Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf0c1deb-beae-436c-b486-1229da733efa.roa
File: cf0c1deb-beae-436c-b486-1229da733efa.roa (raw, json)
Hash identifier: 7RkpipB0SFXQV15IWRlANAgNZ5VkKmKI2pwJALgLMI0=
Subject key identifier: 5F:29:B4:15:1A:D8:61:06:90:CD:D3:5E:31:27:42:5E:CF:3D:2B:07
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 519C94962A46C4663270A4477D4BBBADF3281AA2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf0c1deb-beae-436c-b486-1229da733efa.roa
Signing time: Mon 31 Mar 2025 15:21:38 +0000
ROA not before: Mon 31 Mar 2025 15:21:38 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.22.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:9c:94:96:2a:46:c4:66:32:70:a4:47:7d:4b:bb:ad:f3:28:1a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 15:21:38 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=617ba95f1b98ba712e99cb7828d8b087b0fc175e06607e16a62ae293032d9846, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:23:67:2b:3a:e8:b7:fe:d8:c7:94:49:e5:a8:
c1:b0:27:df:6e:f1:dd:b2:80:66:74:cf:bc:25:44:
b4:91:f1:e9:b0:4f:67:62:75:35:02:1a:49:b3:15:
34:e0:f0:62:20:bd:02:dd:ce:5d:52:1d:94:60:cb:
3a:5e:33:6f:6b:60:11:e0:18:ca:5f:22:0e:07:4a:
d5:3a:e2:81:c5:f9:27:83:a6:df:15:5d:76:db:e5:
8b:b2:a0:45:77:7a:6d:8d:82:b0:a8:95:49:91:bf:
47:28:ce:89:94:5b:90:8a:12:27:6a:88:70:02:33:
d0:99:38:e7:df:f6:d7:94:c9:04:54:f1:87:55:0d:
d1:76:75:eb:44:92:57:33:3d:75:d0:85:87:07:11:
b4:0f:61:ac:9d:9d:d8:50:69:da:1b:7d:07:18:3c:
02:d4:80:03:28:30:6f:d4:9e:6b:09:47:33:67:70:
1b:1a:34:2f:dc:07:97:06:e7:41:a9:b1:fe:3d:e7:
c1:70:71:5d:a5:01:f1:54:b3:c6:82:46:45:14:10:
14:5d:a1:b1:9e:99:01:22:45:83:56:b5:0b:5b:18:
04:e8:e0:5c:2c:6a:ea:55:e9:90:88:62:4e:53:c2:
af:de:44:d5:3e:9f:9d:b9:db:cd:01:a6:ad:18:d2:
ac:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:29:B4:15:1A:D8:61:06:90:CD:D3:5E:31:27:42:5E:CF:3D:2B:07
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf0c1deb-beae-436c-b486-1229da733efa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.22.128.0/17
Signature Algorithm: sha256WithRSAEncryption
a5:cf:ca:d1:5a:a2:ab:50:50:f9:90:01:c9:c7:bf:64:b9:b3:
d9:72:c7:68:3c:8c:74:50:18:f1:0d:41:5b:27:7f:84:a0:89:
35:06:77:5d:e1:6e:e0:5f:df:58:c3:d5:36:7c:ee:78:82:38:
8f:52:80:bf:90:82:be:81:03:19:12:35:1c:b3:46:04:86:23:
94:a8:f3:91:45:10:d5:75:62:25:06:28:60:e0:fd:00:b0:d1:
e9:7d:89:42:15:33:4d:b1:e7:a2:1b:3f:af:6a:5d:72:34:f3:
32:22:93:7c:d5:9a:50:79:0e:92:03:e6:01:65:51:b4:c4:d3:
97:2a:8b:bc:0e:7c:2d:d2:0f:af:a5:f7:64:b1:23:04:5a:bd:
9c:f7:8e:f7:d0:74:46:34:39:50:fb:20:46:e7:05:58:4f:e2:
0a:69:d3:2f:1f:a6:38:53:94:77:d7:b4:a0:7a:10:d8:c2:92:
46:59:70:08:f3:c0:01:24:29:5b:f1:cd:f1:22:11:99:a9:e5:
c2:01:e8:de:8d:25:c8:46:5e:67:4b:3e:20:11:72:cf:d0:e1:
17:be:71:af:33:8d:2c:cc:ed:7f:25:43:e1:e5:0b:0a:f4:14:
11:b5:42:ff:91:89:2d:dd:7d:d2:0b:aa:d6:5e:64:1f:a3:b8:
63:ff:08:c7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUZyUlipGxGYycKRHfUu7rfMoGqIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzMxMTUyMTM4WhcNMjUwNTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A2MTdiYTk1ZjFiOThiYTcxMmU5OWNiNzgyOGQ4YjA4N2Iw
ZmMxNzVlMDY2MDdlMTZhNjJhZTI5MzAzMmQ5ODQ2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDZI2crOui3/tjHlEnlqMGwJ99u8d2ygGZ0z7wlRLSR8emw
T2didTUCGkmzFTTg8GIgvQLdzl1SHZRgyzpeM29rYBHgGMpfIg4HStU64oHF+SeD
pt8VXXbb5YuyoEV3em2NgrColUmRv0cozomUW5CKEidqiHACM9CZOOff9teUyQRU
8YdVDdF2detEklczPXXQhYcHEbQPYaydndhQadobfQcYPALUgAMoMG/UnmsJRzNn
cBsaNC/cB5cG50Gpsf4958FwcV2lAfFUs8aCRkUUEBRdobGemQEiRYNWtQtbGATo
4FwsaupV6ZCIYk5Twq/eRNU+n525280Bpq0Y0qxRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUXym0FRrYYQaQzdNeMSdCXs89KwcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NmMGMxZGViLWJlYWUtNDM2Yy1iNDg2LTEyMjlkYTczM2VmYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAcXFoAwDQYJKoZIhvcNAQELBQADggEBAKXPytFaoqtQUPmQAcnHv2S5s9ly
x2g8jHRQGPENQVsnf4SgiTUGd13hbuBf31jD1TZ87niCOI9SgL+Qgr6BAxkSNRyz
RgSGI5So85FFENV1YiUGKGDg/QCw0el9iUIVM02x56IbP69qXXI08zIik3zVmlB5
DpID5gFlUbTE05cqi7wOfC3SD6+l92SxIwRavZz3jvfQdEY0OVD7IEbnBVhP4gpp
0y8fpjhTlHfXtKB6ENjCkkZZcAjzwAEkKVvxzfEiEZmp5cIB6N6NJchGXmdLPiAR
cs/Q4Re+ca8zjSzM7X8lQ+HlCwr0FBG1Qv+RiS3dfdILqtZeZB+juGP/CMc=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:22 2025 by rpki-client on console.sobornost.net