Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/caf74530-3650-41ac-a970-9da97a34ad52.roa
File: caf74530-3650-41ac-a970-9da97a34ad52.roa (raw, json)
Hash identifier: GaW2+zNLv87WbM/CZe+cEfyrm8JE90VTJhXXmo9kXGg=
Subject key identifier: 9D:39:76:AF:29:27:D1:49:38:EE:C9:AD:9F:93:09:13:CE:2A:07:49
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7AAD3EE1DDF4BDA1986AAA761E9CB489FAA3A9D1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/caf74530-3650-41ac-a970-9da97a34ad52.roa
Signing time: Mon 14 Apr 2025 15:21:28 +0000
ROA not before: Mon 14 Apr 2025 15:21:28 +0000
ROA not after: Mon 19 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 184.72.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:ad:3e:e1:dd:f4:bd:a1:98:6a:aa:76:1e:9c:b4:89:fa:a3:a9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 14 15:21:28 2025 GMT
Not After : May 19 23:59:59 2025 GMT
Subject: serialNumber=b414cba0d8125b4d8f82ebe9f23d59b722f419316059e112bb876354b04e64e4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:88:3f:16:0a:bb:12:a4:53:f7:0d:db:48:5c:
f0:80:92:fc:c1:75:69:4b:f3:5e:d2:6b:68:10:a7:
09:8b:3b:22:17:75:5b:49:f8:75:07:eb:6b:28:01:
e2:e5:6e:67:68:3c:5f:f0:fc:ac:0a:5d:8b:dc:db:
b8:98:f2:0f:0b:17:b7:1b:22:99:f2:b4:27:df:53:
48:70:40:de:18:0f:37:2d:83:c1:f8:a6:70:c0:20:
8b:cb:f7:2d:2d:9a:28:47:39:fa:64:fb:7e:7a:78:
69:cd:99:a1:8d:ea:00:aa:bc:a1:75:b4:37:e1:ee:
80:68:19:aa:2c:77:3f:f0:00:65:83:38:bf:db:27:
4d:a5:a1:b7:96:e8:1e:fa:89:fe:1a:c6:bc:a4:0e:
0c:bd:73:d8:08:4c:2c:8c:e0:2f:72:1d:6e:6f:03:
34:d0:28:c4:cd:01:83:b5:d3:af:a1:a3:d3:25:b7:
10:14:af:58:1f:92:45:79:98:73:a4:93:7c:8b:7f:
e5:87:f9:5e:b4:20:f4:fd:60:86:ba:50:c1:2e:4f:
1b:fd:3b:f2:9f:25:c4:17:49:29:a1:13:2e:ed:d4:
e7:19:be:af:79:a8:8b:93:e1:ae:0c:48:10:54:ad:
5e:c8:59:e2:7a:51:9e:a3:f2:fc:10:c5:73:64:8b:
16:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:39:76:AF:29:27:D1:49:38:EE:C9:AD:9F:93:09:13:CE:2A:07:49
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/caf74530-3650-41ac-a970-9da97a34ad52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
184.72.96.0/19
Signature Algorithm: sha256WithRSAEncryption
46:5f:2c:f3:d4:35:45:b9:03:82:ca:e3:b3:85:bd:ed:b2:3d:
50:75:0e:ff:a0:49:26:90:00:c8:c5:4b:a7:57:11:7f:b3:69:
36:e0:86:8d:c0:70:f7:73:1e:51:04:c4:f8:77:6a:3d:08:42:
78:d3:be:1e:e1:8f:3b:29:d1:d3:66:40:ee:72:27:df:ff:40:
4d:ef:d6:45:34:c6:89:16:28:fe:f9:84:9e:45:5b:08:ab:c8:
9c:93:97:88:87:11:06:24:fc:76:52:8f:16:1f:a7:48:e7:76:
7c:4e:33:86:31:69:31:86:0b:3d:94:75:63:7c:cd:ff:21:8a:
03:ab:4e:4e:b5:45:46:6e:47:80:a6:f7:32:0d:fb:28:2d:82:
1f:2d:2f:8a:34:d7:7d:3a:90:ee:b8:ee:f8:c4:d7:c0:d1:88:
64:81:3a:0f:b0:9c:73:b3:a5:44:e6:67:87:94:2a:4b:12:88:
75:4e:87:38:88:e3:22:42:ee:7d:98:a1:80:c1:8c:a6:d2:05:
cc:d4:73:f4:86:46:a9:e4:ea:ee:d9:8b:53:d7:45:83:35:69:
89:21:f0:42:c8:86:6f:11:44:6b:5f:db:db:a1:e5:a1:4e:a8:
fe:9c:67:0f:d9:dc:67:85:9d:2e:bd:f5:64:32:af:46:2a:b6:
75:26:fb:c7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUeq0+4d30vaGYaqp2Hpy0ifqjqdEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE0MTUyMTI4WhcNMjUwNTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0BiNDE0Y2JhMGQ4MTI1YjRkOGY4MmViZTlmMjNkNTliNzIy
ZjQxOTMxNjA1OWUxMTJiYjg3NjM1NGIwNGU2NGU0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDBiD8WCrsSpFP3DdtIXPCAkvzBdWlL817Sa2gQpwmLOyIX
dVtJ+HUH62soAeLlbmdoPF/w/KwKXYvc27iY8g8LF7cbIpnytCffU0hwQN4YDzct
g8H4pnDAIIvL9y0tmihHOfpk+356eGnNmaGN6gCqvKF1tDfh7oBoGaosdz/wAGWD
OL/bJ02lobeW6B76if4axrykDgy9c9gITCyM4C9yHW5vAzTQKMTNAYO106+ho9Ml
txAUr1gfkkV5mHOkk3yLf+WH+V60IPT9YIa6UMEuTxv9O/KfJcQXSSmhEy7t1OcZ
vq95qIuT4a4MSBBUrV7IWeJ6UZ6j8vwQxXNkixZxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUnTl2rykn0Uk47smtn5MJE84qB0kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NhZjc0NTMwLTM2NTAtNDFhYy1hOTcwLTlkYTk3YTM0YWQ1Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAW4SGAwDQYJKoZIhvcNAQELBQADggEBAEZfLPPUNUW5A4LK47OFve2yPVB1
Dv+gSSaQAMjFS6dXEX+zaTbgho3AcPdzHlEExPh3aj0IQnjTvh7hjzsp0dNmQO5y
J9//QE3v1kU0xokWKP75hJ5FWwiryJyTl4iHEQYk/HZSjxYfp0jndnxOM4YxaTGG
Cz2UdWN8zf8higOrTk61RUZuR4Cm9zIN+ygtgh8tL4o01306kO647vjE18DRiGSB
Og+wnHOzpUTmZ4eUKksSiHVOhziI4yJC7n2YoYDBjKbSBczUc/SGRqnk6u7Zi1PX
RYM1aYkh8ELIhm8RRGtf29uh5aFOqP6cZw/Z3GeFnS699WQyr0YqtnUm+8c=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:21 2025 by rpki-client on console.sobornost.net