Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f9286ac-48f8-49b1-a140-23eabd801d72.roa
File: 9f9286ac-48f8-49b1-a140-23eabd801d72.roa (raw, json)
Hash identifier: JrR2yD8J/Ewp+kJJlJfVSnKK3V3diNDi6o+XZ+V+r1c=
Subject key identifier: A6:F2:E3:EB:35:02:D6:FE:96:2B:57:6A:52:32:74:EA:63:14:A2:DB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4409E86C2A4BD6A10987F329BF786B3908F02401
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f9286ac-48f8-49b1-a140-23eabd801d72.roa
Signing time: Mon 20 Jan 2025 00:00:00 +0000
ROA not before: Mon 20 Jan 2025 00:00:00 +0000
ROA not after: Mon 24 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.6.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:09:e8:6c:2a:4b:d6:a1:09:87:f3:29:bf:78:6b:39:08:f0:24:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 20 00:00:00 2025 GMT
Not After : Feb 24 23:59:59 2025 GMT
Subject: serialNumber=4d271602e07070183f1d47b144734e8945d5b60c7cd713c4192dd29f161d2ef1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3b:e8:23:58:2a:d7:e7:90:dc:15:7d:30:4a:
5b:e7:3a:58:14:09:0d:35:aa:5a:69:d7:04:e4:e4:
a2:b2:dc:c5:07:48:5a:f2:45:26:2a:6a:dc:bd:a0:
cc:55:76:fb:29:42:29:e9:c4:ee:24:c0:9d:9a:68:
ee:f7:79:94:03:51:b5:51:aa:a0:ab:88:5a:08:b0:
fe:4f:b6:54:5c:d1:6d:ac:7d:2a:82:99:9d:4b:62:
8d:56:c0:a6:7c:2e:55:8b:d2:26:e0:fa:a0:fb:45:
f5:c7:ea:e9:bf:98:d7:fe:bf:13:bc:3d:f1:0a:c4:
63:d2:da:22:33:d8:d1:31:40:22:64:43:97:d5:1a:
66:5b:22:29:66:1b:5b:56:b6:67:ba:d3:53:2c:58:
a0:6d:b5:b5:e5:7a:e9:e0:1f:7c:d4:6e:9c:5b:24:
7b:02:02:19:04:c6:c4:3a:6c:4f:06:9a:7f:ae:24:
7f:0a:ae:b0:0a:fe:93:cf:fd:06:96:fc:55:3a:48:
a2:15:9f:77:f2:ba:b7:ae:b9:12:55:1c:7b:5d:b0:
13:9f:ba:c0:ec:2e:94:8b:b0:7d:68:67:e9:a2:8b:
99:65:c5:7b:5c:31:c2:02:68:8d:26:97:bc:11:b6:
0e:c2:b4:29:f7:3d:88:8a:76:11:74:6c:f5:df:fd:
7d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F2:E3:EB:35:02:D6:FE:96:2B:57:6A:52:32:74:EA:63:14:A2:DB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f9286ac-48f8-49b1-a140-23eabd801d72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.6.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d2:8b:04:f5:01:f9:3b:a5:be:df:23:fd:87:8e:dc:c5:2c:8b:
eb:b6:96:89:9c:e0:74:24:2e:d1:16:3d:fd:44:fa:d3:86:65:
64:1a:3b:33:e6:74:d7:78:eb:29:d2:3f:f3:9f:6f:e4:6d:a4:
55:cb:9c:96:41:b7:ce:5f:ef:8f:10:ab:30:5f:ef:dc:28:bf:
b8:29:ea:9e:bc:00:a9:a1:83:af:ca:3e:65:c8:75:91:74:ec:
54:2d:90:64:51:63:ae:80:55:39:37:ea:c8:33:34:54:d6:92:
a9:0c:fd:fe:f1:e6:a0:00:4b:da:80:68:12:10:69:53:5f:9f:
45:a2:e0:a2:5c:73:38:37:52:22:1f:40:1c:26:d3:cb:b0:b5:
86:26:8b:cb:e3:ea:67:d6:a2:93:99:59:c5:0f:41:2a:df:1c:
d8:5f:c0:c5:36:0c:6b:4c:58:74:75:a6:ea:a0:68:70:0c:35:
b5:2a:64:d3:5e:3e:a5:89:a3:f3:d3:11:04:d9:18:61:a1:83:
c7:69:f3:2b:20:ab:3a:f0:d3:7d:c9:fc:68:d2:0e:cb:3e:09:
3c:be:04:5d:2d:d7:49:d9:73:37:9f:d6:53:6d:f7:bf:23:1d:
c7:2a:53:28:49:32:3f:e4:e5:45:76:41:13:b2:98:d7:28:0c:
15:6c:ae:f7
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIURAnobCpL1qEJh/Mpv3hrOQjwJAEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTIwMDAwMDAwWhcNMjUwMjI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A0ZDI3MTYwMmUwNzA3MDE4M2YxZDQ3YjE0NDczNGU4OTQ1
ZDViNjBjN2NkNzEzYzQxOTJkZDI5ZjE2MWQyZWYxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDWO+gjWCrX55DcFX0wSlvnOlgUCQ01qlpp1wTk5KKy3MUH
SFryRSYqaty9oMxVdvspQinpxO4kwJ2aaO73eZQDUbVRqqCriFoIsP5PtlRc0W2s
fSqCmZ1LYo1WwKZ8LlWL0ibg+qD7RfXH6um/mNf+vxO8PfEKxGPS2iIz2NExQCJk
Q5fVGmZbIilmG1tWtme601MsWKBttbXleungH3zUbpxbJHsCAhkExsQ6bE8Gmn+u
JH8KrrAK/pPP/QaW/FU6SKIVn3fyureuuRJVHHtdsBOfusDsLpSLsH1oZ+mii5ll
xXtcMcICaI0ml7wRtg7CtCn3PYiKdhF0bPXf/X2dAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUpvLj6zUC1v6WK1dqUjJ06mMUotswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzlmOTI4NmFjLTQ4ZjgtNDliMS1hMTQwLTIzZWFiZDgwMWQ3Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBBBjANBgkqhkiG9w0BAQsFAAOCAQEA0osE9QH5O6W+3yP9h47cxSyL67aW
iZzgdCQu0RY9/UT604ZlZBo7M+Z013jrKdI/859v5G2kVcuclkG3zl/vjxCrMF/v
3Ci/uCnqnrwAqaGDr8o+Zch1kXTsVC2QZFFjroBVOTfqyDM0VNaSqQz9/vHmoABL
2oBoEhBpU1+fRaLgolxzODdSIh9AHCbTy7C1hiaLy+PqZ9aik5lZxQ9BKt8c2F/A
xTYMa0xYdHWm6qBocAw1tSpk014+pYmj89MRBNkYYaGDx2nzKyCrOvDTfcn8aNIO
yz4JPL4EXS3XSdlzN5/WU233vyMdxypTKEkyP+TlRXZBE7KY1ygMFWyu9w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:01:47 2025 by rpki-client