Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec82d39f-e496-445b-b47e-f9450ba4b273.roa
File: ec82d39f-e496-445b-b47e-f9450ba4b273.roa (raw, json)
Hash identifier: fx4ga2f+Vz9HOBoC4RXiG3LNdjK0md48e7zMZ9yAAe8=
Subject key identifier: 33:7C:48:86:86:8B:0E:C3:A7:C0:19:A7:18:A0:50:B0:13:34:54:50
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5A811A5C2A94E7A6B929FCBADC44AEC95FA683B6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec82d39f-e496-445b-b47e-f9450ba4b273.roa
Signing time: Wed 09 Apr 2025 00:21:17 +0000
ROA not before: Wed 09 Apr 2025 00:21:17 +0000
ROA not after: Wed 14 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.93.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:81:1a:5c:2a:94:e7:a6:b9:29:fc:ba:dc:44:ae:c9:5f:a6:83:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 9 00:21:17 2025 GMT
Not After : May 14 23:59:59 2025 GMT
Subject: serialNumber=a9be2360d33554e0f76018ecf88909751a0cfa1f8d3d058905bed8bbf92bb322, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f3:56:14:a6:0c:4d:cd:58:82:2e:57:9c:f6:
34:71:b7:1c:4a:4c:fe:0b:dd:7f:7e:98:a1:63:8b:
4f:4f:c7:53:98:72:46:b5:43:65:0c:cb:f6:4d:1f:
6f:b0:8a:56:64:e3:d8:4d:b5:57:5a:41:8c:31:50:
a4:e5:9a:88:a9:6c:0c:27:1f:e3:80:6b:43:36:c7:
f2:93:d6:d4:43:69:c3:8d:28:53:54:8a:43:25:5c:
2e:32:c9:02:91:63:82:53:b8:c4:ff:68:0c:a0:61:
5d:2f:cf:cc:b3:ee:ce:c9:1f:7f:f3:47:50:c5:c3:
55:d8:2f:88:92:34:29:0d:ec:09:74:18:e3:1f:9f:
fd:93:13:df:dc:f9:1a:56:9b:32:37:75:f8:54:48:
f9:30:99:39:e6:d9:f8:b2:c4:f5:c1:59:16:ac:2b:
66:d1:b7:52:84:ea:04:fe:e4:95:3f:c0:11:fb:2c:
b7:78:67:d9:9f:f2:f0:a9:ff:e7:22:56:61:ff:c5:
d4:91:f6:e7:db:76:0e:a8:3a:ee:3b:1d:af:e5:cf:
dd:c5:6b:b2:38:72:f2:99:5d:a7:ec:5a:e5:3a:5b:
d5:70:d6:6b:aa:a6:5d:1e:29:45:61:ef:91:4b:cb:
ce:b6:6b:c4:0b:92:19:79:68:aa:d0:89:6c:fe:d9:
71:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7C:48:86:86:8B:0E:C3:A7:C0:19:A7:18:A0:50:B0:13:34:54:50
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec82d39f-e496-445b-b47e-f9450ba4b273.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.93.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:d4:be:5e:0b:68:c5:ad:a7:85:38:e9:2c:f0:7f:a3:c9:55:
42:ff:0e:85:ab:94:40:b1:b6:cf:c2:ec:53:78:f0:70:a3:8a:
d1:85:cc:79:62:79:ef:7e:cc:e5:6d:51:4a:3c:e5:30:ca:82:
dc:da:2c:f8:78:25:5f:98:43:e1:e8:99:df:37:cd:74:0a:4f:
1f:4e:c8:c4:e7:9b:72:a8:3a:f1:a0:4b:86:12:ed:66:7f:d0:
04:92:19:23:9c:e5:a2:e0:23:4f:76:1d:29:e2:a9:60:69:eb:
97:d6:40:55:64:c3:b9:bb:7b:5f:7f:54:46:58:11:77:c7:6a:
c8:b3:d5:9e:c1:10:f9:e3:9e:a0:f4:29:07:1c:5d:2a:b7:a0:
4f:38:cc:d6:5a:50:f6:6e:ab:25:8f:60:9b:8f:ef:f9:33:91:
93:0a:8e:cf:9d:03:69:f2:e8:88:d9:76:c8:e6:d4:dd:5a:c0:
fc:66:0c:63:98:b2:39:0b:d2:30:b3:f8:da:a1:6b:a2:e8:89:
c2:71:e3:34:1b:f5:bd:e9:33:d5:f1:c0:42:82:aa:b6:c9:b1:
f3:df:43:8b:2f:0a:0c:08:5f:fd:75:d4:fd:79:08:34:f6:e3:
9a:5a:ae:bb:64:d8:4b:2c:05:5f:26:e0:2f:13:72:b8:c5:63:
46:bb:71:42
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUWoEaXCqU56a5Kfy63ESuyV+mg7YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA5MDAyMTE3WhcNMjUwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BhOWJlMjM2MGQzMzU1NGUwZjc2MDE4ZWNmODg5MDk3NTFh
MGNmYTFmOGQzZDA1ODkwNWJlZDhiYmY5MmJiMzIyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDw81YUpgxNzViCLlec9jRxtxxKTP4L3X9+mKFji09Px1OY
cka1Q2UMy/ZNH2+wilZk49hNtVdaQYwxUKTlmoipbAwnH+OAa0M2x/KT1tRDacON
KFNUikMlXC4yyQKRY4JTuMT/aAygYV0vz8yz7s7JH3/zR1DFw1XYL4iSNCkN7Al0
GOMfn/2TE9/c+RpWmzI3dfhUSPkwmTnm2fiyxPXBWRasK2bRt1KE6gT+5JU/wBH7
LLd4Z9mf8vCp/+ciVmH/xdSR9ufbdg6oOu47Ha/lz93Fa7I4cvKZXafsWuU6W9Vw
1muqpl0eKUVh75FLy862a8QLkhl5aKrQiWz+2XHLAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUM3xIhoaLDsOnwBmnGKBQsBM0VFAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VjODJkMzlmLWU0OTYtNDQ1Yi1iNDdlLWY5NDUwYmE0YjI3My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4XTANBgkqhkiG9w0BAQsFAAOCAQEAb9S+Xgtoxa2nhTjpLPB/o8lVQv8O
hauUQLG2z8LsU3jwcKOK0YXMeWJ5737M5W1RSjzlMMqC3Nos+HglX5hD4eiZ3zfN
dApPH07IxOebcqg68aBLhhLtZn/QBJIZI5zlouAjT3YdKeKpYGnrl9ZAVWTDubt7
X39URlgRd8dqyLPVnsEQ+eOeoPQpBxxdKregTzjM1lpQ9m6rJY9gm4/v+TORkwqO
z50DafLoiNl2yObU3VrA/GYMY5iyOQvSMLP42qFrouiJwnHjNBv1vekz1fHAQoKq
tsmx899Diy8KDAhf/XXU/XkINPbjmlquu2TYSywFXybgLxNyuMVjRrtxQg==
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:24 2025 by rpki-client on console.sobornost.net