Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82607ad4-44a2-4b62-972f-23b1781a475d.roa
File: 82607ad4-44a2-4b62-972f-23b1781a475d.roa (raw, json)
Hash identifier: afYFNlAx6K/B2BA60o2p7Im0027g5p6xTSqd5tOPT1I=
Subject key identifier: 09:3F:97:20:01:2F:8C:8E:BB:B6:E4:10:73:27:4E:52:06:DF:59:1C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0F6F91FA81AA00B8D1402D4755A38A32D3CF954A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82607ad4-44a2-4b62-972f-23b1781a475d.roa
Signing time: Tue 15 Apr 2025 00:00:28 +0000
ROA not before: Tue 15 Apr 2025 00:00:28 +0000
ROA not after: Tue 20 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.67.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:6f:91:fa:81:aa:00:b8:d1:40:2d:47:55:a3:8a:32:d3:cf:95:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 15 00:00:28 2025 GMT
Not After : May 20 23:59:59 2025 GMT
Subject: serialNumber=9eb97ef16ef75dc42ed8e9a089eec468028ff60c30bdd0bddcc6f52aa9a04e59, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:66:0a:c6:95:fe:fb:fa:49:68:f8:0e:fd:71:
ff:81:35:63:98:16:48:c9:83:51:ad:c0:30:6a:46:
0e:40:53:4a:1a:7a:e7:af:9e:28:39:02:aa:93:16:
69:71:bd:71:1b:eb:1f:cd:ba:d0:e4:d1:4a:8b:06:
a6:7d:e3:d3:79:2f:9d:92:82:60:55:da:18:04:1e:
ce:27:bb:5c:db:7a:fa:bd:25:c1:c4:1b:79:19:f0:
7b:df:e2:65:67:01:1c:cd:dc:7a:62:e0:e5:3c:aa:
48:c5:db:b1:b8:63:43:82:1f:ae:78:7f:f7:47:57:
0b:7c:ed:16:44:17:5c:76:b1:ba:d6:78:04:33:1b:
ba:97:b8:51:e9:e0:81:ea:cb:5e:d5:a6:98:f8:9a:
99:ef:55:cb:a9:75:d2:7c:06:c0:1c:97:f0:c5:32:
c8:70:b4:6a:cc:5b:b7:e8:8d:07:91:cb:cb:70:e4:
de:71:f4:a9:03:3e:f9:fe:be:ac:f2:f1:e7:3e:49:
d7:60:a2:06:2b:55:ce:cc:87:4a:e4:75:76:67:2d:
ef:6e:12:db:96:93:5b:76:04:c5:cf:7b:c7:f2:6a:
9c:c7:1c:9f:8e:84:47:ae:2f:94:1f:11:0f:ce:cd:
81:e3:71:b3:df:65:ed:53:4e:c8:f2:ee:ea:5e:c6:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3F:97:20:01:2F:8C:8E:BB:B6:E4:10:73:27:4E:52:06:DF:59:1C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82607ad4-44a2-4b62-972f-23b1781a475d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.67.0.0/16
Signature Algorithm: sha256WithRSAEncryption
41:9b:ed:f1:21:42:e9:6e:f5:8c:6c:c5:ab:ec:0a:ff:ee:c0:
8c:33:e4:13:89:2f:14:bd:d8:24:bd:a0:13:d2:68:d9:ec:30:
3f:c2:70:99:68:e9:4e:1b:c4:58:76:52:41:a2:be:97:f5:2f:
d2:8f:c9:69:27:97:1c:1e:5b:ed:fe:73:2f:b7:7a:8d:10:1b:
61:03:8f:a0:65:91:74:f9:5b:e1:74:18:46:41:6c:b4:77:8d:
45:71:27:81:0c:b4:6a:7e:b1:7e:de:1f:86:9e:f2:35:bf:e5:
c8:b1:9a:23:34:16:43:57:1d:da:b9:2d:f2:75:f1:92:49:25:
f2:ae:3d:24:f7:47:4f:72:01:8d:dd:b6:b8:bc:a6:3d:b6:de:
28:37:7e:1b:c5:98:51:d8:c4:4b:30:75:ef:31:54:54:4b:13:
2a:df:05:03:32:3a:1b:7a:54:c5:b0:84:df:e0:ed:c4:89:70:
e5:27:e8:f9:06:eb:ba:8d:74:a9:89:11:b6:61:56:79:86:48:
6a:42:26:b0:4d:34:38:f5:45:99:c9:a2:33:7a:95:6a:55:27:
cd:54:6f:b2:a8:58:86:c8:72:06:b8:d1:cc:ec:2e:25:eb:f1:
8f:6f:ad:c8:86:c8:5d:dc:dd:28:b3:9a:0a:7c:ed:f5:7d:b5:
e6:1f:d1:88
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUD2+R+oGqALjRQC1HVaOKMtPPlUowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE1MDAwMDI4WhcNMjUwNTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZWI5N2VmMTZlZjc1ZGM0MmVkOGU5YTA4OWVlYzQ2ODAy
OGZmNjBjMzBiZGQwYmRkY2M2ZjUyYWE5YTA0ZTU5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDTZgrGlf77+klo+A79cf+BNWOYFkjJg1GtwDBqRg5AU0oa
euevnig5AqqTFmlxvXEb6x/NutDk0UqLBqZ949N5L52SgmBV2hgEHs4nu1zbevq9
JcHEG3kZ8Hvf4mVnARzN3Hpi4OU8qkjF27G4Y0OCH654f/dHVwt87RZEF1x2sbrW
eAQzG7qXuFHp4IHqy17Vppj4mpnvVcupddJ8BsAcl/DFMshwtGrMW7fojQeRy8tw
5N5x9KkDPvn+vqzy8ec+SddgogYrVc7Mh0rkdXZnLe9uEtuWk1t2BMXPe8fyapzH
HJ+OhEeuL5QfEQ/OzYHjcbPfZe1TTsjy7upexg9rAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUCT+XIAEvjI67tuQQcydOUgbfWRwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzgyNjA3YWQ0LTQ0YTItNGI2Mi05NzJmLTIzYjE3ODFhNDc1ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQQzANBgkqhkiG9w0BAQsFAAOCAQEAQZvt8SFC6W71jGzFq+wK/+7AjDPk
E4kvFL3YJL2gE9Jo2ewwP8JwmWjpThvEWHZSQaK+l/Uv0o/JaSeXHB5b7f5zL7d6
jRAbYQOPoGWRdPlb4XQYRkFstHeNRXEngQy0an6xft4fhp7yNb/lyLGaIzQWQ1cd
2rkt8nXxkkkl8q49JPdHT3IBjd22uLymPbbeKDd+G8WYUdjESzB17zFUVEsTKt8F
AzI6G3pUxbCE3+DtxIlw5Sfo+Qbruo10qYkRtmFWeYZIakImsE00OPVFmcmiM3qV
alUnzVRvsqhYhshyBrjRzOwuJevxj2+tyIbIXdzdKLOaCnzt9X215h/RiA==
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:11 2025 by rpki-client on console.sobornost.net