Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68d10ddc-0e77-4eb8-a625-89c8780d49ea.roa
File: 68d10ddc-0e77-4eb8-a625-89c8780d49ea.roa (raw, json)
Hash identifier: jm07mSle2Rg/TdXUY0+AuJ+G/bUH0d6WZqIi35XAFQc=
Subject key identifier: E2:67:42:AF:B0:BF:E8:E5:F9:03:F8:D3:42:0A:7D:C4:D2:F1:AC:D4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5C7B74FB8665C15D12D9EC68A66FD7180BEE233E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68d10ddc-0e77-4eb8-a625-89c8780d49ea.roa
Signing time: Wed 02 Apr 2025 00:21:05 +0000
ROA not before: Wed 02 Apr 2025 00:21:05 +0000
ROA not after: Wed 07 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 77.123.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:7b:74:fb:86:65:c1:5d:12:d9:ec:68:a6:6f:d7:18:0b:ee:23:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 2 00:21:05 2025 GMT
Not After : May 7 23:59:59 2025 GMT
Subject: serialNumber=d355a086ffd97c7c6ae2a599f0ea6a32866e38c47da82391c1bda5cf661ddfbc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:5b:47:38:cf:a8:c1:94:a2:31:a3:34:61:
1e:2b:7e:8d:36:e9:a8:b4:12:04:b7:b2:a1:93:99:
0b:1f:f7:41:4b:af:2a:06:53:44:67:b8:69:0d:25:
7e:04:d1:01:b0:97:cf:ac:fc:84:52:b4:0f:d7:9a:
77:5b:b0:94:a2:11:c0:91:91:c9:b2:31:f2:bb:9b:
90:16:17:8c:21:f5:b2:cf:0d:fb:b6:cb:95:4c:50:
94:5d:b1:c0:16:31:f8:7e:e2:99:9f:80:ee:e9:c7:
ab:f7:e9:15:6b:0a:69:e3:47:0c:bf:e1:b6:e6:e5:
13:97:a9:b3:d8:7e:ff:ab:ba:13:44:0c:d3:4a:98:
a1:54:dd:9c:c3:b9:ba:63:4b:b9:7e:b2:87:1d:cd:
3f:8b:69:4e:60:34:85:e9:35:7e:d6:63:42:79:27:
fc:19:5e:f3:26:b9:53:9a:df:1a:6a:00:8f:4e:d6:
ae:3b:e4:09:f1:d3:59:4e:42:d9:a9:97:0a:2f:f9:
ed:da:4e:f2:5e:b6:e4:08:84:7f:a0:98:5e:e5:a0:
9b:53:15:79:e4:be:d6:da:50:72:fa:f4:a5:d4:18:
8b:ca:11:72:c2:88:de:08:0d:36:46:cd:0c:0f:29:
3f:20:02:f7:b4:01:aa:d5:6a:e2:66:8b:3c:6c:48:
4a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:67:42:AF:B0:BF:E8:E5:F9:03:F8:D3:42:0A:7D:C4:D2:F1:AC:D4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68d10ddc-0e77-4eb8-a625-89c8780d49ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.123.0.0/17
Signature Algorithm: sha256WithRSAEncryption
54:ee:19:5a:01:ca:46:e8:0e:0f:c1:31:4d:23:50:7f:8c:d4:
f6:d0:63:98:ae:a0:28:a8:9e:6d:0e:a0:72:02:19:16:91:d8:
21:d5:12:87:bb:c1:10:99:05:68:7a:6a:b4:60:9d:e3:62:64:
8c:bb:4f:94:a2:98:73:41:7d:74:cd:54:12:b7:21:59:ad:ea:
5d:95:44:fe:30:97:71:90:a9:d1:e3:96:39:38:9f:9a:04:86:
cd:27:01:41:68:9c:c1:d2:22:28:82:82:b3:70:6d:5e:14:4e:
e1:7f:8b:8a:bb:e7:dc:cf:a4:da:9b:c2:bc:ef:97:e7:e0:f6:
a2:f1:2e:68:00:66:6c:af:89:c7:cd:04:94:b9:7c:84:8a:1e:
2a:72:35:f9:14:a1:4f:98:f2:1c:fb:be:64:6b:33:80:b6:76:
e9:d7:fd:78:f4:f6:a4:31:75:77:4e:dc:4a:3d:b5:87:2a:6c:
1e:06:e2:14:49:11:d5:63:ad:cb:3f:0b:76:86:dc:26:09:1d:
39:c3:10:56:49:1a:06:a1:8d:71:98:7b:78:d4:76:43:5e:b4:
99:36:60:db:94:58:0a:0a:47:5a:e4:2e:22:24:a9:2c:f3:51:
71:a9:46:2b:18:27:ed:c0:72:c2:cf:ff:8d:0e:17:00:56:9b:
ed:bd:db:0c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXHt0+4ZlwV0S2exopm/XGAvuIz4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDAyMDAyMTA1WhcNMjUwNTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BkMzU1YTA4NmZmZDk3YzdjNmFlMmE1OTlmMGVhNmEzMjg2
NmUzOGM0N2RhODIzOTFjMWJkYTVjZjY2MWRkZmJjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDAKVtHOM+owZSiMaM0YR4rfo026ai0EgS3sqGTmQsf90FL
ryoGU0RnuGkNJX4E0QGwl8+s/IRStA/XmndbsJSiEcCRkcmyMfK7m5AWF4wh9bLP
Dfu2y5VMUJRdscAWMfh+4pmfgO7px6v36RVrCmnjRwy/4bbm5ROXqbPYfv+ruhNE
DNNKmKFU3ZzDubpjS7l+socdzT+LaU5gNIXpNX7WY0J5J/wZXvMmuVOa3xpqAI9O
1q475Anx01lOQtmplwov+e3aTvJetuQIhH+gmF7loJtTFXnkvtbaUHL69KXUGIvK
EXLCiN4IDTZGzQwPKT8gAve0AarVauJmizxsSEq9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU4mdCr7C/6OX5A/jTQgp9xNLxrNQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzY4ZDEwZGRjLTBlNzctNGViOC1hNjI1LTg5Yzg3ODBkNDllYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAdNewAwDQYJKoZIhvcNAQELBQADggEBAFTuGVoBykboDg/BMU0jUH+M1PbQ
Y5iuoCionm0OoHICGRaR2CHVEoe7wRCZBWh6arRgneNiZIy7T5SimHNBfXTNVBK3
IVmt6l2VRP4wl3GQqdHjljk4n5oEhs0nAUFonMHSIiiCgrNwbV4UTuF/i4q759zP
pNqbwrzvl+fg9qLxLmgAZmyvicfNBJS5fISKHipyNfkUoU+Y8hz7vmRrM4C2dunX
/Xj09qQxdXdO3Eo9tYcqbB4G4hRJEdVjrcs/C3aG3CYJHTnDEFZJGgahjXGYe3jU
dkNetJk2YNuUWAoKR1rkLiIkqSzzUXGpRisYJ+3AcsLP/40OFwBWm+292ww=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:08 2025 by rpki-client on console.sobornost.net