Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97124c90-e9d4-44e2-aad7-a1d216f69aa7.roa
File: 97124c90-e9d4-44e2-aad7-a1d216f69aa7.roa (raw, json)
Hash identifier: K2++zzwVjlzGfIH9Rb8VcgM6zUZmAxdjz1R08Z5iXRk=
Subject key identifier: EE:5C:FA:00:EC:CB:80:AB:0E:5F:CA:5F:59:11:01:A4:80:DE:FD:FF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2DF4D48C09EECA35DE4D3266778FD8691196013C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97124c90-e9d4-44e2-aad7-a1d216f69aa7.roa
Signing time: Mon 31 Mar 2025 15:10:29 +0000
ROA not before: Mon 31 Mar 2025 15:10:29 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 23.23.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:f4:d4:8c:09:ee:ca:35:de:4d:32:66:77:8f:d8:69:11:96:01:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 15:10:29 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=51b8c4610506fdb1ca1e8d7dad3727caa54524f476bca9490d76012d8c3591fe, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:71:6e:88:55:9e:e4:61:99:25:fd:f1:8f:fd:
7d:3c:d0:01:2d:3d:fa:d4:e0:eb:2a:38:29:b2:34:
b4:cd:ff:72:6a:e0:5c:57:6e:43:7a:6e:bf:6a:8f:
6f:68:9a:e1:49:a0:87:a8:04:87:66:88:89:ce:e7:
c0:7f:e2:bc:19:4b:80:47:ba:f4:47:28:ee:d1:1b:
2d:33:34:7e:16:c1:4c:50:f4:cb:77:82:00:82:84:
38:8e:f6:70:dd:1d:dd:4b:93:71:59:8a:d3:ce:9c:
af:8a:7b:2a:28:b3:16:cf:3c:07:8d:88:17:3f:40:
8e:16:5b:08:6b:17:b1:73:9b:0c:7f:f1:24:e0:2c:
8e:6d:8d:48:de:c2:36:f5:3b:72:c1:5d:90:37:b8:
a6:e2:dd:a4:0b:07:c1:a1:04:39:89:3f:74:fe:dc:
e3:f7:d4:2b:66:e2:49:f6:d3:7a:75:b7:40:dd:3c:
89:0f:6b:71:c8:86:f9:5a:97:e0:73:b4:25:fc:92:
95:ce:ec:96:7a:c6:f5:78:4a:b9:36:65:b9:b0:9e:
aa:28:79:1b:48:11:86:3b:77:7f:ec:65:e2:3a:ff:
4d:48:bf:0c:53:e6:2a:af:f5:a9:ca:0f:74:29:e8:
05:af:3f:c0:24:f6:e7:57:df:9a:35:7a:20:9e:2c:
36:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5C:FA:00:EC:CB:80:AB:0E:5F:CA:5F:59:11:01:A4:80:DE:FD:FF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97124c90-e9d4-44e2-aad7-a1d216f69aa7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.23.76.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:3b:3a:b5:5d:4d:8b:54:60:a5:71:8f:a2:d8:28:0d:af:74:
bf:b8:30:cd:5d:71:ac:07:21:92:67:b7:be:59:b6:fd:30:a2:
cc:5c:29:c0:ab:e4:12:9c:9c:9e:e0:65:72:ba:c7:f7:bd:19:
cd:49:26:f5:b7:64:61:d8:59:16:76:59:83:56:99:7e:12:a1:
b7:f1:ca:a9:2d:3e:25:ec:94:4c:4b:29:2d:b9:2d:3c:a6:7d:
f8:df:f4:0e:dd:f4:d1:48:27:a4:dc:09:5f:c4:e2:f9:f1:2c:
ba:62:90:58:2a:a8:ab:f9:3f:39:b8:c3:c7:d9:9f:ba:15:72:
b6:6d:6d:f1:c7:de:0d:31:bd:1f:9f:8f:74:f1:18:77:9e:96:
3b:7e:26:0e:4b:78:74:bf:d7:7c:d4:37:13:60:d5:12:da:7f:
d8:5d:bd:01:27:83:1f:19:a6:40:f7:a6:01:66:2e:87:a1:87:
b9:58:cd:64:d0:47:f8:16:ae:45:63:22:9c:7e:cb:c9:76:b3:
d5:cf:6e:3c:f8:e1:a6:dc:46:c3:a9:77:c3:c8:bf:ed:6e:84:
b9:62:4d:df:1f:c5:61:a1:8a:41:f4:53:18:5d:9d:c0:b1:36:
bc:72:53:c5:27:ac:2a:39:20:66:1e:48:c4:11:9c:77:95:83:
81:ec:20:44
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULfTUjAnuyjXeTTJmd4/YaRGWATwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzMxMTUxMDI5WhcNMjUwNTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MWI4YzQ2MTA1MDZmZGIxY2ExZThkN2RhZDM3MjdjYWE1
NDUyNGY0NzZiY2E5NDkwZDc2MDEyZDhjMzU5MWZlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8cW6IVZ7kYZkl/fGP/X080AEtPfrU4OsqOCmyNLTN/3Jq
4FxXbkN6br9qj29omuFJoIeoBIdmiInO58B/4rwZS4BHuvRHKO7RGy0zNH4WwUxQ
9Mt3ggCChDiO9nDdHd1Lk3FZitPOnK+KeyoosxbPPAeNiBc/QI4WWwhrF7Fzmwx/
8STgLI5tjUjewjb1O3LBXZA3uKbi3aQLB8GhBDmJP3T+3OP31Ctm4kn203p1t0Dd
PIkPa3HIhvlal+BztCX8kpXO7JZ6xvV4Srk2ZbmwnqooeRtIEYY7d3/sZeI6/01I
vwxT5iqv9anKD3Qp6AWvP8Ak9udX35o1eiCeLDYjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU7lz6AOzLgKsOX8pfWREBpIDe/f8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzk3MTI0YzkwLWU5ZDQtNDRlMi1hYWQ3LWExZDIxNmY2OWFhNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIXF0wwDQYJKoZIhvcNAQELBQADggEBAFs7OrVdTYtUYKVxj6LYKA2vdL+4
MM1dcawHIZJnt75Ztv0wosxcKcCr5BKcnJ7gZXK6x/e9Gc1JJvW3ZGHYWRZ2WYNW
mX4SobfxyqktPiXslExLKS25LTymffjf9A7d9NFIJ6TcCV/E4vnxLLpikFgqqKv5
Pzm4w8fZn7oVcrZtbfHH3g0xvR+fj3TxGHeeljt+Jg5LeHS/13zUNxNg1RLaf9hd
vQEngx8ZpkD3pgFmLoehh7lYzWTQR/gWrkVjIpx+y8l2s9XPbjz44abcRsOpd8PI
v+1uhLliTd8fxWGhikH0UxhdncCxNrxyU8UnrCo5IGYeSMQRnHeVg4HsIEQ=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:14 2025 by rpki-client on console.sobornost.net