Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cb088b4a-420f-4b13-84d1-b160e021b919.roa
File: cb088b4a-420f-4b13-84d1-b160e021b919.roa (raw, json)
Hash identifier: v/hCzmad9kp/H8yCApQqCfHBMaVJRgj2rz0OJDCXMBQ=
Subject key identifier: 74:3B:BE:BF:3E:7F:2E:62:E4:67:E2:67:65:25:14:08:8E:61:D9:90
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 4A0E5C6BA1FEB5AF30BB25F1D48D2A2B73661A00
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cb088b4a-420f-4b13-84d1-b160e021b919.roa
Signing time: Fri 11 Apr 2025 00:01:03 +0000
ROA not before: Fri 11 Apr 2025 00:01:03 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 69.169.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:0e:5c:6b:a1:fe:b5:af:30:bb:25:f1:d4:8d:2a:2b:73:66:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Apr 11 00:01:03 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=da3bf6152e5555b6369fce185254ae01da4014a7d772b42c92cc4ffc5b700545, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fc:1e:3c:b5:7d:25:61:ab:bc:34:dd:c0:e0:
25:00:b3:2c:65:cf:44:71:f2:59:f0:35:3b:00:52:
c3:41:fb:78:f9:be:40:28:eb:80:81:66:98:11:55:
fd:8a:07:2b:82:47:a1:e0:d4:aa:ee:c9:0c:04:f6:
8a:5f:9c:d7:08:43:f8:05:3c:d2:ea:28:8c:cb:a3:
4a:48:e8:c0:d1:87:18:69:3c:5f:72:b0:37:5d:53:
1c:f6:6d:4b:55:b8:51:f9:20:03:2f:d8:9b:3d:ab:
27:7d:7c:ab:b2:5d:c5:2f:5b:18:af:21:24:58:ec:
59:25:85:52:9a:b0:cd:8b:1c:06:3d:6b:d1:d1:54:
15:93:1a:3e:c5:56:6f:fb:dd:f0:a8:bd:bd:56:34:
49:8e:d4:cb:d8:9e:48:c8:42:80:33:e0:88:cd:29:
8e:00:44:f7:78:80:9d:c4:fa:4a:f8:90:cc:b4:ed:
f8:86:7e:48:94:87:f2:b7:65:f2:d8:42:0e:7a:6b:
f5:41:57:58:40:28:76:d7:2f:7f:44:fa:13:e6:04:
0d:1c:cb:33:19:76:0e:27:82:3a:31:db:ed:b4:39:
44:9f:ba:9e:b5:d3:8f:13:59:5a:75:7e:11:55:02:
f5:61:95:90:a8:b0:79:4a:75:98:9b:31:48:6f:25:
b3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3B:BE:BF:3E:7F:2E:62:E4:67:E2:67:65:25:14:08:8E:61:D9:90
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cb088b4a-420f-4b13-84d1-b160e021b919.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.169.227.0/24
Signature Algorithm: sha256WithRSAEncryption
14:10:04:af:22:68:58:18:eb:f2:bb:a6:81:4f:99:26:c8:34:
8d:c2:ae:51:06:2d:83:f1:28:43:99:21:8a:45:ec:33:7a:2b:
a9:ac:dc:81:6d:91:3e:1e:bd:c9:07:db:86:a3:ef:45:39:a9:
06:d5:63:1b:62:f6:65:0d:e8:f7:53:d5:9a:2b:95:8f:28:c0:
e7:8f:b2:cf:81:b7:ba:58:a1:5c:80:aa:f0:73:25:5a:b8:00:
e0:02:92:aa:3e:13:1a:c1:fc:96:36:40:5d:75:61:54:76:74:
db:0e:73:e6:a2:73:9c:02:0b:08:dd:09:a1:47:91:17:7d:62:
ff:c4:dc:4f:1f:d7:78:41:14:d5:64:fd:f7:a7:66:54:40:ac:
d7:81:bf:37:da:3a:69:8c:8c:8d:1a:77:00:69:59:28:ca:41:
be:6b:ed:d9:19:99:31:ed:ac:ab:f0:94:35:3f:86:ec:2f:4a:
af:20:60:e2:df:77:19:04:70:f3:6e:96:6c:45:f7:f5:44:b3:
a5:2d:54:07:ee:4a:bc:11:00:3b:8f:0b:28:b0:bf:ae:db:c7:
76:17:fd:bc:e2:a4:8a:c8:a7:45:36:26:7b:a0:47:1b:f8:d7:
06:3b:d3:e5:05:cf:da:00:ba:52:89:12:32:a8:62:76:c6:ce:
81:19:e5:f6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSg5ca6H+ta8wuyXx1I0qK3NmGgAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNDExMDAwMTAzWhcNMjUwNTE2MjM1OTU5
WjB6MUkwRwYDVQQFE0BkYTNiZjYxNTJlNTU1NWI2MzY5ZmNlMTg1MjU0YWUwMWRh
NDAxNGE3ZDc3MmI0MmM5MmNjNGZmYzViNzAwNTQ1MS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCS/B48tX0lYau8NN3A4CUAsyxlz0Rx8lnwNTsAUsNB+3j5
vkAo64CBZpgRVf2KByuCR6Hg1KruyQwE9opfnNcIQ/gFPNLqKIzLo0pI6MDRhxhp
PF9ysDddUxz2bUtVuFH5IAMv2Js9qyd9fKuyXcUvWxivISRY7FklhVKasM2LHAY9
a9HRVBWTGj7FVm/73fCovb1WNEmO1MvYnkjIQoAz4IjNKY4ARPd4gJ3E+kr4kMy0
7fiGfkiUh/K3ZfLYQg56a/VBV1hAKHbXL39E+hPmBA0cyzMZdg4ngjox2+20OUSf
up61048TWVp1fhFVAvVhlZCosHlKdZibMUhvJbN5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUdDu+vz5/LmLkZ+JnZSUUCI5h2ZAwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkL2NiMDg4YjRhLTQyMGYtNGIxMy04NGQxLWIxNjBlMDIxYjkxOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABFqeMwDQYJKoZIhvcNAQELBQADggEBABQQBK8iaFgY6/K7poFPmSbINI3C
rlEGLYPxKEOZIYpF7DN6K6ms3IFtkT4evckH24aj70U5qQbVYxti9mUN6PdT1Zor
lY8owOePss+Bt7pYoVyAqvBzJVq4AOACkqo+ExrB/JY2QF11YVR2dNsOc+aic5wC
CwjdCaFHkRd9Yv/E3E8f13hBFNVk/fenZlRArNeBvzfaOmmMjI0adwBpWSjKQb5r
7dkZmTHtrKvwlDU/huwvSq8gYOLfdxkEcPNulmxF9/VEs6UtVAfuSrwRADuPCyiw
v67bx3YX/bzipIrIp0U2JnugRxv41wY70+UFz9oAulKJEjKoYnbGzoEZ5fY=
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:32 2025 by rpki-client on console.sobornost.net