Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f20d090-8e13-4bdc-bfb7-1fe336e788b4.roa
File: 5f20d090-8e13-4bdc-bfb7-1fe336e788b4.roa (raw, json)
Hash identifier: mNftkn5A17Mm1oIPyI41VIMPpHUBDEwSgylEzLstX/0=
Subject key identifier: 7A:DD:F7:28:80:52:9F:D6:6D:25:A6:F5:59:6F:66:31:1B:9E:FB:CB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2BDF456670690EA27ACE7A763986CFB9C4467B44
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f20d090-8e13-4bdc-bfb7-1fe336e788b4.roa
Signing time: Fri 11 Apr 2025 17:38:28 +0000
ROA not before: Fri 11 Apr 2025 17:38:28 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 204.33.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:df:45:66:70:69:0e:a2:7a:ce:7a:76:39:86:cf:b9:c4:46:7b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 11 17:38:28 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=8b8803637bd6dabf237de5004ce6aaa53d61406733c23a69bc30580a91adb6ed, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5c:9f:4c:4f:e1:15:01:92:98:40:84:42:22:
5e:97:01:26:82:80:ed:08:b0:18:f2:b0:fe:eb:26:
ad:d1:f2:1c:87:ad:7a:54:56:6b:b4:f7:7e:a4:16:
19:41:e9:83:a1:e1:a5:42:51:ba:10:f5:c5:4a:8b:
4f:0c:21:99:37:f2:bd:5c:d5:be:96:db:3c:19:35:
7c:93:31:33:77:70:ba:57:30:96:44:43:cc:da:f5:
76:b7:e8:8e:d0:12:f4:a1:a0:3e:81:ac:f3:17:f4:
dd:3e:0f:74:ad:69:29:ac:1e:64:53:ea:9f:52:51:
55:1d:0a:30:82:a2:1c:92:03:8f:97:5d:22:f7:5b:
a1:ef:d1:fc:f0:bf:18:27:5e:1d:67:2f:8c:b2:a6:
56:8b:7e:5f:75:7b:e9:fa:d7:c8:8e:fa:07:ed:dc:
aa:08:24:2d:1f:77:28:0a:dc:f9:66:4c:39:0a:35:
df:28:07:92:c8:dc:8d:20:03:14:61:59:ca:d7:a7:
22:e4:69:00:aa:3c:e0:38:a3:63:84:a9:a5:9d:3e:
c0:fe:0a:f6:d6:79:56:f3:e9:03:c2:b2:d9:36:78:
32:85:ae:f2:be:d7:d4:8b:98:09:ef:40:b6:fc:45:
46:0c:ec:59:6e:e8:30:6a:01:a0:3e:06:6f:6c:34:
53:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DD:F7:28:80:52:9F:D6:6D:25:A6:F5:59:6F:66:31:1B:9E:FB:CB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f20d090-8e13-4bdc-bfb7-1fe336e788b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.33.128.0/20
Signature Algorithm: sha256WithRSAEncryption
68:20:12:7a:73:80:59:fa:a8:db:f9:81:90:91:c0:e6:66:2d:
a8:e1:28:6e:20:c9:da:fb:86:f1:60:8f:7f:d1:0f:a2:89:b3:
bf:89:3a:59:91:4f:7e:b9:f7:71:de:8f:07:30:88:dc:64:db:
66:61:1f:ce:8e:52:bc:89:0a:aa:49:5d:08:2b:92:30:bb:e3:
e1:81:97:d5:2f:d3:0f:fb:b2:b0:b7:f9:cb:59:1d:ce:84:fa:
04:89:d4:6f:dc:00:33:e9:c9:be:1f:3e:e1:c5:a9:63:78:15:
1f:22:06:f7:95:d8:a1:36:41:11:e3:bb:15:bc:4d:b9:a1:10:
77:9d:7c:41:e4:ed:03:81:ec:c4:f0:f6:3f:1b:f8:57:9d:72:
e8:41:87:b4:71:42:60:96:55:ac:49:08:0f:dd:56:76:fb:92:
f2:a1:32:8a:30:23:cc:44:18:d0:32:55:9b:98:64:1e:c1:9a:
3c:88:d2:a0:0e:d5:4c:8b:73:e6:95:f4:99:d2:33:f1:57:7d:
a9:f0:c3:1c:a9:37:a1:0f:00:4c:4e:a7:ee:12:ee:c6:4d:30:
bc:80:05:c6:c4:ca:3b:79:9f:08:d0:8f:2c:b9:c2:3b:0e:46:
62:a5:3b:99:bd:8f:42:18:1c:6e:57:e7:3b:f6:1e:9f:23:82:
9a:54:8f:5f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUK99FZnBpDqJ6znp2OYbPucRGe0QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDExMTczODI4WhcNMjUwNTE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A4Yjg4MDM2MzdiZDZkYWJmMjM3ZGU1MDA0Y2U2YWFhNTNk
NjE0MDY3MzNjMjNhNjliYzMwNTgwYTkxYWRiNmVkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDHXJ9MT+EVAZKYQIRCIl6XASaCgO0IsBjysP7rJq3R8hyH
rXpUVmu0936kFhlB6YOh4aVCUboQ9cVKi08MIZk38r1c1b6W2zwZNXyTMTN3cLpX
MJZEQ8za9Xa36I7QEvShoD6BrPMX9N0+D3StaSmsHmRT6p9SUVUdCjCCohySA4+X
XSL3W6Hv0fzwvxgnXh1nL4yyplaLfl91e+n618iO+gft3KoIJC0fdygK3PlmTDkK
Nd8oB5LI3I0gAxRhWcrXpyLkaQCqPOA4o2OEqaWdPsD+CvbWeVbz6QPCstk2eDKF
rvK+19SLmAnvQLb8RUYM7Flu6DBqAaA+Bm9sNFNZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUet33KIBSn9ZtJab1WW9mMRue+8swHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVmMjBkMDkwLThlMTMtNGJkYy1iZmI3LTFmZTMzNmU3ODhiNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATMIYAwDQYJKoZIhvcNAQELBQADggEBAGggEnpzgFn6qNv5gZCRwOZmLajh
KG4gydr7hvFgj3/RD6KJs7+JOlmRT36593HejwcwiNxk22ZhH86OUryJCqpJXQgr
kjC74+GBl9Uv0w/7srC3+ctZHc6E+gSJ1G/cADPpyb4fPuHFqWN4FR8iBveV2KE2
QRHjuxW8TbmhEHedfEHk7QOB7MTw9j8b+FedcuhBh7RxQmCWVaxJCA/dVnb7kvKh
MoowI8xEGNAyVZuYZB7BmjyI0qAO1UyLc+aV9JnSM/FXfanwwxypN6EPAExOp+4S
7sZNMLyABcbEyjt5nwjQjyy5wjsORmKlO5m9j0IYHG5X5zv2Hp8jgppUj18=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:07 2025 by rpki-client on console.sobornost.net