Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed7b7065-cf3e-4520-9166-2c6322f3d3dd.roa
File: ed7b7065-cf3e-4520-9166-2c6322f3d3dd.roa (raw, json)
Hash identifier: VNnxdq6cu+7pDYZ6bpyl4FfKwWmJtdeFV8DGiOyQs6E=
Subject key identifier: E5:65:DF:D6:6A:95:86:5A:A7:AA:0D:9E:38:60:88:06:1F:2E:A9:E9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 27A996170DD3C9E0784CCDFD6ABD14A0B40DB3AA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed7b7065-cf3e-4520-9166-2c6322f3d3dd.roa
Signing time: Tue 25 Mar 2025 16:50:32 +0000
ROA not before: Tue 25 Mar 2025 16:50:32 +0000
ROA not after: Tue 29 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.18.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:a9:96:17:0d:d3:c9:e0:78:4c:cd:fd:6a:bd:14:a0:b4:0d:b3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 25 16:50:32 2025 GMT
Not After : Apr 29 23:59:59 2025 GMT
Subject: serialNumber=7d7e20100aa70a3d6222a74c34425f7d19af59e9a03d4f67b79116ddb98c1cba, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:02:2a:17:cc:b3:1e:36:4d:88:22:fc:42:2d:
41:c1:8b:e4:ca:57:b1:c1:37:b3:ab:94:94:25:d5:
2c:f3:5f:f6:8b:8a:6b:d5:0e:f4:80:27:7c:52:50:
ee:a7:48:f0:15:85:2f:77:0a:a4:a3:38:e8:13:77:
c9:37:98:41:cd:ac:00:c6:1a:54:16:11:cd:26:77:
7a:de:17:61:2d:60:cc:d0:dd:00:32:d0:c5:6b:90:
19:37:03:83:a4:cd:bb:70:14:61:a5:6d:8a:91:ca:
7e:9c:9d:be:09:db:e3:e2:03:af:97:50:56:19:7c:
8e:e9:24:f4:63:2a:c9:48:18:08:b1:59:6f:42:c2:
f6:93:d9:31:d1:c9:5f:99:69:30:fe:a1:53:32:1f:
7b:22:51:3f:13:7b:7b:84:00:36:50:1b:2f:bf:ee:
17:b0:7b:de:8a:74:62:fe:72:2e:a6:c3:4d:0a:3d:
0e:0d:ba:48:86:2f:bb:2a:82:c5:7b:c6:7e:83:03:
bc:57:68:af:a4:c8:2a:48:88:5b:44:7c:f6:8e:df:
28:91:49:5c:6f:75:9b:2d:0c:51:2a:3a:1f:06:91:
41:3a:b2:75:bf:87:16:cf:31:8a:b0:b3:c2:75:33:
a6:5d:55:1d:73:4d:29:cb:3d:4a:4a:06:94:cf:95:
93:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:65:DF:D6:6A:95:86:5A:A7:AA:0D:9E:38:60:88:06:1F:2E:A9:E9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed7b7065-cf3e-4520-9166-2c6322f3d3dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.1.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c7:bc:be:a8:d7:a8:b8:72:72:59:2e:53:aa:ce:e4:3d:c3:
b6:63:8a:c9:bb:59:21:5a:d3:0c:97:cf:84:db:fb:16:ff:9f:
23:8b:7e:74:c7:e3:09:32:34:85:4b:6d:4e:a0:fb:4c:ac:64:
b6:ba:b4:6a:b8:25:3c:6b:89:4f:8b:37:74:9e:84:09:fa:2b:
5a:88:23:33:6f:ff:bf:e7:a0:f1:75:9d:23:9d:e5:64:ae:5c:
7a:6a:10:ab:4f:5a:31:ff:11:ba:4e:d7:d0:ff:46:a8:a7:39:
86:d5:30:58:3e:52:c0:8a:d4:c2:3c:5a:11:c7:b8:a9:b8:9e:
1a:1b:3a:e3:bf:63:16:3a:5a:72:c0:3f:eb:c8:5b:27:fb:5a:
83:22:f2:bc:c7:c9:84:61:e4:d8:dc:b0:fb:18:56:15:de:2b:
e4:f9:52:24:35:fa:9e:ae:69:4d:f5:fb:cb:f8:02:3d:bf:f6:
53:e5:b2:51:2c:eb:4e:d1:ee:81:e7:2c:60:d3:f7:1f:85:f9:
fb:e3:5b:27:74:93:be:43:77:c7:74:68:66:b7:7f:09:13:83:
6c:e5:d8:18:37:d5:84:75:27:fd:db:dd:99:13:33:52:4a:71:
54:9e:7f:88:02:18:6f:3c:65:da:dd:80:95:6e:c2:e4:ec:32:
0c:30:98:06
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJ6mWFw3TyeB4TM39ar0UoLQNs6owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI1MTY1MDMyWhcNMjUwNDI5MjM1OTU5
WjB6MUkwRwYDVQQFE0A3ZDdlMjAxMDBhYTcwYTNkNjIyMmE3NGMzNDQyNWY3ZDE5
YWY1OWU5YTAzZDRmNjdiNzkxMTZkZGI5OGMxY2JhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDEAioXzLMeNk2IIvxCLUHBi+TKV7HBN7OrlJQl1SzzX/aL
imvVDvSAJ3xSUO6nSPAVhS93CqSjOOgTd8k3mEHNrADGGlQWEc0md3reF2EtYMzQ
3QAy0MVrkBk3A4OkzbtwFGGlbYqRyn6cnb4J2+PiA6+XUFYZfI7pJPRjKslIGAix
WW9CwvaT2THRyV+ZaTD+oVMyH3siUT8Te3uEADZQGy+/7hewe96KdGL+ci6mw00K
PQ4NukiGL7sqgsV7xn6DA7xXaK+kyCpIiFtEfPaO3yiRSVxvdZstDFEqOh8GkUE6
snW/hxbPMYqws8J1M6ZdVR1zTSnLPUpKBpTPlZOfAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU5WXf1mqVhlqnqg2eOGCIBh8uqekwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VkN2I3MDY1LWNmM2UtNDUyMC05MTY2LTJjNjMyMmYzZDNkZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACIEgEwDQYJKoZIhvcNAQELBQADggEBAE7HvL6o16i4cnJZLlOqzuQ9w7Zj
ism7WSFa0wyXz4Tb+xb/nyOLfnTH4wkyNIVLbU6g+0ysZLa6tGq4JTxriU+LN3Se
hAn6K1qIIzNv/7/noPF1nSOd5WSuXHpqEKtPWjH/EbpO19D/RqinOYbVMFg+UsCK
1MI8WhHHuKm4nhobOuO/YxY6WnLAP+vIWyf7WoMi8rzHyYRh5NjcsPsYVhXeK+T5
UiQ1+p6uaU31+8v4Aj2/9lPlslEs607R7oHnLGDT9x+F+fvjWyd0k75Dd8d0aGa3
fwkTg2zl2Bg31YR1J/3b3ZkTM1JKcVSef4gCGG88ZdrdgJVuwuTsMgwwmAY=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:24 2025 by rpki-client on console.sobornost.net