Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d5bcdba4-b39f-49d7-81da-145442d6f180.roa
File: d5bcdba4-b39f-49d7-81da-145442d6f180.roa (raw, json)
Hash identifier: mmDvnImYn2YSQDh/kBFlwwJAiALqjFHtqe5Boaa77Xw=
Subject key identifier: 88:DE:17:3B:47:A9:65:D9:8E:92:38:34:3D:E9:B2:4B:08:E0:BC:04
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 1125BDE136856C99FB317C28F204EC9B4F02B246
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d5bcdba4-b39f-49d7-81da-145442d6f180.roa
Signing time: Fri 11 Apr 2025 00:10:12 +0000
ROA not before: Fri 11 Apr 2025 00:10:12 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:25:bd:e1:36:85:6c:99:fb:31:7c:28:f2:04:ec:9b:4f:02:b2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Apr 11 00:10:12 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=801e0b05af829d30c449d8a85d95df05cf3c00d71358229dcbba5228e23b5988, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3b:5b:e5:51:58:a6:fc:a9:33:c7:d0:9d:3e:
b6:d9:5d:89:8f:e4:1b:34:fe:06:e7:5d:cc:b0:2e:
7a:ce:3f:86:6d:b1:ce:0d:01:5e:61:99:de:00:09:
35:64:3c:da:9a:4f:b3:e2:87:b6:2d:bc:bf:d8:19:
4b:cd:fa:bd:6c:53:b0:bb:64:bb:17:14:15:4b:ee:
3a:1b:c7:9a:2d:1f:8b:3b:e3:93:2c:5c:aa:0b:c4:
df:1b:3d:f9:73:7c:c2:07:6d:c0:e5:83:24:6a:08:
d6:d4:f4:1b:bb:88:a3:bd:1b:22:d3:a5:c3:7c:a4:
fd:81:7d:f2:35:a7:32:6b:f6:d3:b0:5c:0c:9e:79:
52:8a:d2:54:69:70:0f:ca:d7:b8:9d:86:de:4b:64:
0c:ba:ed:f6:44:64:b2:25:72:b4:8a:81:3a:1d:47:
b7:27:0d:38:d7:c9:3a:c4:e1:7e:a4:48:09:f4:77:
d4:bf:4f:4c:9c:f7:06:49:af:68:a2:3c:4b:09:34:
57:ef:3d:26:ea:b6:0f:45:58:35:10:f6:2a:c3:6f:
d2:f9:1c:ad:ca:4b:7a:22:8a:5b:a4:02:b6:44:58:
66:95:ea:f7:8d:5c:ab:57:cc:63:71:ea:fe:42:50:
82:19:98:1c:a7:98:40:a2:ea:bb:08:a8:87:19:d9:
bc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DE:17:3B:47:A9:65:D9:8E:92:38:34:3D:E9:B2:4B:08:E0:BC:04
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d5bcdba4-b39f-49d7-81da-145442d6f180.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.177.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e6:ff:b0:38:1a:23:92:bd:63:8a:7c:e1:00:34:28:bc:db:
7a:7c:0c:ee:5c:33:25:f3:cc:18:99:df:6b:c3:82:12:67:96:
77:4b:ce:bb:4e:42:4f:96:72:bd:bd:d9:a6:bc:11:a2:24:95:
a7:ab:ef:c3:53:87:02:fd:8f:d0:1e:b3:88:1c:26:36:37:ab:
a3:22:ea:38:9e:cf:92:cc:be:26:bf:94:fb:3a:82:69:9a:1c:
64:d2:04:b5:55:f0:67:00:e8:e2:76:0d:9c:2b:88:f8:89:8e:
2b:5b:5b:f0:ac:f4:af:5f:c6:ed:a9:cf:01:06:15:06:46:22:
2f:6b:d1:04:2c:e6:fb:25:68:85:97:01:d6:b4:ff:a5:4e:1c:
64:b7:14:ab:a7:ea:d5:bc:f5:51:29:4d:da:8a:5e:9c:0e:f4:
68:63:a8:c1:38:2a:c2:2e:ba:30:c1:52:06:57:70:36:97:b6:
2d:4c:99:45:06:21:53:ec:a2:49:d8:3e:37:52:d2:96:e9:ca:
da:d7:0e:06:02:24:2e:9a:90:9e:e6:74:57:ce:6a:f6:f8:b7:
29:28:63:42:8c:46:ce:dd:1d:d4:5a:db:fd:3a:70:fe:92:e8:
72:a5:3f:ca:82:8b:0f:3d:17:ea:8c:bd:fa:c5:b2:69:c8:ed:
cc:d1:c6:1e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUESW94TaFbJn7MXwo8gTsm08CskYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNDExMDAxMDEyWhcNMjUwNTE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A4MDFlMGIwNWFmODI5ZDMwYzQ0OWQ4YTg1ZDk1ZGYwNWNm
M2MwMGQ3MTM1ODIyOWRjYmJhNTIyOGUyM2I1OTg4MS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9O1vlUVim/Kkzx9CdPrbZXYmP5Bs0/gbnXcywLnrOP4Zt
sc4NAV5hmd4ACTVkPNqaT7Pih7YtvL/YGUvN+r1sU7C7ZLsXFBVL7jobx5otH4s7
45MsXKoLxN8bPflzfMIHbcDlgyRqCNbU9Bu7iKO9GyLTpcN8pP2BffI1pzJr9tOw
XAyeeVKK0lRpcA/K17idht5LZAy67fZEZLIlcrSKgTodR7cnDTjXyTrE4X6kSAn0
d9S/T0yc9wZJr2iiPEsJNFfvPSbqtg9FWDUQ9irDb9L5HK3KS3oiilukArZEWGaV
6veNXKtXzGNx6v5CUIIZmBynmECi6rsIqIcZ2bzBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUiN4XO0epZdmOkjg0PemySwjgvAQwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkL2Q1YmNkYmE0LWIzOWYtNDlkNy04MWRhLTE0NTQ0MmQ2ZjE4MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABM37EwDQYJKoZIhvcNAQELBQADggEBAFbm/7A4GiOSvWOKfOEANCi823p8
DO5cMyXzzBiZ32vDghJnlndLzrtOQk+Wcr292aa8EaIklaer78NThwL9j9Aes4gc
JjY3q6Mi6jiez5LMvia/lPs6gmmaHGTSBLVV8GcA6OJ2DZwriPiJjitbW/Cs9K9f
xu2pzwEGFQZGIi9r0QQs5vslaIWXAda0/6VOHGS3FKun6tW89VEpTdqKXpwO9Ghj
qME4KsIuujDBUgZXcDaXti1MmUUGIVPsoknYPjdS0pbpytrXDgYCJC6akJ7mdFfO
avb4tykoY0KMRs7dHdRa2/06cP6S6HKlP8qCiw89F+qMvfrFsmnI7czRxh4=
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:32 2025 by rpki-client on console.sobornost.net