Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb0b7d83-ba63-418d-9ba0-0081273c74ff.roa
File: fb0b7d83-ba63-418d-9ba0-0081273c74ff.roa (raw, json)
Hash identifier: kZyMtr+qrNRHIthb8Y6MN1/7EVBuwvmZ7kA9o2fNN9o=
Subject key identifier: 59:EB:5C:B2:59:95:67:12:63:96:AA:77:93:FA:C9:EE:AD:ED:69:AD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2495D393125F149F3AF017247923E2E1358D21C0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb0b7d83-ba63-418d-9ba0-0081273c74ff.roa
Signing time: Tue 01 Apr 2025 00:01:46 +0000
ROA not before: Tue 01 Apr 2025 00:01:46 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 170.221.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:95:d3:93:12:5f:14:9f:3a:f0:17:24:79:23:e2:e1:35:8d:21:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 1 00:01:46 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=9cab6c0b664198b90ae9612cfb3579fa262e3a814931f2a0601d89e7706b3353, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:61:3c:cc:0d:b3:d2:63:db:57:69:86:c9:fa:
99:21:ef:26:ab:bd:4d:5f:c5:78:72:c9:cd:0a:91:
4c:0a:24:72:23:c1:12:ff:ca:1c:de:e4:8e:7b:a3:
a1:bb:a9:d2:08:d3:3e:49:15:dd:9a:f1:fd:ae:73:
cc:a0:73:5b:a8:f8:4e:a7:2c:e3:aa:bc:c8:cd:c1:
8a:58:8c:a1:4d:d1:fd:7c:9d:a6:d4:b6:20:e0:08:
a3:21:70:7b:16:13:05:cf:39:cb:43:97:70:5f:09:
89:f2:36:78:d8:b2:79:fc:74:0a:b9:2e:b6:51:91:
7b:27:7b:c5:7f:27:9c:18:c8:21:de:70:b3:d5:6e:
93:49:0d:95:bd:99:cb:f5:02:bc:22:f0:19:e2:12:
34:6d:93:2d:a9:ee:86:86:aa:d0:a0:22:ce:0a:c8:
fd:e5:0c:98:cb:f6:4b:6d:c8:1a:c2:9f:9d:6a:4d:
7f:ba:d6:43:11:ce:a7:eb:ca:3e:3e:8b:a6:1c:6e:
7d:64:7a:b2:df:cd:ef:b2:57:65:30:1d:16:ae:7b:
3e:0a:5b:86:b0:ab:79:b8:6b:28:f7:40:44:0c:2d:
90:06:92:22:ba:25:32:2e:ef:84:27:66:a4:13:6f:
0e:37:f8:71:9f:25:cc:07:40:c0:4e:a3:3c:40:00:
29:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EB:5C:B2:59:95:67:12:63:96:AA:77:93:FA:C9:EE:AD:ED:69:AD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb0b7d83-ba63-418d-9ba0-0081273c74ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.221.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:3b:7e:46:8f:7a:a5:5b:e1:4b:c0:6f:9a:a0:20:32:24:a8:
91:f8:51:ab:6a:31:51:5c:7c:09:db:72:1b:d1:a7:3e:c8:c5:
d4:81:3e:ad:34:55:bf:79:14:d3:4b:b8:50:e8:84:f0:30:35:
c0:f3:6b:61:a2:5f:52:2c:65:d8:c5:c9:b8:f7:1f:45:0f:be:
10:6b:1a:4d:8b:85:60:a6:de:59:11:59:10:92:23:2f:e2:dd:
23:2c:2e:33:ed:0d:5e:ec:d6:77:2a:fb:77:24:7f:ca:a5:7e:
c2:c5:0c:7a:ce:63:ad:34:d1:7b:c8:7f:65:19:72:bd:ac:5a:
22:59:ad:e3:c6:6d:ef:b2:68:ba:0b:48:4c:38:76:63:86:33:
cf:16:15:d7:d8:08:91:e7:7d:38:62:1a:62:7e:94:d0:ff:c7:
72:ce:d9:20:5b:2a:07:dd:df:96:f0:52:5b:02:9c:6d:9b:77:
88:1c:60:cc:9d:8e:db:ee:b0:61:11:42:89:e5:de:ad:4f:4a:
52:5f:d5:97:4f:a9:19:82:59:47:1a:d2:8c:fa:51:2f:f7:06:
e7:f4:40:37:00:6d:f4:0a:b0:1e:64:01:37:18:0d:66:ce:fd:
31:e0:b9:f7:f3:ad:15:50:a4:4c:74:e3:ca:3c:ed:51:a8:37:
db:7d:c9:72
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUJJXTkxJfFJ868BckeSPi4TWNIcAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDAxMDAwMTQ2WhcNMjUwNTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A5Y2FiNmMwYjY2NDE5OGI5MGFlOTYxMmNmYjM1NzlmYTI2
MmUzYTgxNDkzMWYyYTA2MDFkODllNzcwNmIzMzUzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDnYTzMDbPSY9tXaYbJ+pkh7yarvU1fxXhyyc0KkUwKJHIj
wRL/yhze5I57o6G7qdII0z5JFd2a8f2uc8ygc1uo+E6nLOOqvMjNwYpYjKFN0f18
nabUtiDgCKMhcHsWEwXPOctDl3BfCYnyNnjYsnn8dAq5LrZRkXsne8V/J5wYyCHe
cLPVbpNJDZW9mcv1Arwi8BniEjRtky2p7oaGqtCgIs4KyP3lDJjL9kttyBrCn51q
TX+61kMRzqfryj4+i6Ycbn1kerLfze+yV2UwHRauez4KW4awq3m4ayj3QEQMLZAG
kiK6JTIu74QnZqQTbw43+HGfJcwHQMBOozxAAClrAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUWetcslmVZxJjlqp3k/rJ7q3taa0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ZiMGI3ZDgzLWJhNjMtNDE4ZC05YmEwLTAwODEyNzNjNzRmZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCq3TANBgkqhkiG9w0BAQsFAAOCAQEAmjt+Ro96pVvhS8BvmqAgMiSokfhR
q2oxUVx8CdtyG9GnPsjF1IE+rTRVv3kU00u4UOiE8DA1wPNrYaJfUixl2MXJuPcf
RQ++EGsaTYuFYKbeWRFZEJIjL+LdIywuM+0NXuzWdyr7dyR/yqV+wsUMes5jrTTR
e8h/ZRlyvaxaIlmt48Zt77JougtITDh2Y4YzzxYV19gIked9OGIaYn6U0P/Hcs7Z
IFsqB93flvBSWwKcbZt3iBxgzJ2O2+6wYRFCieXerU9KUl/Vl0+pGYJZRxrSjPpR
L/cG5/RANwBt9AqwHmQBNxgNZs79MeC59/OtFVCkTHTjyjztUag3233Jcg==
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:26 2025 by rpki-client on console.sobornost.net