Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ac78a6c-d4e9-41a2-a8a0-2c70e836558d.roa
File: 7ac78a6c-d4e9-41a2-a8a0-2c70e836558d.roa (raw, json)
Hash identifier: kHUcimuvexb3PiS8DSFwaFSqs8jsjheXkx85lhg6EZU=
Subject key identifier: BE:8F:A6:06:26:82:F3:6F:A4:7E:54:EE:01:D8:89:E8:B4:FA:7E:7C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2E94A8C302BE7406133AC66BA5DC082EB81FA8F6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ac78a6c-d4e9-41a2-a8a0-2c70e836558d.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:94:a8:c3:02:be:74:06:13:3a:c6:6b:a5:dc:08:2e:b8:1f:a8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=a1803b3f440c514724c386567413037494e751c2b014ce159c024aa9ba4b1a47, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4e:84:45:c9:98:a9:5e:3e:b6:49:30:05:dd:
7e:ca:e0:03:44:98:46:23:31:60:9f:95:b9:c8:27:
b2:bb:65:4a:72:10:01:03:fe:9f:27:e1:11:fe:89:
a7:ce:30:75:86:94:90:9a:2c:56:c3:76:fc:c5:0b:
56:77:84:a9:95:f1:be:11:e5:0e:49:c5:79:05:00:
c4:fa:15:8a:5d:5f:75:a1:84:f7:a0:c5:06:9e:eb:
f9:f1:7c:2d:4b:1e:dd:e9:01:38:c0:90:bb:be:45:
d2:50:70:c4:55:94:48:39:53:52:7d:89:0c:4b:cc:
31:53:79:23:b1:e1:28:8e:64:f7:03:03:b6:95:c0:
5e:1f:fd:e8:24:1f:65:06:36:c7:37:51:25:57:c1:
7b:9b:f0:43:3b:54:17:63:6c:6c:b8:db:58:69:e7:
60:6a:9c:c7:49:cd:93:10:70:8e:05:a2:14:f9:4a:
42:b7:0f:08:56:9c:3a:cf:fd:f9:3d:78:46:56:11:
04:db:ba:65:72:f3:e4:8f:87:0e:2a:4c:89:12:1b:
6c:db:0f:e1:8a:54:fe:1f:7c:d7:36:c9:0b:cb:ef:
53:bf:4e:08:c8:15:92:9d:4b:53:b1:bb:0f:ed:93:
a5:a8:bc:f3:12:9f:b8:5d:36:e9:a9:97:93:55:45:
2e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8F:A6:06:26:82:F3:6F:A4:7E:54:EE:01:D8:89:E8:B4:FA:7E:7C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ac78a6c-d4e9-41a2-a8a0-2c70e836558d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.70.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1e:b2:5c:3c:aa:b2:cc:09:42:17:a8:1a:70:8c:ad:51:6a:5c:
fa:24:38:66:66:d5:38:6c:8f:d2:58:cc:1f:d4:68:51:ed:69:
45:6e:c8:66:3b:45:76:da:60:0e:aa:21:f3:9b:d9:c9:e5:9c:
37:9f:46:4e:d0:46:97:9c:e1:66:bc:b3:68:e2:7c:3e:f7:58:
27:e1:d8:12:70:6b:ab:65:c1:45:62:d8:f7:08:fb:ec:d2:65:
15:29:73:bc:21:d9:a2:de:fb:86:71:98:a3:cb:55:db:ee:80:
4f:15:8a:bb:04:30:bf:34:dc:28:09:55:2b:4f:a5:5c:f0:0a:
22:ce:03:48:da:a9:41:41:26:67:04:a7:69:45:eb:be:e3:14:
0c:a3:f6:13:a1:18:02:2f:db:5d:83:20:da:3e:a2:80:86:30:
90:b4:4f:72:78:02:b1:aa:13:86:b4:70:28:3c:11:bb:99:d3:
c8:45:a1:e2:e0:c5:d4:45:4f:37:06:a1:45:ea:1a:ae:12:67:
c9:0f:09:9f:76:67:d0:39:64:4e:3d:c6:00:47:46:13:c2:82:
c3:d4:61:dc:69:32:8b:c2:01:cf:13:4c:a0:45:a5:01:d2:95:
81:a0:5c:b1:5a:59:64:f3:93:57:a2:12:f6:7f:91:ad:b1:88:
a8:2a:17:a4
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIULpSowwK+dAYTOsZrpdwILrgfqPYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI4MDAwMDAwWhcNMjUwMzA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BhMTgwM2IzZjQ0MGM1MTQ3MjRjMzg2NTY3NDEzMDM3NDk0
ZTc1MWMyYjAxNGNlMTU5YzAyNGFhOWJhNGIxYTQ3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDIToRFyZipXj62STAF3X7K4ANEmEYjMWCflbnIJ7K7ZUpy
EAED/p8n4RH+iafOMHWGlJCaLFbDdvzFC1Z3hKmV8b4R5Q5JxXkFAMT6FYpdX3Wh
hPegxQae6/nxfC1LHt3pATjAkLu+RdJQcMRVlEg5U1J9iQxLzDFTeSOx4SiOZPcD
A7aVwF4f/egkH2UGNsc3USVXwXub8EM7VBdjbGy421hp52BqnMdJzZMQcI4FohT5
SkK3DwhWnDrP/fk9eEZWEQTbumVy8+SPhw4qTIkSG2zbD+GKVP4ffNc2yQvL71O/
TgjIFZKdS1Oxuw/tk6WovPMSn7hdNumpl5NVRS5VAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUvo+mBiaC82+kflTuAdiJ6LT6fnwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdhYzc4YTZjLWQ0ZTktNDFhMi1hOGEwLTJjNzBlODM2NTU4ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4RjANBgkqhkiG9w0BAQsFAAOCAQEAHrJcPKqyzAlCF6gacIytUWpc+iQ4
ZmbVOGyP0ljMH9RoUe1pRW7IZjtFdtpgDqoh85vZyeWcN59GTtBGl5zhZryzaOJ8
PvdYJ+HYEnBrq2XBRWLY9wj77NJlFSlzvCHZot77hnGYo8tV2+6ATxWKuwQwvzTc
KAlVK0+lXPAKIs4DSNqpQUEmZwSnaUXrvuMUDKP2E6EYAi/bXYMg2j6igIYwkLRP
cngCsaoThrRwKDwRu5nTyEWh4uDF1EVPNwahReoarhJnyQ8Jn3Zn0DlkTj3GAEdG
E8KCw9Rh3Gkyi8IBzxNMoEWlAdKVgaBcsVpZZPOTV6IS9n+RrbGIqCoXpA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:12 2025 by rpki-client