Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dcfc889c-2473-471e-91cb-178bc187dee9.roa
File: dcfc889c-2473-471e-91cb-178bc187dee9.roa (raw, json)
Hash identifier: LPOGpHtypFWxzQsLrZF80jUZj68oB/lTRz6y/AIKsUM=
Subject key identifier: 66:D0:68:1F:4E:AD:E4:0E:58:C6:1C:62:31:E7:6F:65:2D:C8:2B:7D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2CC3D0695CC5CF4B48187BD4B8BF8F04E938496D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dcfc889c-2473-471e-91cb-178bc187dee9.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:c3:d0:69:5c:c5:cf:4b:48:18:7b:d4:b8:bf:8f:04:e9:38:49:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=484d003dae8133b9a9e28cbc4a1f6b8a03c601a85d28bf5a756657dee2cceb49, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:4b:5a:c8:36:f8:c3:5e:57:e7:3d:6d:31:
ce:e8:97:f1:8b:0f:6c:8d:ba:f0:f0:96:70:10:48:
d0:9e:87:5d:8f:fc:7e:31:58:33:0a:e5:70:6f:b4:
a0:20:29:81:e5:fd:24:d4:8f:56:6d:15:c8:ae:04:
0a:f6:e9:13:f9:11:8c:cb:05:cc:ee:a1:b4:9f:ad:
62:c3:15:4a:84:df:6b:e2:40:34:a1:c1:27:60:e4:
dd:a2:e5:6f:a0:a7:5a:92:74:a5:e3:b3:f0:f9:e0:
de:26:eb:4f:56:e8:96:74:41:6d:17:0b:28:db:11:
b7:bd:4b:f9:11:3f:f8:f9:27:17:f7:1f:73:1b:7f:
cc:bb:00:e7:a6:43:71:8c:87:8c:8c:25:3d:4d:09:
cb:bd:84:90:82:35:fd:36:f7:c0:f0:00:93:64:67:
1f:a4:48:b9:1d:cd:9e:65:cc:95:01:49:08:22:03:
2e:68:71:53:8b:65:6b:92:3d:ad:bf:f9:df:fb:f3:
36:d3:20:ad:d6:86:2c:aa:17:6c:47:08:46:24:89:
4d:41:a4:8e:f7:d8:c4:a1:c9:ad:c1:72:bc:f4:99:
fd:45:fe:62:0b:17:93:ee:a3:69:b7:31:8f:b7:1b:
b6:9a:57:55:d2:c8:33:10:c1:4b:36:d6:ca:ea:c7:
34:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D0:68:1F:4E:AD:E4:0E:58:C6:1C:62:31:E7:6F:65:2D:C8:2B:7D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dcfc889c-2473-471e-91cb-178bc187dee9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.118.0/24
Signature Algorithm: sha256WithRSAEncryption
73:39:10:43:62:2e:d9:52:5d:e2:da:4c:75:f6:fa:c5:ae:74:
2e:a4:b1:27:3b:90:1e:6a:a9:7b:61:3b:12:18:e9:f9:27:61:
ab:cf:15:fd:67:b7:9a:92:74:74:19:d5:b6:3a:ed:ee:de:4e:
57:ae:c9:8e:3b:c4:c7:b3:ee:64:69:ed:77:cb:cd:d6:5f:f0:
29:8b:54:2c:c7:e5:92:49:04:31:4b:03:41:38:ff:20:62:30:
4e:91:3e:53:ae:0a:78:61:ab:6e:98:fa:15:7e:fa:be:31:e6:
77:46:5e:38:58:e1:c0:a4:78:89:09:c3:78:be:36:bc:ec:fa:
56:16:5b:be:9d:9c:8a:e6:64:aa:cc:b2:e8:ea:19:b5:c7:e9:
4e:1b:f1:cb:b5:2b:2f:80:8c:e3:39:5f:ac:32:af:00:7a:47:
5e:16:21:ca:b1:dc:ff:61:6d:0f:7e:01:fc:22:d9:b7:ae:d7:
ff:8a:c9:64:93:2d:06:19:94:fd:c8:7e:81:b5:29:a1:0e:6d:
23:89:6f:87:6a:19:d6:8c:33:bd:5f:da:16:ef:a7:72:ea:94:
98:e9:ef:71:56:cd:6d:cd:49:ab:b3:cd:6a:2d:bd:da:71:14:
1b:fb:7e:9e:c4:76:47:4d:af:d1:83:3f:2c:6a:45:09:e8:e7:
09:1d:dd:4d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULMPQaVzFz0tIGHvUuL+PBOk4SW0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI0MDAwMDAwWhcNMjUwMjI4MjM1OTU5
WjB6MUkwRwYDVQQFE0A0ODRkMDAzZGFlODEzM2I5YTllMjhjYmM0YTFmNmI4YTAz
YzYwMWE4NWQyOGJmNWE3NTY2NTdkZWUyY2NlYjQ5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvtEtayDb4w15X5z1tMc7ol/GLD2yNuvDwlnAQSNCeh12P
/H4xWDMK5XBvtKAgKYHl/STUj1ZtFciuBAr26RP5EYzLBczuobSfrWLDFUqE32vi
QDShwSdg5N2i5W+gp1qSdKXjs/D54N4m609W6JZ0QW0XCyjbEbe9S/kRP/j5Jxf3
H3Mbf8y7AOemQ3GMh4yMJT1NCcu9hJCCNf0298DwAJNkZx+kSLkdzZ5lzJUBSQgi
Ay5ocVOLZWuSPa2/+d/78zbTIK3WhiyqF2xHCEYkiU1BpI732MShya3Bcrz0mf1F
/mILF5Puo2m3MY+3G7aaV1XSyDMQwUs21srqxzR1AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZtBoH06t5A5YxhxiMedvZS3IK30wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2RjZmM4ODljLTI0NzMtNDcxZS05MWNiLTE3OGJjMTg3ZGVlOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABA/HYwDQYJKoZIhvcNAQELBQADggEBAHM5EENiLtlSXeLaTHX2+sWudC6k
sSc7kB5qqXthOxIY6fknYavPFf1nt5qSdHQZ1bY67e7eTleuyY47xMez7mRp7XfL
zdZf8CmLVCzH5ZJJBDFLA0E4/yBiME6RPlOuCnhhq26Y+hV++r4x5ndGXjhY4cCk
eIkJw3i+Nrzs+lYWW76dnIrmZKrMsujqGbXH6U4b8cu1Ky+AjOM5X6wyrwB6R14W
Icqx3P9hbQ9+Afwi2beu1/+KyWSTLQYZlP3IfoG1KaEObSOJb4dqGdaMM71f2hbv
p3LqlJjp73FWzW3NSauzzWotvdpxFBv7fp7EdkdNr9GDPyxqRQno5wkd3U0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:09:22 2025 by rpki-client