:BA:FE:BA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/579713b0-f99f-4653-8f39-039a43f1fb58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
135.133.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c1:2c:e1:98:c5:b5:18:10:3d:85:a5:ad:be:1c:d4:f6:7c:79:
92:9e:aa:ed:72:fa:1e:af:dd:fa:bd:21:2b:b2:f9:83:bf:ba:
8e:45:fb:88:b4:0f:ec:60:f1:df:8f:65:c0:24:b8:c3:02:f8:
2a:65:a7:ee:3b:54:0d:cd:7a:f2:b0:cb:cc:28:31:b3:e9:21:
c0:a0:40:1f:b3:49:60:f3:f3:f0:46:93:a4:e9:08:ae:5c:7d:
13:2d:30:c7:eb:c9:cb:1f:70:e9:16:f5:39:03:8e:d4:5d:94:
58:53:84:be:b4:06:4b:55:4e:22:61:46:a3:1e:05:79:9d:19:
06:07:a4:1d:e5:09:9a:b9:b1:10:e3:41:f1:46:1d:7a:3d:b3:
6f:52:e1:38:7b:4a:6e:ab:42:59:62:88:5f:ed:ea:5e:b0:de:
14:20:5f:d0:0d:2e:5c:0e:53:a9:c5:73:d5:f8:b4:be:5a:4f:
93:91:a8:72:88:f5:d9:16:69:21:59:61:07:f1:13:a2:b6:c0:
06:17:79:4b:72:f4:c8:02:87:4a:6f:65:0b:00:d3:6f:a5:50:
8a:69:05:f9:5c:0e:94:d6:3b:30:34:01:5b:7b:61:c8:6f:08:
80:a4:fd:30:09:5b:26:96:66:68:10:21:07:06:0b:36:16:c8:
40:96:b5:62
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUW9D4unpPcl4ymSKTBAGNnULiQT4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDAxMDAwMDIyWhcNMjUwNTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A0YmRkMDM2ODJhYjYxZTcyNjFlMTM4MzBiOThmMmUzYzc3
ZjY4OGE2MjNiOWVhZWY0ZmI4MjBmYjY5MzczMGY3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCeJHf7OGwqbmOyoUTtJ911cUOcAZ9GaS0CZzSpncJPxlKj
dLcg6cLRALD8+NJQqjOlEvum0bnWdy6M+xf7XripeMVO07IfXEmIXHpbz7vW64T4
yP71iQZ5ncohQcppV0sTv0zHq9IX+DcWrQlZijQUgF/c56OD15faAd3d0jWosMxW
G4Kw/A82yM6luKNW18SCIA5BGWn1BfxO7eymuaQZki8dhiOaKkz+VdbRwWkLM3Oz
/BPT4HoexOQU/S4LNm+7lOpiS/SzURchH3gTLwaVLhQ375g+zBiRs5ddlsrGEeFo
f5oN2icyNQapX9W0LQhORakkAXjvwzgtv/5dBFlbAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU7hLpUZVlOjHA0kTeXJr7BGS6/rowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzU3OTcxM2IwLWY5OWYtNDY1My04ZjM5LTAzOWE0M2YxZmI1OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCHhTANBgkqhkiG9w0BAQsFAAOCAQEAwSzhmMW1GBA9haWtvhzU9nx5kp6q
7XL6Hq/d+r0hK7L5g7+6jkX7iLQP7GDx349lwCS4wwL4KmWn7jtUDc168rDLzCgx
s+khwKBAH7NJYPPz8EaTpOkIrlx9Ey0wx+vJyx9w6Rb1OQOO1F2UWFOEvrQGS1VO
ImFGox4FeZ0ZBgekHeUJmrmxEONB8UYdej2zb1LhOHtKbqtCWWKIX+3qXrDeFCBf
0A0uXA5TqcVz1fi0vlpPk5Gocoj12RZpIVlhB/ETorbABhd5S3L0yAKHSm9lCwDT
b6VQimkF+VwOlNY7MDQBW3thyG8IgKT9MAlbJpZmaBAhBwYLNhbIQJa1Yg==
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:06 2025 by rpki-client on console.sobornost.net