Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d72a0b95-3178-4b91-9f5b-1a55e8020a41.roa
File: d72a0b95-3178-4b91-9f5b-1a55e8020a41.roa (raw, json)
Hash identifier: IVMiYabP4Sx2uM6m4APukfDuYF7YhVgOgoVTetw323k=
Subject key identifier: F7:CB:F4:58:0C:F2:3F:A5:38:A5:13:0E:C9:A4:D1:0E:1C:48:88:09
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 02110831A4A2461B9098E4843B403EF57C5C395D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d72a0b95-3178-4b91-9f5b-1a55e8020a41.roa
Signing time: Sat 12 Apr 2025 00:11:56 +0000
ROA not before: Sat 12 Apr 2025 00:11:56 +0000
ROA not after: Sat 17 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 44.210.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:11:08:31:a4:a2:46:1b:90:98:e4:84:3b:40:3e:f5:7c:5c:39:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 12 00:11:56 2025 GMT
Not After : May 17 23:59:59 2025 GMT
Subject: serialNumber=e27dc1fd7febb0cb30e3e3a49477cfa98787788716379aa054d244773157ad1e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6c:6b:fb:75:8c:e7:ae:cd:56:f7:ee:3b:f8:
2b:81:15:f8:b2:c5:2d:9c:70:2d:2d:70:8a:00:22:
f8:0f:52:f3:98:18:45:58:a8:d9:5e:ce:a1:87:c3:
09:3e:2f:5a:54:8c:57:8c:92:a6:bf:48:26:fd:3b:
ad:08:43:20:f7:86:d4:45:12:d7:c5:d4:0a:98:41:
ac:76:22:42:76:4b:be:2e:97:f7:df:15:92:d2:15:
7e:30:6c:f4:cd:93:ab:62:98:08:d9:4d:c9:8e:56:
f5:51:47:6a:4e:2e:3e:a6:03:59:ab:15:a4:be:86:
1e:59:f5:5e:a9:37:34:73:09:74:40:59:17:31:b8:
09:f9:6a:f4:83:d9:db:90:69:82:87:4d:0f:4f:e6:
3a:44:d5:3f:fe:de:52:03:9f:35:8d:28:23:df:8a:
d5:21:cf:92:d3:c9:c3:ac:f2:59:1f:26:f7:8b:88:
6e:34:63:13:92:25:51:c1:03:08:c0:b9:c5:81:19:
9f:d0:bd:22:ac:6e:36:16:de:e2:71:b3:52:88:03:
9c:8c:0d:38:da:98:3f:a7:07:f5:a7:a6:32:7c:26:
e9:2d:af:d9:01:c2:0b:43:de:17:19:05:f9:43:e8:
e7:d1:76:f4:18:fd:60:de:32:00:a9:75:a4:02:13:
08:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CB:F4:58:0C:F2:3F:A5:38:A5:13:0E:C9:A4:D1:0E:1C:48:88:09
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d72a0b95-3178-4b91-9f5b-1a55e8020a41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
44.210.202.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:75:2c:21:7f:07:b4:9e:bd:66:85:97:62:2b:27:a2:42:a1:
8b:2e:94:a1:b1:79:20:68:ba:28:e3:97:fc:fc:cf:e9:bb:93:
fa:a9:44:ed:1c:63:9b:a6:da:c2:02:24:99:d8:fd:72:67:0e:
c1:b8:63:dc:47:3e:d5:b4:20:db:aa:ea:9b:61:38:3e:ad:58:
67:e3:5e:9d:83:99:7c:dc:c4:b1:fe:56:c1:ed:ae:a6:6a:64:
81:6f:d0:47:bd:9f:25:1c:84:31:de:f9:ec:3c:1c:50:15:ac:
5a:65:2f:ca:dc:70:51:dc:0b:d7:4e:81:d3:5a:d3:02:dd:42:
55:87:f3:30:1e:37:d7:81:32:01:a3:cd:7a:6c:d3:e1:ab:3b:
ca:a8:ed:9e:2e:87:39:ad:66:25:40:2f:be:75:0d:f1:9b:5b:
2a:11:45:64:57:a1:94:53:c2:9b:0d:e3:9f:f3:dc:0f:c8:df:
91:f8:0e:75:7f:58:b8:28:20:c1:0d:17:77:63:df:05:51:45:
48:5b:02:bc:4a:6f:ee:a1:7e:9c:4e:7f:cb:97:e7:cd:b6:ac:
c7:7d:fc:a4:83:f9:70:32:b4:55:54:26:94:16:45:3a:72:97:
61:cb:29:ff:41:46:a2:48:ce:9c:37:9b:1f:0b:ac:bb:96:ff:
98:a1:8e:2d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUAhEIMaSiRhuQmOSEO0A+9XxcOV0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDEyMDAxMTU2WhcNMjUwNTE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BlMjdkYzFmZDdmZWJiMGNiMzBlM2UzYTQ5NDc3Y2ZhOTg3
ODc3ODg3MTYzNzlhYTA1NGQyNDQ3NzMxNTdhZDFlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDRbGv7dYznrs1W9+47+CuBFfiyxS2ccC0tcIoAIvgPUvOY
GEVYqNlezqGHwwk+L1pUjFeMkqa/SCb9O60IQyD3htRFEtfF1AqYQax2IkJ2S74u
l/ffFZLSFX4wbPTNk6timAjZTcmOVvVRR2pOLj6mA1mrFaS+hh5Z9V6pNzRzCXRA
WRcxuAn5avSD2duQaYKHTQ9P5jpE1T/+3lIDnzWNKCPfitUhz5LTycOs8lkfJveL
iG40YxOSJVHBAwjAucWBGZ/QvSKsbjYW3uJxs1KIA5yMDTjamD+nB/WnpjJ8Jukt
r9kBwgtD3hcZBflD6OfRdvQY/WDeMgCpdaQCEwjbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU98v0WAzyP6U4pRMOyaTRDhxIiAkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Q3MmEwYjk1LTMxNzgtNGI5MS05ZjViLTFhNTVlODAyMGE0MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAs0sowDQYJKoZIhvcNAQELBQADggEBAG11LCF/B7SevWaFl2IrJ6JCoYsu
lKGxeSBouijjl/z8z+m7k/qpRO0cY5um2sICJJnY/XJnDsG4Y9xHPtW0INuq6pth
OD6tWGfjXp2DmXzcxLH+VsHtrqZqZIFv0Ee9nyUchDHe+ew8HFAVrFplL8rccFHc
C9dOgdNa0wLdQlWH8zAeN9eBMgGjzXps0+GrO8qo7Z4uhzmtZiVAL751DfGbWyoR
RWRXoZRTwpsN45/z3A/I35H4DnV/WLgoIMENF3dj3wVRRUhbArxKb+6hfpxOf8uX
5822rMd9/KSD+XAytFVUJpQWRTpyl2HLKf9BRqJIzpw3mx8LrLuW/5ihji0=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:23 2025 by rpki-client on console.sobornost.net