Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fb48f7e-f63e-492e-aa31-e2a46fd245cf.roa
File: 7fb48f7e-f63e-492e-aa31-e2a46fd245cf.roa (raw, json)
Hash identifier: my4xQwWTWgY9ykGNDgnPNIw2aDchkswWDZ3bQL6FVF4=
Subject key identifier: C9:A0:72:FD:19:D3:15:67:46:16:D3:7D:6A:25:07:68:00:5C:83:89
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 521E02B26F2EE8671C06D981A397041AF7AA11C3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fb48f7e-f63e-492e-aa31-e2a46fd245cf.roa
Signing time: Sat 18 Jan 2025 00:00:00 +0000
ROA not before: Sat 18 Jan 2025 00:00:00 +0000
ROA not after: Sat 22 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.240.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:1e:02:b2:6f:2e:e8:67:1c:06:d9:81:a3:97:04:1a:f7:aa:11:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 18 00:00:00 2025 GMT
Not After : Feb 22 23:59:59 2025 GMT
Subject: serialNumber=9494703df37f16d27f10661c2ad99124cc8ff3ccb92d14854a64eecec3f5d9ea, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:01:44:f7:06:16:7d:be:e4:95:cf:5b:3f:
16:38:2d:8e:11:7c:87:3c:36:08:c0:fa:e2:26:17:
ad:1d:18:2b:91:bb:d7:03:fc:ea:ed:26:ff:18:40:
0e:f3:33:d0:8b:c3:77:96:2f:b2:ec:b9:eb:66:75:
fd:01:2d:23:b7:44:4a:78:4c:87:3b:01:60:45:42:
2e:c1:6a:44:42:32:00:57:27:57:6a:51:0a:0e:e9:
a2:89:f0:fe:c6:64:a7:af:17:ab:63:61:15:3f:78:
10:61:45:f0:46:3b:75:ac:d4:7c:ff:c0:3e:81:ba:
52:75:2c:7e:3b:a5:62:3b:68:ab:43:03:93:a0:71:
c3:87:f1:c9:76:89:fe:18:e2:48:b0:43:d9:f7:cb:
22:85:7b:4e:92:b9:17:a1:88:74:f0:d4:bb:93:03:
f2:cc:ac:95:fe:a5:af:68:16:99:01:53:cc:38:b1:
8f:dd:a8:03:8c:bb:ff:2a:11:8d:14:7c:86:b9:5c:
14:66:50:59:2f:45:3b:8b:63:a7:64:aa:3d:14:42:
3e:04:aa:b9:d5:a2:fa:9d:b8:65:53:43:41:0c:81:
b6:bd:40:f5:4b:65:ae:1c:2d:eb:7b:cc:3c:0a:02:
9c:1c:50:c9:38:56:97:89:08:b6:ec:1f:c7:50:a1:
2b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A0:72:FD:19:D3:15:67:46:16:D3:7D:6A:25:07:68:00:5C:83:89
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fb48f7e-f63e-492e-aa31-e2a46fd245cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.240.128.0/19
Signature Algorithm: sha256WithRSAEncryption
48:e0:03:f8:13:77:27:4d:41:83:67:05:72:76:7f:52:2a:f5:
37:82:6b:36:bf:2c:8b:51:cb:32:89:69:fc:bc:e1:19:2a:bd:
8e:31:5d:67:67:d2:6b:30:50:6e:2d:b6:ef:ee:35:87:ae:3f:
63:76:13:c7:d9:41:83:c6:59:40:18:79:a0:21:00:75:97:0f:
fa:9c:15:de:fa:e4:78:de:49:9f:8a:18:5b:94:1a:65:4f:1a:
06:10:94:cb:7f:c5:6c:a6:c3:a6:0e:88:ae:a7:1f:a2:67:22:
44:7d:af:d9:1a:96:a1:7a:f7:11:dd:16:2f:4d:b5:59:42:d7:
52:cc:52:0e:b6:7d:c9:55:f0:32:bd:49:0d:2e:21:98:28:9e:
6a:eb:54:bb:94:55:ed:18:da:bf:91:0b:cd:c6:5f:93:d9:08:
ee:25:63:8f:d2:a9:66:d5:dc:af:c3:a2:a0:e7:41:79:1c:81:
73:7d:3d:4a:13:a6:ac:da:29:20:f9:34:a5:85:5a:81:c0:9f:
74:02:6c:26:5a:19:b8:82:6e:5b:0f:67:55:d4:c1:46:e7:f8:
e3:4d:80:ba:58:ec:33:20:37:60:a3:26:e1:3d:53:48:f6:2d:
fa:e6:c2:e1:d5:0e:98:db:e4:db:30:d8:6a:db:6d:0d:98:86:
ce:1e:c0:7b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUh4Csm8u6GccBtmBo5cEGveqEcMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTE4MDAwMDAwWhcNMjUwMjIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A5NDk0NzAzZGYzN2YxNmQyN2YxMDY2MWMyYWQ5OTEyNGNj
OGZmM2NjYjkyZDE0ODU0YTY0ZWVjZWMzZjVkOWVhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCmlQFE9wYWfb7klc9bPxY4LY4RfIc8NgjA+uImF60dGCuR
u9cD/OrtJv8YQA7zM9CLw3eWL7Lsuetmdf0BLSO3REp4TIc7AWBFQi7BakRCMgBX
J1dqUQoO6aKJ8P7GZKevF6tjYRU/eBBhRfBGO3Ws1Hz/wD6BulJ1LH47pWI7aKtD
A5OgccOH8cl2if4Y4kiwQ9n3yyKFe06SuRehiHTw1LuTA/LMrJX+pa9oFpkBU8w4
sY/dqAOMu/8qEY0UfIa5XBRmUFkvRTuLY6dkqj0UQj4EqrnVovqduGVTQ0EMgba9
QPVLZa4cLet7zDwKApwcUMk4VpeJCLbsH8dQoSs3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUyaBy/RnTFWdGFtN9aiUHaABcg4kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdmYjQ4ZjdlLWY2M2UtNDkyZS1hYTMxLWUyYTQ2ZmQyNDVjZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXY8IAwDQYJKoZIhvcNAQELBQADggEBAEjgA/gTdydNQYNnBXJ2f1Iq9TeC
aza/LItRyzKJafy84RkqvY4xXWdn0mswUG4ttu/uNYeuP2N2E8fZQYPGWUAYeaAh
AHWXD/qcFd765HjeSZ+KGFuUGmVPGgYQlMt/xWymw6YOiK6nH6JnIkR9r9kalqF6
9xHdFi9NtVlC11LMUg62fclV8DK9SQ0uIZgonmrrVLuUVe0Y2r+RC83GX5PZCO4l
Y4/SqWbV3K/DoqDnQXkcgXN9PUoTpqzaKSD5NKWFWoHAn3QCbCZaGbiCblsPZ1XU
wUbn+ONNgLpY7DMgN2CjJuE9U0j2LfrmwuHVDpjb5Nsw2GrbbQ2Yhs4ewHs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:44 2025 by rpki-client