Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdbca8c9-c527-4875-b58e-fc50d0104ec6.roa
File: cdbca8c9-c527-4875-b58e-fc50d0104ec6.roa (raw, json)
Hash identifier: XU17MPRF3EAUd2qI+JYqcJ7AzNyCjFK5cvCUJnHLXD0=
Subject key identifier: C4:95:48:C2:50:80:54:0C:FF:BB:B5:A8:26:FB:4A:C5:F6:71:2D:48
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1FC7BABEBB9B5FF4957CFB92DEBBDFC9E6011359
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdbca8c9-c527-4875-b58e-fc50d0104ec6.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.246.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:c7:ba:be:bb:9b:5f:f4:95:7c:fb:92:de:bb:df:c9:e6:01:13:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=97cb951bd53736a1d9c9f9a889b32b3e9d874ccb32772ca367fcb10957bd85de, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7b:e7:11:11:70:89:15:a4:15:83:5b:db:5c:
a0:d2:da:eb:1b:e9:97:8f:74:5d:2c:a4:21:48:bc:
26:e7:6c:97:ae:be:31:93:cd:f3:92:e5:a2:7b:8a:
df:bd:b2:52:e9:99:88:b6:74:a7:34:f8:b0:b1:77:
79:33:fc:04:8f:53:62:c5:6d:fd:34:3c:90:bf:cf:
ce:64:f2:d3:d5:a1:39:ff:fa:11:63:23:52:a1:e5:
87:80:af:6d:0a:06:25:d3:cd:73:e9:05:65:d2:74:
5b:04:c3:3d:8e:a5:ea:aa:4c:ca:44:69:fc:57:2b:
3c:9d:b5:61:85:c5:88:91:a5:5c:04:6e:2a:a4:4f:
9a:17:8a:b9:fd:b8:6e:db:0e:6f:7e:66:ca:06:40:
3c:8e:4e:3e:f1:d8:b0:03:4f:6a:78:d0:87:a9:f2:
ec:05:ee:01:7a:1e:f7:bf:0c:02:c5:da:e2:47:de:
5d:ab:d1:1c:57:42:47:4c:e7:2b:5f:cd:61:66:90:
88:22:cb:7f:00:c7:75:57:d4:51:a3:6d:4c:fb:97:
1c:b5:55:fa:8a:de:dc:de:16:fa:9c:df:28:f6:a0:
a0:80:52:46:64:98:96:d4:b3:32:01:09:88:12:ff:
bc:ca:04:5d:95:44:22:55:d5:ff:42:36:7a:1c:0a:
69:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:95:48:C2:50:80:54:0C:FF:BB:B5:A8:26:FB:4A:C5:F6:71:2D:48
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdbca8c9-c527-4875-b58e-fc50d0104ec6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.246.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:43:ee:65:56:4e:44:1a:2b:7c:ff:73:4b:9f:60:64:65:12:
82:27:31:73:11:51:ef:b9:d6:db:74:7a:4f:97:b3:af:cd:69:
49:36:a2:34:55:a0:58:02:c9:51:cd:a0:d9:b2:89:08:59:17:
82:92:74:5e:bf:ea:cc:45:9a:57:a5:ef:20:72:04:2f:33:39:
68:33:c5:bc:11:b7:2a:9e:83:d3:97:4e:ce:77:89:0e:73:e6:
97:7b:c0:98:c0:c7:57:40:81:00:82:b9:1e:5f:ae:65:25:e6:
6b:4b:ac:f3:12:21:7a:f7:f4:bf:0d:e6:f0:a7:ce:0b:9c:b6:
af:c8:a0:98:a5:ed:73:0b:3d:73:d3:ef:46:eb:f8:f8:04:67:
f1:5d:2b:a5:2d:f7:85:d1:89:85:7f:ba:80:25:f2:f1:7a:a6:
bb:a5:fe:7e:0f:04:87:1e:dd:d7:0a:f6:e9:b8:ba:a5:e3:b8:
5b:97:6e:17:7a:9e:62:3c:03:c9:2e:1a:40:d7:03:52:bf:f6:
58:c0:0c:54:05:63:46:72:43:80:e2:3d:a8:8a:f4:ec:20:a3:
96:5c:b8:8f:ce:f3:29:25:f9:08:19:83:02:f6:59:c8:ea:8b:
a7:2c:d2:15:ae:a8:24:5a:ef:7e:68:ac:1c:b7:56:b3:f8:90:
83:79:3f:db
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUH8e6vrubX/SVfPuS3rvfyeYBE1kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A5N2NiOTUxYmQ1MzczNmExZDljOWY5YTg4OWIzMmIzZTlk
ODc0Y2NiMzI3NzJjYTM2N2ZjYjEwOTU3YmQ4NWRlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCye+cREXCJFaQVg1vbXKDS2usb6ZePdF0spCFIvCbnbJeu
vjGTzfOS5aJ7it+9slLpmYi2dKc0+LCxd3kz/ASPU2LFbf00PJC/z85k8tPVoTn/
+hFjI1Kh5YeAr20KBiXTzXPpBWXSdFsEwz2OpeqqTMpEafxXKzydtWGFxYiRpVwE
biqkT5oXirn9uG7bDm9+ZsoGQDyOTj7x2LADT2p40Iep8uwF7gF6Hve/DALF2uJH
3l2r0RxXQkdM5ytfzWFmkIgiy38Ax3VX1FGjbUz7lxy1VfqK3tzeFvqc3yj2oKCA
UkZkmJbUszIBCYgS/7zKBF2VRCJV1f9CNnocCmlnAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUxJVIwlCAVAz/u7WoJvtKxfZxLUgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NkYmNhOGM5LWM1MjctNDg3NS1iNThlLWZjNTBkMDEwNGVjNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA49jANBgkqhkiG9w0BAQsFAAOCAQEAh0PuZVZORBorfP9zS59gZGUSgicx
cxFR77nW23R6T5ezr81pSTaiNFWgWALJUc2g2bKJCFkXgpJ0Xr/qzEWaV6XvIHIE
LzM5aDPFvBG3Kp6D05dOzneJDnPml3vAmMDHV0CBAIK5Hl+uZSXma0us8xIhevf0
vw3m8KfOC5y2r8igmKXtcws9c9PvRuv4+ARn8V0rpS33hdGJhX+6gCXy8Xqmu6X+
fg8Ehx7d1wr26bi6peO4W5duF3qeYjwDyS4aQNcDUr/2WMAMVAVjRnJDgOI9qIr0
7CCjlly4j87zKSX5CBmDAvZZyOqLpyzSFa6oJFrvfmisHLdWs/iQg3k/2w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:28:49 2025 by rpki-client