Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eba43604-9a87-4a97-9c71-09a2c1a87b9a.roa
File: eba43604-9a87-4a97-9c71-09a2c1a87b9a.roa (raw, json)
Hash identifier: EzvIQVffb7m0GfRqge63QS6IwnljrkKEE82+FOm7ebY=
Subject key identifier: CC:BD:05:CD:19:BF:85:BC:5F:8B:C6:EA:38:C2:5E:D8:A7:DB:81:EE
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 200CFBB60810DDC9FD1D82D97149AA511EBEC027
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eba43604-9a87-4a97-9c71-09a2c1a87b9a.roa
Signing time: Mon 31 Mar 2025 17:50:14 +0000
ROA not before: Mon 31 Mar 2025 17:50:14 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.93.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:0c:fb:b6:08:10:dd:c9:fd:1d:82:d9:71:49:aa:51:1e:be:c0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 31 17:50:14 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=4578325123242dba7f93d7ef92259567f3216e4dfe81a30646e7bef85d839313, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:3f:3e:4c:c2:79:5c:f8:84:00:17:16:6d:
17:f8:eb:1a:ec:a1:a6:bd:b2:6e:f9:23:ce:da:33:
a5:81:c0:52:ea:4e:c1:db:1b:3d:23:20:e4:1a:5a:
c3:af:d0:ef:12:5d:2f:f5:aa:5d:73:6b:57:88:6e:
d0:43:9f:c2:7f:14:36:e6:9d:32:84:54:21:9b:b9:
b5:9e:19:4a:24:c4:6f:82:29:69:49:d4:99:aa:c1:
d1:92:4f:9e:e4:c9:cc:62:50:27:f6:a1:ba:90:dc:
52:cb:52:99:25:98:ca:29:20:6b:96:f8:85:44:a5:
e1:f9:97:67:5e:5f:92:29:fd:13:02:b0:03:76:10:
88:e4:cb:81:92:04:95:45:c1:de:5b:07:ac:31:ab:
67:85:2b:b4:24:6c:50:fa:e0:a1:07:e8:80:56:91:
d3:6b:4c:a5:36:d2:2c:5e:10:13:6c:dc:80:76:83:
51:21:6b:9a:60:a1:00:a6:f3:8d:5b:bf:a5:fc:21:
41:ee:19:7f:b7:1c:38:6a:bc:ea:ea:43:26:ae:9f:
0d:c0:42:73:86:0d:64:b1:c5:1d:29:05:16:21:77:
17:f6:43:9e:b8:7a:e9:64:64:6b:48:8a:15:64:d3:
f8:af:29:0e:45:2c:94:d2:69:e2:c9:97:a5:bd:e3:
86:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BD:05:CD:19:BF:85:BC:5F:8B:C6:EA:38:C2:5E:D8:A7:DB:81:EE
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eba43604-9a87-4a97-9c71-09a2c1a87b9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.93.64.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ed:49:7e:37:af:01:74:84:ad:a0:81:d1:6f:29:b2:67:89:
aa:d4:69:81:ef:cf:b0:0b:33:26:86:24:14:29:a2:71:17:b3:
e2:7f:a5:fa:e3:ae:39:7e:2e:c0:a2:a5:95:3f:26:90:c8:39:
1a:fc:c1:c5:0a:ba:9b:79:14:f5:23:f0:6a:b0:7b:19:0e:1b:
07:bb:9e:02:38:cd:e1:6b:76:b7:68:99:4d:cd:31:7d:75:8d:
4c:57:5b:22:8b:da:8d:28:81:26:9e:97:75:20:88:47:e5:6e:
d0:f1:c1:1c:58:5e:80:81:cc:7f:e3:86:2d:a2:28:b8:bb:32:
e5:47:3a:ce:67:35:64:ef:68:08:e1:7b:8f:22:16:4f:0f:00:
b1:2e:57:98:2a:44:a9:9c:36:47:e2:d2:21:6e:9b:e8:fa:7f:
0b:a4:c3:6d:4e:0c:8e:17:9d:dc:d8:d2:b3:86:b3:5a:06:96:
a7:9c:62:62:39:5a:5a:50:94:73:05:a2:1d:74:10:d0:5c:6b:
37:97:71:11:6d:0f:a9:78:38:1f:e7:9f:ab:de:5a:69:79:ab:
bc:d5:e7:5f:c1:95:25:c9:ef:7c:95:dd:c8:ae:f9:05:a2:4f:
b5:8c:76:b0:a7:7e:6b:7e:cb:72:33:e1:bf:98:1c:e1:3c:94:
e5:1e:3a:43
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIAz7tggQ3cn9HYLZcUmqUR6+wCcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzMxMTc1MDE0WhcNMjUwNTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A0NTc4MzI1MTIzMjQyZGJhN2Y5M2Q3ZWY5MjI1OTU2N2Yz
MjE2ZTRkZmU4MWEzMDY0NmU3YmVmODVkODM5MzEzMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1YD8+TMJ5XPiEABcWbRf46xrsoaa9sm75I87aM6WBwFLq
TsHbGz0jIOQaWsOv0O8SXS/1ql1za1eIbtBDn8J/FDbmnTKEVCGbubWeGUokxG+C
KWlJ1JmqwdGST57kycxiUCf2obqQ3FLLUpklmMopIGuW+IVEpeH5l2deX5Ip/RMC
sAN2EIjky4GSBJVFwd5bB6wxq2eFK7QkbFD64KEH6IBWkdNrTKU20ixeEBNs3IB2
g1Eha5pgoQCm841bv6X8IUHuGX+3HDhqvOrqQyaunw3AQnOGDWSxxR0pBRYhdxf2
Q564eulkZGtIihVk0/ivKQ5FLJTSaeLJl6W944anAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUzL0FzRm/hbxfi8bqOMJe2Kfbge4wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2ViYTQzNjA0LTlhODctNGE5Ny05YzcxLTA5YTJjMWE4N2I5YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA0XUAwDQYJKoZIhvcNAQELBQADggEBAFztSX43rwF0hK2ggdFvKbJniarU
aYHvz7ALMyaGJBQponEXs+J/pfrjrjl+LsCipZU/JpDIORr8wcUKupt5FPUj8Gqw
exkOGwe7ngI4zeFrdrdomU3NMX11jUxXWyKL2o0ogSael3UgiEflbtDxwRxYXoCB
zH/jhi2iKLi7MuVHOs5nNWTvaAjhe48iFk8PALEuV5gqRKmcNkfi0iFum+j6fwuk
w21ODI4XndzY0rOGs1oGlqecYmI5WlpQlHMFoh10ENBcazeXcRFtD6l4OB/nn6ve
Wml5q7zV51/BlSXJ73yV3ciu+QWiT7WMdrCnfmt+y3Iz4b+YHOE8lOUeOkM=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:53 2025 by rpki-client on console.sobornost.net