Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1b466a2-817b-4958-ab89-444b143015d3.roa
File: c1b466a2-817b-4958-ab89-444b143015d3.roa (raw, json)
Hash identifier: UAoYPi5XwrrSMuWA4SYYAGDIko9LLLJS6KCubFH2ltg=
Subject key identifier: AE:F9:D9:A1:20:8A:A6:48:DD:52:08:41:58:7E:FC:E6:9C:7C:81:47
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 78056DD8A37903422A1CB11F0E46D028A7ED1C6B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1b466a2-817b-4958-ab89-444b143015d3.roa
Signing time: Sat 12 Apr 2025 00:31:14 +0000
ROA not before: Sat 12 Apr 2025 00:31:14 +0000
ROA not after: Sat 17 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.17.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:05:6d:d8:a3:79:03:42:2a:1c:b1:1f:0e:46:d0:28:a7:ed:1c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 12 00:31:14 2025 GMT
Not After : May 17 23:59:59 2025 GMT
Subject: serialNumber=ca38dd828f38c333bbf4e6445073250ca32bbf201e9af9549131ca7678f646e9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:e6:a8:49:8c:2e:dd:ca:de:d3:83:07:4f:
f8:b9:14:81:de:47:55:9a:c7:5b:c0:aa:b1:87:44:
02:e6:1a:ec:34:d1:83:a4:dd:37:73:72:d1:41:9d:
94:0b:9f:e3:04:0b:9c:80:9f:23:e6:ff:03:68:6b:
8b:e9:cb:1f:7c:be:32:f7:3d:0e:30:f7:b1:5a:76:
17:23:80:ff:76:9c:06:c6:8b:0f:6a:f7:e0:fc:41:
dd:01:74:de:bd:20:23:d3:27:56:b8:05:f5:29:39:
d6:df:9c:9d:33:42:48:9d:76:08:4c:ef:2d:7c:ee:
33:1b:5f:c5:05:40:61:53:da:de:01:59:79:30:42:
24:67:b3:29:38:69:c0:57:e0:ce:3d:8e:f5:de:2f:
a7:c4:6f:59:2d:fb:86:94:5a:85:27:4e:41:6c:5f:
7e:22:fb:ec:99:8c:db:ec:d6:69:e8:57:50:97:66:
ae:46:f3:de:10:38:ee:d5:21:c9:71:aa:3a:cc:79:
6a:8d:bd:86:db:14:4e:3e:28:0e:a1:c3:48:b4:86:
f4:de:8d:ab:9c:04:e1:be:39:55:14:19:ef:2f:6d:
4d:5c:46:71:d9:31:eb:d3:5d:d9:3b:90:43:fb:b1:
a8:dd:a4:62:b9:12:b6:08:8c:19:fb:c8:36:90:aa:
c1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F9:D9:A1:20:8A:A6:48:DD:52:08:41:58:7E:FC:E6:9C:7C:81:47
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1b466a2-817b-4958-ab89-444b143015d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.17.128.0/19
Signature Algorithm: sha256WithRSAEncryption
cf:e8:be:bb:4b:3e:4e:4d:0c:dd:e6:97:ae:64:69:d1:a9:6e:
dd:87:03:90:61:30:93:27:b8:7b:89:3d:2b:6e:52:4a:40:ab:
c8:8e:59:4b:3a:a5:f5:3a:79:d3:9d:37:85:89:05:9e:03:92:
bf:9d:5f:14:e4:2a:93:a0:16:dd:9b:4c:7d:4e:a4:23:13:07:
09:a4:82:59:90:4b:45:a2:ed:45:0a:f0:89:40:de:10:d3:32:
55:f9:75:22:71:8f:7f:f5:14:95:dd:72:47:3e:83:90:f4:1f:
c2:61:0f:69:01:ec:34:00:c6:3f:cb:0c:fc:eb:46:34:87:d7:
19:76:45:3e:42:13:0e:6a:ff:c1:e3:e5:f0:05:ca:76:e0:11:
53:3c:6f:e2:28:65:3f:b5:4d:e5:4f:9d:45:5a:13:df:da:69:
ad:09:ec:b5:ff:8c:13:7d:3b:83:e4:21:51:e1:86:8d:9b:8b:
91:ce:a5:db:16:b5:54:80:79:f3:ff:ea:58:ca:77:a7:a8:54:
b0:a6:02:96:bf:d8:3f:43:a9:4e:8a:d1:a1:e0:7d:4b:13:ac:
26:5a:b7:10:85:ca:b4:c8:e4:46:08:db:66:7c:ae:22:31:15:
c3:38:39:58:72:4e:7e:b3:7d:47:07:86:e7:69:26:0d:32:6a:
91:20:27:b1
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUeAVt2KN5A0IqHLEfDkbQKKftHGswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDEyMDAzMTE0WhcNMjUwNTE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BjYTM4ZGQ4MjhmMzhjMzMzYmJmNGU2NDQ1MDczMjUwY2Ez
MmJiZjIwMWU5YWY5NTQ5MTMxY2E3Njc4ZjY0NmU5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCkwOaoSYwu3cre04MHT/i5FIHeR1Wax1vAqrGHRALmGuw0
0YOk3TdzctFBnZQLn+MEC5yAnyPm/wNoa4vpyx98vjL3PQ4w97FadhcjgP92nAbG
iw9q9+D8Qd0BdN69ICPTJ1a4BfUpOdbfnJ0zQkiddghM7y187jMbX8UFQGFT2t4B
WXkwQiRnsyk4acBX4M49jvXeL6fEb1kt+4aUWoUnTkFsX34i++yZjNvs1mnoV1CX
Zq5G894QOO7VIclxqjrMeWqNvYbbFE4+KA6hw0i0hvTejaucBOG+OVUUGe8vbU1c
RnHZMevTXdk7kEP7sajdpGK5ErYIjBn7yDaQqsHTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUrvnZoSCKpkjdUghBWH785px8gUcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2MxYjQ2NmEyLTgxN2ItNDk1OC1hYjg5LTQ0NGIxNDMwMTVkMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUyEYAwDQYJKoZIhvcNAQELBQADggEBAM/ovrtLPk5NDN3ml65kadGpbt2H
A5BhMJMnuHuJPStuUkpAq8iOWUs6pfU6edOdN4WJBZ4Dkr+dXxTkKpOgFt2bTH1O
pCMTBwmkglmQS0Wi7UUK8IlA3hDTMlX5dSJxj3/1FJXdckc+g5D0H8JhD2kB7DQA
xj/LDPzrRjSH1xl2RT5CEw5q/8Hj5fAFynbgEVM8b+IoZT+1TeVPnUVaE9/aaa0J
7LX/jBN9O4PkIVHhho2bi5HOpdsWtVSAefP/6ljKd6eoVLCmApa/2D9DqU6K0aHg
fUsTrCZatxCFyrTI5EYI22Z8riIxFcM4OVhyTn6zfUcHhudpJg0yapEgJ7E=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:20 2025 by rpki-client on console.sobornost.net