Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92e3388a-3322-44eb-9d70-a9abc7a26fb3.roa
File: 92e3388a-3322-44eb-9d70-a9abc7a26fb3.roa (raw, json)
Hash identifier: JYvDlaV6RlvpO4IwY88fPsQNhqyobBmaeN8VE7iFPlE=
Subject key identifier: 73:3A:31:24:2C:A0:9A:28:F2:49:1D:E5:A0:11:5E:5B:16:50:4D:F7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 11E8221BFB6BDF114442DBE55F0DD4279C17FEE2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92e3388a-3322-44eb-9d70-a9abc7a26fb3.roa
Signing time: Tue 08 Apr 2025 15:00:21 +0000
ROA not before: Tue 08 Apr 2025 15:00:21 +0000
ROA not after: Tue 13 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:e8:22:1b:fb:6b:df:11:44:42:db:e5:5f:0d:d4:27:9c:17:fe:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 8 15:00:21 2025 GMT
Not After : May 13 23:59:59 2025 GMT
Subject: serialNumber=ec85a809610b0ea0580ca22e067d579e4657f92ca2b346d9241ac12fefd889eb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:47:6c:ca:cd:99:9a:eb:7c:b8:e5:61:92:fd:
d6:75:80:7a:5b:b8:6b:3b:e6:4e:ba:13:39:b9:3b:
6b:60:11:b2:55:36:18:d4:e6:af:fa:bc:99:24:69:
1c:38:d6:e1:63:fe:9a:8e:6c:5b:9a:98:5b:81:3f:
80:21:35:8c:c2:fa:d1:d8:fb:30:3e:47:99:db:9b:
ac:6e:c3:ee:d5:3c:d7:af:9e:f4:9a:57:dd:18:6b:
5e:11:41:1b:4c:81:10:cf:d4:06:03:87:0d:f6:f8:
b4:27:6e:d3:14:81:98:84:1e:d2:95:c0:2f:60:50:
09:ad:7b:5e:b1:33:45:b8:f3:a3:da:2f:19:aa:2c:
93:13:ef:b1:9b:bd:17:25:87:84:97:f6:06:c4:91:
3d:56:1a:7a:1c:44:ec:39:f5:3d:e8:47:a5:2d:a6:
ed:94:33:78:a4:df:c5:9a:1b:d2:b7:4c:cb:02:b1:
8c:8d:f6:f2:3f:ed:ad:5d:14:e3:c5:0f:97:e0:ec:
25:20:cb:3e:31:cd:76:50:50:fe:0d:ac:0d:26:95:
d0:33:88:bd:e6:ba:3c:82:e5:bf:35:73:01:b8:3b:
0d:96:9b:c6:76:8f:af:fc:27:90:3a:38:fe:69:7b:
9a:56:22:01:38:38:2c:3b:73:70:e5:88:ad:9e:cb:
79:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3A:31:24:2C:A0:9A:28:F2:49:1D:E5:A0:11:5E:5B:16:50:4D:F7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92e3388a-3322-44eb-9d70-a9abc7a26fb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1b:9b:cc:df:1b:c0:d6:b1:b7:7e:b8:2d:a1:f5:e4:72:8d:bc:
b4:25:d4:e5:b3:76:54:4d:a3:df:ce:c7:76:e4:81:45:5d:e3:
f1:4b:66:cc:50:e6:c1:b4:02:d3:32:65:65:07:dc:9c:e0:3a:
a5:80:08:e5:64:d8:c1:12:a9:3a:65:5c:c9:00:96:77:1a:0e:
bb:e7:89:83:13:19:a6:03:f9:d3:37:85:fe:fc:48:3e:8c:c0:
b9:31:9c:cd:9c:ba:48:ae:78:27:0c:d2:d3:3b:ce:a6:ca:c3:
e1:82:fb:45:e7:a6:71:8d:01:c0:81:b6:37:a1:94:f3:00:1d:
92:87:78:fd:2d:f4:56:ff:66:a6:4c:23:6c:fe:cb:6c:0a:62:
1b:44:3d:f9:71:87:be:03:df:b1:ac:46:be:c7:cf:9c:9e:74:
fb:fe:bd:56:16:f4:21:8d:13:97:a0:64:a4:f4:bf:4d:df:fa:
f1:06:91:33:17:d2:57:44:f8:e9:9c:c4:fe:b1:aa:53:d3:af:
1c:71:d1:0f:71:aa:be:26:e7:1e:b0:20:88:55:e9:2c:61:b9:
ef:34:33:56:18:48:87:c5:c5:dd:95:94:82:35:de:a9:ad:77:
43:d8:75:d6:80:15:15:c8:41:ca:87:8a:de:1d:3b:b9:47:fc:
b9:7d:a7:57
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUEegiG/tr3xFEQtvlXw3UJ5wX/uIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA4MTUwMDIxWhcNMjUwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0BlYzg1YTgwOTYxMGIwZWEwNTgwY2EyMmUwNjdkNTc5ZTQ2
NTdmOTJjYTJiMzQ2ZDkyNDFhYzEyZmVmZDg4OWViMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDZR2zKzZma63y45WGS/dZ1gHpbuGs75k66Ezm5O2tgEbJV
NhjU5q/6vJkkaRw41uFj/pqObFuamFuBP4AhNYzC+tHY+zA+R5nbm6xuw+7VPNev
nvSaV90Ya14RQRtMgRDP1AYDhw32+LQnbtMUgZiEHtKVwC9gUAmte16xM0W486Pa
LxmqLJMT77GbvRclh4SX9gbEkT1WGnocROw59T3oR6Utpu2UM3ik38WaG9K3TMsC
sYyN9vI/7a1dFOPFD5fg7CUgyz4xzXZQUP4NrA0mldAziL3mujyC5b81cwG4Ow2W
m8Z2j6/8J5A6OP5pe5pWIgE4OCw7c3DliK2ey3n3AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUczoxJCygmijySR3loBFeWxZQTfcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzkyZTMzODhhLTMzMjItNDRlYi05ZDcwLWE5YWJjN2EyNmZiMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBjVjANBgkqhkiG9w0BAQsFAAOCAQEAG5vM3xvA1rG3frgtofXkco28tCXU
5bN2VE2j387HduSBRV3j8UtmzFDmwbQC0zJlZQfcnOA6pYAI5WTYwRKpOmVcyQCW
dxoOu+eJgxMZpgP50zeF/vxIPozAuTGczZy6SK54JwzS0zvOpsrD4YL7ReemcY0B
wIG2N6GU8wAdkod4/S30Vv9mpkwjbP7LbApiG0Q9+XGHvgPfsaxGvsfPnJ50+/69
Vhb0IY0Tl6BkpPS/Td/68QaRMxfSV0T46ZzE/rGqU9OvHHHRD3GqvibnHrAgiFXp
LGG57zQzVhhIh8XF3ZWUgjXeqa13Q9h11oAVFchByoeK3h07uUf8uX2nVw==
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:13 2025 by rpki-client on console.sobornost.net