Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22be50bd-a1f0-4e6a-af31-b1d4335b25a8.roa
File: 22be50bd-a1f0-4e6a-af31-b1d4335b25a8.roa (raw, json)
Hash identifier: gCZpxU4oSjqw3Y9Y5xO2SlGVSRZnoX0CGRYXR3f7vIk=
Subject key identifier: 32:31:56:5F:69:FC:EF:3A:88:1A:94:2F:E0:7F:BC:04:F0:94:96:37
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0786583D38BA2374273CF863268674C0D82346D3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22be50bd-a1f0-4e6a-af31-b1d4335b25a8.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.25.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:86:58:3d:38:ba:23:74:27:3c:f8:63:26:86:74:c0:d8:23:46:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=6a341a586d722cfeabfb7a7c012aa09f0e51c323cd99036c1f99745e7898cfe1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:30:14:e1:da:f7:4e:c5:5f:89:98:8f:45:6f:
70:54:99:23:3d:14:75:d1:b6:1b:1a:8f:80:ff:59:
fe:38:59:b4:3a:cd:e9:16:d9:b4:f1:b9:a1:71:81:
2f:c9:83:e4:16:61:72:27:a1:7b:5c:7f:5f:31:da:
58:2b:42:21:2f:b8:d9:d7:37:d4:62:8c:89:3b:d7:
2b:1c:73:8b:a6:e0:2f:d2:6e:f6:4d:5b:2a:b4:33:
63:43:90:63:ef:8f:59:b6:dd:ee:80:17:71:fb:89:
9a:8e:4b:af:01:f4:e5:09:05:ac:be:e9:82:93:29:
27:d5:0f:6c:87:4b:03:4e:c4:91:d4:b5:b2:60:0c:
fb:48:e0:28:f5:fc:5c:6c:cd:8e:60:f3:1a:1c:36:
73:ec:59:b6:b9:2c:a1:fc:5e:8f:bb:a7:cc:0d:91:
6c:d3:74:0f:dc:e4:76:ec:64:82:af:37:8e:f3:0b:
ad:3f:75:ca:2e:75:e9:f1:a8:5f:fd:b4:8c:a4:9c:
e5:14:82:51:e2:02:96:3a:43:7d:82:b0:88:7c:18:
2b:1f:93:3b:26:ed:56:ca:9f:78:d1:ed:1a:b4:99:
f0:73:23:b8:84:24:8a:89:a5:c8:08:bf:67:96:45:
bb:b1:95:5f:e4:5e:eb:71:60:a1:39:fd:79:11:53:
d9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:31:56:5F:69:FC:EF:3A:88:1A:94:2F:E0:7F:BC:04:F0:94:96:37
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22be50bd-a1f0-4e6a-af31-b1d4335b25a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.25.0.0/16
Signature Algorithm: sha256WithRSAEncryption
50:8b:07:15:84:0d:d9:77:4c:24:9e:f4:2e:fd:ef:e9:85:eb:
2b:71:a8:2d:97:f5:9d:82:8b:ce:f6:1c:91:c7:0e:52:41:e4:
5d:15:51:2c:15:54:3e:8e:3e:4d:69:a3:42:db:77:5b:eb:2a:
aa:99:81:57:cc:ca:ec:28:11:7a:11:d9:3b:a1:0d:df:72:d3:
06:c3:e3:60:ed:a6:6c:42:cf:33:68:7d:23:33:62:c8:f8:6e:
ef:1c:8f:5e:f5:d2:b1:dd:3a:8a:58:98:3a:43:32:61:da:f6:
0c:83:0e:ac:e0:92:b0:fd:8d:a4:fe:12:29:15:46:f1:21:06:
c8:75:4c:2d:74:ab:fe:ac:25:e0:dc:07:fc:db:24:ac:e0:42:
09:f0:d1:66:2b:a2:12:fb:d6:14:d8:54:30:29:c1:ae:b2:b0:
2c:e1:ca:05:9d:5b:e1:be:b9:0e:c8:61:16:98:d8:d1:76:d6:
ab:86:b6:0f:e0:7e:35:96:12:79:9b:ce:9f:55:10:67:7b:4b:
f1:63:af:6b:86:9e:8c:7c:06:f0:da:f0:36:95:f6:11:83:a2:
f8:c8:ab:52:0d:f6:e9:11:22:d9:48:d4:4a:9b:b0:24:42:49:
56:93:f4:37:0b:47:8b:c8:38:81:51:0a:8b:19:a4:c7:ce:f0:
53:c4:a9:db
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUB4ZYPTi6I3QnPPhjJoZ0wNgjRtMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A2YTM0MWE1ODZkNzIyY2ZlYWJmYjdhN2MwMTJhYTA5ZjBl
NTFjMzIzY2Q5OTAzNmMxZjk5NzQ1ZTc4OThjZmUxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDWMBTh2vdOxV+JmI9Fb3BUmSM9FHXRthsaj4D/Wf44WbQ6
zekW2bTxuaFxgS/Jg+QWYXInoXtcf18x2lgrQiEvuNnXN9RijIk71yscc4um4C/S
bvZNWyq0M2NDkGPvj1m23e6AF3H7iZqOS68B9OUJBay+6YKTKSfVD2yHSwNOxJHU
tbJgDPtI4Cj1/FxszY5g8xocNnPsWba5LKH8Xo+7p8wNkWzTdA/c5HbsZIKvN47z
C60/dcoudenxqF/9tIyknOUUglHiApY6Q32CsIh8GCsfkzsm7VbKn3jR7Rq0mfBz
I7iEJIqJpcgIv2eWRbuxlV/kXutxYKE5/XkRU9kZAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUMjFWX2n87zqIGpQv4H+8BPCUljcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzIyYmU1MGJkLWExZjAtNGU2YS1hZjMxLWIxZDQzMzViMjVhOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQGTANBgkqhkiG9w0BAQsFAAOCAQEAUIsHFYQN2XdMJJ70Lv3v6YXrK3Go
LZf1nYKLzvYckccOUkHkXRVRLBVUPo4+TWmjQtt3W+sqqpmBV8zK7CgRehHZO6EN
33LTBsPjYO2mbELPM2h9IzNiyPhu7xyPXvXSsd06iliYOkMyYdr2DIMOrOCSsP2N
pP4SKRVG8SEGyHVMLXSr/qwl4NwH/NskrOBCCfDRZiuiEvvWFNhUMCnBrrKwLOHK
BZ1b4b65DshhFpjY0XbWq4a2D+B+NZYSeZvOn1UQZ3tL8WOva4aejHwG8NrwNpX2
EYOi+MirUg326REi2UjUSpuwJEJJVpP0NwtHi8g4gVEKixmkx87wU8Sp2w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:31:31 2025 by rpki-client