Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2526c3a-77ad-4669-af27-f2171d468d2d.roa
File: d2526c3a-77ad-4669-af27-f2171d468d2d.roa (raw, json)
Hash identifier: sLLNz09zPdXJsjKNx6i7hrTGLII5vSdARuQ7WMKhyK0=
Subject key identifier: 58:20:BD:97:EB:FC:EC:1A:1B:FA:F3:65:22:0F:70:F4:EF:06:BF:96
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 191F3B5D7B27BCD64E11B930685F18B6C57B42EF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2526c3a-77ad-4669-af27-f2171d468d2d.roa
Signing time: Fri 04 Apr 2025 00:11:06 +0000
ROA not before: Fri 04 Apr 2025 00:11:06 +0000
ROA not after: Fri 09 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 63.246.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:1f:3b:5d:7b:27:bc:d6:4e:11:b9:30:68:5f:18:b6:c5:7b:42:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 4 00:11:06 2025 GMT
Not After : May 9 23:59:59 2025 GMT
Subject: serialNumber=9864d19fd85c2814d687f0b0bad3c7f403bf939643dffcf3c17b30a4bcff0821, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:66:e9:18:81:fe:20:62:fc:37:99:5d:b8:19:
6d:c3:e1:67:9b:26:a7:79:39:64:ce:cf:32:08:42:
23:98:be:23:5b:aa:5e:63:be:05:70:23:b0:10:ff:
ab:a6:a1:08:2e:b8:bb:9b:84:0a:06:05:b6:6b:b8:
bb:53:24:32:a9:81:94:a1:d6:5e:fe:8a:55:f0:de:
4d:54:49:a9:9a:ad:20:2b:09:b9:8e:78:e3:ff:5c:
ff:27:72:7d:ad:fb:56:dd:fd:bb:18:b1:13:c8:a3:
f0:b9:75:c3:7b:da:62:e8:e2:1c:fb:ef:49:9f:0e:
c2:49:4b:03:52:5f:31:74:73:11:2b:ad:0b:2f:7d:
e6:3a:2f:83:c8:e8:b1:48:28:87:90:85:92:17:ec:
ce:5a:c2:ef:8e:ba:b1:3c:31:29:91:91:c7:5b:cd:
3c:3f:3c:44:9c:0f:09:31:cc:92:07:24:f2:19:75:
1b:a4:38:ec:d4:47:34:7d:6a:43:e1:8a:39:4d:9d:
0b:45:fb:a6:cc:1b:8d:02:d2:09:64:d7:b5:cb:cd:
6a:cb:18:f4:4f:97:31:cd:4f:b4:fd:af:45:97:7a:
1b:36:68:42:aa:d2:7b:a7:2f:68:03:57:6a:88:65:
45:7e:9b:6c:0f:64:d7:ce:0a:49:4b:c1:89:43:46:
98:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:20:BD:97:EB:FC:EC:1A:1B:FA:F3:65:22:0F:70:F4:EF:06:BF:96
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2526c3a-77ad-4669-af27-f2171d468d2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.246.116.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e4:4d:2d:27:51:2e:8e:4c:d0:49:c2:0c:94:7a:0c:ab:f7:
3c:52:3b:00:7b:b0:ff:a9:89:c4:91:2e:e2:9a:78:28:93:0f:
f2:43:16:57:ad:7b:24:b8:33:85:16:2e:ae:f3:2a:5c:45:1c:
f3:c8:5f:24:ac:db:a5:ff:74:69:c4:06:ee:b7:18:f4:0c:c0:
2a:7f:77:88:9a:84:31:32:aa:d6:bb:5b:1d:86:d2:f1:d9:f1:
27:18:d7:6c:12:4b:dc:d5:fd:8e:11:36:81:c0:2c:c9:ce:6b:
73:72:84:99:9c:87:78:07:c1:fe:6a:80:1a:9f:9e:f7:89:01:
da:f6:4b:83:1a:3a:4d:64:55:17:df:3d:83:73:2d:63:5f:de:
df:b1:27:0c:bd:e5:bf:06:c2:47:e9:ac:ea:e7:46:64:26:5b:
82:03:0e:ee:ea:f4:45:53:16:74:9a:16:a7:ee:3a:c7:5c:c2:
3c:e0:d4:c5:53:29:31:fb:8e:9c:37:f4:aa:18:37:7d:fc:9e:
d6:74:91:ef:1f:89:91:63:aa:2b:91:36:8a:44:ba:4c:47:cb:
45:7b:cd:52:67:20:80:d5:33:e0:cb:ec:b7:1e:04:82:c7:e8:
68:45:82:2c:8a:63:5c:b9:5d:fb:f6:6e:e3:b8:0a:01:c3:cd:
37:22:3a:34
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGR87XXsnvNZOEbkwaF8YtsV7Qu8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA0MDAxMTA2WhcNMjUwNTA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A5ODY0ZDE5ZmQ4NWMyODE0ZDY4N2YwYjBiYWQzYzdmNDAz
YmY5Mzk2NDNkZmZjZjNjMTdiMzBhNGJjZmYwODIxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCPZukYgf4gYvw3mV24GW3D4WebJqd5OWTOzzIIQiOYviNb
ql5jvgVwI7AQ/6umoQguuLubhAoGBbZruLtTJDKpgZSh1l7+ilXw3k1USamarSAr
CbmOeOP/XP8ncn2t+1bd/bsYsRPIo/C5dcN72mLo4hz770mfDsJJSwNSXzF0cxEr
rQsvfeY6L4PI6LFIKIeQhZIX7M5awu+OurE8MSmRkcdbzTw/PEScDwkxzJIHJPIZ
dRukOOzURzR9akPhijlNnQtF+6bMG40C0glk17XLzWrLGPRPlzHNT7T9r0WXehs2
aEKq0nunL2gDV2qIZUV+m2wPZNfOCklLwYlDRpjzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUWCC9l+v87Bob+vNlIg9w9O8Gv5YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2QyNTI2YzNhLTc3YWQtNDY2OS1hZjI3LWYyMTcxZDQ2OGQyZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA/9nQwDQYJKoZIhvcNAQELBQADggEBAGvkTS0nUS6OTNBJwgyUegyr9zxS
OwB7sP+picSRLuKaeCiTD/JDFleteyS4M4UWLq7zKlxFHPPIXySs26X/dGnEBu63
GPQMwCp/d4iahDEyqta7Wx2G0vHZ8ScY12wSS9zV/Y4RNoHALMnOa3NyhJmch3gH
wf5qgBqfnveJAdr2S4MaOk1kVRffPYNzLWNf3t+xJwy95b8GwkfprOrnRmQmW4ID
Du7q9EVTFnSaFqfuOsdcwjzg1MVTKTH7jpw39KoYN338ntZ0ke8fiZFjqiuRNopE
ukxHy0V7zVJnIIDVM+DL7LceBILH6GhFgiyKY1y5Xfv2buO4CgHDzTciOjQ=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:22 2025 by rpki-client on console.sobornost.net