Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/17edae64-fd0e-4dce-b1bf-eb3687e99d6a.roa
File: 17edae64-fd0e-4dce-b1bf-eb3687e99d6a.roa (raw, json)
Hash identifier: RttRqSlgZnXNp/9Sbb3h2FuiMldUrX16X5rVIaeNjcE=
Subject key identifier: E1:1E:2D:02:9F:73:D8:68:CF:9B:89:CF:E5:6C:CE:E4:8C:93:99:F8
Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial: 08FA1669C5DD84DC87309C51CC559EB8CA67E5B5
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/17edae64-fd0e-4dce-b1bf-eb3687e99d6a.roa
Signing time: Mon 31 Mar 2025 16:11:05 +0000
ROA not before: Mon 31 Mar 2025 16:11:05 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.112.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:fa:16:69:c5:dd:84:dc:87:30:9c:51:cc:55:9e:b8:ca:67:e5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Validity
Not Before: Mar 31 16:11:05 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=e547f48be27952531f83ca350ed5ba68d0510644cfe37dcb4100fcc84b25bf64, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5d:b9:b7:e3:d6:7e:86:7c:d9:ab:1d:7c:f6:
d6:50:04:97:5f:16:f6:bd:7d:19:33:9a:24:d7:c8:
e3:0f:c6:42:a8:44:4d:0e:4b:a6:7f:a7:84:75:7e:
a6:90:b2:16:36:19:79:2d:f0:7a:ef:6e:44:28:75:
6b:bc:9d:f2:5b:c3:12:31:3a:6d:2e:1b:61:13:30:
9d:ed:18:1f:1b:0f:17:fd:75:6b:c3:40:2e:bd:0d:
4d:03:cd:f2:ba:d6:4b:8e:59:44:fe:30:78:87:73:
d8:7b:d8:e6:b6:ce:3b:dc:3d:03:82:7f:e3:99:84:
09:98:9f:26:fc:7f:b2:09:ed:cb:18:52:8f:17:dc:
26:44:ab:02:49:56:06:7f:0b:e4:e7:b0:9d:c6:69:
fc:61:d1:48:37:3a:ee:82:0f:ab:57:52:b6:c6:36:
a5:86:23:76:3a:36:f2:3d:d5:82:98:42:90:b9:04:
0e:c0:67:a2:d8:cb:71:3b:76:6a:7d:ea:71:c6:0c:
4a:5e:2b:76:bf:c7:1a:35:6d:79:34:93:8b:ae:a9:
f3:73:c8:b7:4c:5e:55:18:00:ac:d1:f8:6d:68:bb:
5c:45:42:31:81:97:d1:a3:f2:52:96:c2:e3:4b:05:
84:61:37:f1:d1:05:3a:38:82:f9:72:35:5c:d4:87:
22:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1E:2D:02:9F:73:D8:68:CF:9B:89:CF:E5:6C:CE:E4:8C:93:99:F8
X509v3 Authority Key Identifier:
keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/17edae64-fd0e-4dce-b1bf-eb3687e99d6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.112.8.0/21
Signature Algorithm: sha256WithRSAEncryption
68:66:30:f8:db:8d:a0:2c:c0:a7:0b:7c:9b:04:51:2c:ff:15:
d1:76:06:49:85:21:15:2d:61:19:d1:2e:b3:75:6b:d2:2c:d5:
65:14:aa:1a:78:0a:90:67:cb:59:a7:9c:2c:f2:e5:21:69:cb:
a5:5f:c4:bf:28:79:bc:7a:5e:03:fb:a6:0a:af:e2:1e:aa:37:
ad:33:dd:5a:66:9c:f7:92:ec:79:04:5a:b9:1a:f7:06:66:fa:
e4:a8:97:7a:71:ab:fe:40:48:ad:75:e6:60:d0:c4:6f:59:28:
42:0b:fd:2d:99:4d:70:c0:c9:41:75:24:3a:e1:e6:7d:81:25:
d8:30:ca:d1:d6:19:05:d6:d9:8d:3a:a9:8a:46:26:b9:57:78:
f0:4d:33:d4:d4:dd:47:b3:1f:58:dd:0e:13:c7:0d:25:52:c8:
01:17:cc:8b:ed:34:aa:62:f8:1c:8c:8d:52:d4:5a:91:4a:f7:
09:37:39:17:0a:24:26:e2:b8:81:39:a3:53:95:b6:a1:6b:87:
ce:14:d6:bd:29:ed:80:48:27:03:b0:a1:4f:65:a4:04:5c:89:
58:76:de:88:6b:17:a9:c8:3d:51:d7:b0:e7:c2:75:30:41:fd:
32:ea:8f:a0:41:bb:81:e0:0c:de:f8:f6:83:df:e4:de:19:e3:
dd:d3:27:20
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCPoWacXdhNyHMJxRzFWeuMpn5bUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj
Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUwMzMxMTYxMTA1WhcNMjUwNTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BlNTQ3ZjQ4YmUyNzk1MjUzMWY4M2NhMzUwZWQ1YmE2OGQw
NTEwNjQ0Y2ZlMzdkY2I0MTAwZmNjODRiMjViZjY0MS0wKwYDVQQDEyRkZGZiYzk3
Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDxXbm349Z+hnzZqx189tZQBJdfFva9fRkzmiTXyOMPxkKo
RE0OS6Z/p4R1fqaQshY2GXkt8HrvbkQodWu8nfJbwxIxOm0uG2ETMJ3tGB8bDxf9
dWvDQC69DU0DzfK61kuOWUT+MHiHc9h72Oa2zjvcPQOCf+OZhAmYnyb8f7IJ7csY
Uo8X3CZEqwJJVgZ/C+TnsJ3Gafxh0Ug3Ou6CD6tXUrbGNqWGI3Y6NvI91YKYQpC5
BA7AZ6LYy3E7dmp96nHGDEpeK3a/xxo1bXk0k4uuqfNzyLdMXlUYAKzR+G1ou1xF
QjGBl9Gj8lKWwuNLBYRhN/HRBTo4gvlyNVzUhyInAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU4R4tAp9z2GjPm4nP5WzO5IyTmfgwHwYDVR0jBBgwFoAUkS3GDddkKYK8
rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w
OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy
Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4
OTE0OTBkOWM5LzE3ZWRhZTY0LWZkMGUtNGRjZS1iMWJmLWViMzY4N2U5OWQ2YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw
LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMycAgwDQYJKoZIhvcNAQELBQADggEBAGhmMPjbjaAswKcLfJsEUSz/FdF2
BkmFIRUtYRnRLrN1a9Is1WUUqhp4CpBny1mnnCzy5SFpy6VfxL8oebx6XgP7pgqv
4h6qN60z3VpmnPeS7HkEWrka9wZm+uSol3pxq/5ASK115mDQxG9ZKEIL/S2ZTXDA
yUF1JDrh5n2BJdgwytHWGQXW2Y06qYpGJrlXePBNM9TU3UezH1jdDhPHDSVSyAEX
zIvtNKpi+ByMjVLUWpFK9wk3ORcKJCbiuIE5o1OVtqFrh84U1r0p7YBIJwOwoU9l
pARciVh23ohrF6nIPVHXsOfCdTBB/TLqj6BBu4HgDN749oPf5N4Z493TJyA=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:49 2025 by rpki-client on console.sobornost.net