Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1478bf7-fa63-45f0-9446-063288b8821d.roa
File: d1478bf7-fa63-45f0-9446-063288b8821d.roa (raw, json)
Hash identifier: ofXFngD3VOy+IHHHI4hpMgFJsz3wkyEGzWkZ3tUEQQk=
Subject key identifier: 6D:2E:CD:A5:5F:B5:89:BB:7C:68:86:2C:83:E6:A3:DF:12:0D:E0:54
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 11D6D2D051713F922A5F4FCCD4E4E5DE83103920
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1478bf7-fa63-45f0-9446-063288b8821d.roa
Signing time: Wed 09 Apr 2025 00:32:03 +0000
ROA not before: Wed 09 Apr 2025 00:32:03 +0000
ROA not after: Wed 14 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:d6:d2:d0:51:71:3f:92:2a:5f:4f:cc:d4:e4:e5:de:83:10:39:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 9 00:32:03 2025 GMT
Not After : May 14 23:59:59 2025 GMT
Subject: serialNumber=1221ba0cc6871403c746ec0729cb957bd3241afbe9d8b028339d0cdafd3d61da, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:3b:9b:cb:66:cf:e8:3d:1a:a8:dc:8c:d1:
d4:f9:df:1d:ca:a7:aa:97:30:e9:46:2a:34:f5:11:
a8:3f:80:81:b9:3d:7b:fe:c2:1c:c3:ce:1f:20:0c:
ca:69:16:4d:c5:2a:91:9f:87:3a:17:64:0a:dc:75:
4d:0e:a5:39:02:82:7b:1f:d4:10:85:6f:d4:84:f0:
8d:b4:8d:df:8d:64:6a:47:8c:07:a0:3d:06:e1:2c:
80:06:da:97:aa:5a:b8:56:3f:ea:21:4f:1b:fb:f2:
93:0d:d4:8f:d8:e4:7d:ea:ff:6e:95:f8:97:26:de:
b7:9d:63:3b:4d:e2:81:d9:63:29:ae:26:42:6b:2f:
15:c8:33:be:c4:18:66:9f:4b:69:59:92:01:ed:d4:
e0:56:b5:07:ba:77:62:a3:24:2a:61:4f:30:59:05:
b8:fe:10:31:46:c8:ab:7d:de:98:1a:2e:b8:3e:b6:
33:ba:f7:ac:58:e8:d8:88:69:41:57:9b:f5:17:e7:
59:07:b3:3b:8a:cc:66:94:2e:6f:ee:3a:83:09:26:
51:ef:51:4c:e7:be:fe:98:9c:c6:af:13:cf:c5:d2:
19:dc:9b:cf:5a:12:c1:0a:f9:32:d0:24:74:6c:6a:
4a:f5:01:2f:de:12:1e:04:dd:12:5a:52:10:f9:e6:
73:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2E:CD:A5:5F:B5:89:BB:7C:68:86:2C:83:E6:A3:DF:12:0D:E0:54
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1478bf7-fa63-45f0-9446-063288b8821d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.82.0/24
Signature Algorithm: sha256WithRSAEncryption
16:39:20:34:9d:64:dc:71:a6:36:e6:4a:1c:db:ba:86:2a:a7:
29:ee:ae:bc:22:dd:4e:30:9a:55:44:f1:a0:39:15:2d:5d:1c:
34:4e:d8:af:ff:de:41:43:13:f2:d1:d5:6c:b6:ad:f7:04:8c:
ce:d9:0d:5c:3a:34:14:37:5c:16:14:b0:13:66:d3:f2:2d:ca:
0f:d4:9e:ea:4e:c7:b7:c4:ba:e7:27:2b:9f:9d:f2:dc:1b:39:
cf:12:41:50:28:b3:88:3e:30:2c:4b:9c:e7:6f:a9:1f:68:43:
e6:41:cb:82:e4:af:c8:f2:a5:69:56:2d:05:3c:e4:fe:b3:85:
55:59:79:b4:f3:8e:3d:97:08:8e:d3:b1:f5:f1:2a:c8:99:c9:
95:4e:2e:26:0a:6a:6c:48:4f:71:3b:2f:62:b0:1f:7e:e8:e8:
15:2b:2a:8f:0a:f0:10:4f:ba:61:ad:07:10:78:00:da:f2:3f:
c0:99:47:0b:83:c0:e1:48:56:15:23:aa:95:d5:57:d1:1f:a1:
82:09:e6:86:b4:6e:a3:a2:c7:f9:40:ab:a3:66:96:04:cf:d9:
7c:74:53:08:fe:f2:a4:fc:b8:97:d8:76:2a:36:e9:64:8f:03:
b5:11:1a:93:b0:36:83:b7:61:8c:ab:5a:33:1f:ff:41:e0:e7:
34:5f:97:9e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEdbS0FFxP5IqX0/M1OTl3oMQOSAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA5MDAzMjAzWhcNMjUwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0AxMjIxYmEwY2M2ODcxNDAzYzc0NmVjMDcyOWNiOTU3YmQz
MjQxYWZiZTlkOGIwMjgzMzlkMGNkYWZkM2Q2MWRhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrcTuby2bP6D0aqNyM0dT53x3Kp6qXMOlGKjT1Eag/gIG5
PXv+whzDzh8gDMppFk3FKpGfhzoXZArcdU0OpTkCgnsf1BCFb9SE8I20jd+NZGpH
jAegPQbhLIAG2peqWrhWP+ohTxv78pMN1I/Y5H3q/26V+Jcm3redYztN4oHZYymu
JkJrLxXIM77EGGafS2lZkgHt1OBWtQe6d2KjJCphTzBZBbj+EDFGyKt93pgaLrg+
tjO696xY6NiIaUFXm/UX51kHszuKzGaULm/uOoMJJlHvUUznvv6YnMavE8/F0hnc
m89aEsEK+TLQJHRsakr1AS/eEh4E3RJaUhD55nO5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUbS7NpV+1ibt8aIYsg+aj3xIN4FQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2QxNDc4YmY3LWZhNjMtNDVmMC05NDQ2LTA2MzI4OGI4ODIxZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABA/FIwDQYJKoZIhvcNAQELBQADggEBABY5IDSdZNxxpjbmShzbuoYqpynu
rrwi3U4wmlVE8aA5FS1dHDRO2K//3kFDE/LR1Wy2rfcEjM7ZDVw6NBQ3XBYUsBNm
0/Ityg/UnupOx7fEuucnK5+d8twbOc8SQVAos4g+MCxLnOdvqR9oQ+ZBy4Lkr8jy
pWlWLQU85P6zhVVZebTzjj2XCI7TsfXxKsiZyZVOLiYKamxIT3E7L2KwH37o6BUr
Ko8K8BBPumGtBxB4ANryP8CZRwuDwOFIVhUjqpXVV9EfoYIJ5oa0bqOix/lAq6Nm
lgTP2Xx0Uwj+8qT8uJfYdio26WSPA7URGpOwNoO3YYyrWjMf/0Hg5zRfl54=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:22 2025 by rpki-client on console.sobornost.net