Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df685df8-c937-4023-bed8-52f325b9b449.roa
File: df685df8-c937-4023-bed8-52f325b9b449.roa (raw, json)
Hash identifier: 1Fx89Sibj6lT3kyLHOZZdgT2jSwuMg3RNxBTQrdsyNw=
Subject key identifier: 86:E9:F8:BA:0E:09:F9:08:7E:36:48:26:77:AA:FC:7D:2C:F2:F4:DA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 33F8D67A84CDD736867B55D267110B1E20C72158
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df685df8-c937-4023-bed8-52f325b9b449.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.39.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:f8:d6:7a:84:cd:d7:36:86:7b:55:d2:67:11:0b:1e:20:c7:21:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=46089744d987c54b63b2a96b15dc29449937f3cee7ce1769b08656357044504a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:22:34:5f:c0:db:ba:c7:6e:b6:0c:ea:80:ed:
58:76:92:6a:4e:cc:c9:f0:fb:f3:97:58:d0:9a:e4:
1d:2d:81:01:8a:5c:c7:c5:70:bd:a3:44:fd:1a:6b:
bb:a8:77:96:25:5e:70:11:99:fd:e0:71:3b:b8:7c:
ab:d6:18:9b:ea:2c:46:d2:e6:ed:b0:60:a4:67:a6:
e9:ce:36:25:3c:9a:ef:61:f2:e0:51:ac:9f:3a:3a:
78:96:fc:38:fa:ea:59:4a:58:d3:66:bc:86:ea:4f:
26:ff:86:b0:ce:9e:5c:8c:98:af:85:62:b6:81:73:
82:b4:12:05:5e:dc:e2:1f:44:72:ca:54:25:af:e7:
c5:17:d5:df:06:7f:d7:2d:e7:2d:93:45:10:62:87:
3d:02:03:66:f8:e8:77:51:13:48:ae:e3:e3:fb:61:
d1:f1:56:50:41:f6:d8:56:f2:86:66:9f:3d:a3:df:
13:a8:d1:e8:72:8e:d7:83:10:7c:de:ac:24:9b:63:
93:d1:48:6a:d7:39:8a:60:bd:97:e8:02:02:25:60:
a4:f3:b2:b4:ff:9a:95:52:c9:41:0e:14:5a:b7:4c:
42:1a:95:7e:f9:9f:45:65:79:aa:e8:a4:49:d5:36:
ab:13:ad:a9:84:65:f4:1f:f2:d7:6d:24:3c:e1:82:
3c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E9:F8:BA:0E:09:F9:08:7E:36:48:26:77:AA:FC:7D:2C:F2:F4:DA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df685df8-c937-4023-bed8-52f325b9b449.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.39.136.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:0f:60:ef:0e:b5:3a:b8:76:40:59:0f:a7:0a:02:66:4b:f8:
29:b2:2c:3a:b0:a4:06:02:1f:9f:ba:d2:53:73:7d:b3:22:c1:
d7:99:3c:ea:13:df:8e:d7:11:e9:5c:64:86:54:fd:52:85:a0:
69:c4:9a:c6:30:c8:92:d4:4a:5c:91:c1:61:31:a9:e4:18:0e:
dc:c2:33:d2:10:68:49:32:2f:2b:01:77:61:8e:8d:48:03:96:
2a:88:94:b1:45:e5:23:af:80:23:62:78:67:13:6e:62:90:e8:
ab:55:79:f2:a0:32:cc:ac:8b:8b:3f:c7:f6:ab:19:ec:25:d2:
ea:3a:02:c0:81:36:c4:73:8a:2e:38:52:b8:6d:5d:58:48:d2:
10:f7:f4:3b:ea:31:48:dd:dd:00:5c:7d:31:e0:22:96:8f:20:
04:cf:50:d1:ac:9b:46:28:17:d5:b1:d1:d8:ce:e9:f8:6a:df:
61:6f:8a:c2:17:45:6c:93:c5:cf:8b:41:d7:f6:d9:f4:7f:e3:
5e:71:a5:f7:59:22:70:61:f8:ce:6c:c0:7f:e1:09:a5:f9:8b:
7f:ff:e8:75:fa:ff:33:5e:59:a5:5e:ce:db:02:fd:a0:4b:70:
44:88:c4:f9:ed:03:ed:d4:9a:ba:01:6c:57:9e:25:a9:da:b8:
4c:2c:29:41
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUM/jWeoTN1zaGe1XSZxELHiDHIVgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A0NjA4OTc0NGQ5ODdjNTRiNjNiMmE5NmIxNWRjMjk0NDk5
MzdmM2NlZTdjZTE3NjliMDg2NTYzNTcwNDQ1MDRhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxIjRfwNu6x262DOqA7Vh2kmpOzMnw+/OXWNCa5B0tgQGK
XMfFcL2jRP0aa7uod5YlXnARmf3gcTu4fKvWGJvqLEbS5u2wYKRnpunONiU8mu9h
8uBRrJ86OniW/Dj66llKWNNmvIbqTyb/hrDOnlyMmK+FYraBc4K0EgVe3OIfRHLK
VCWv58UX1d8Gf9ct5y2TRRBihz0CA2b46HdRE0iu4+P7YdHxVlBB9thW8oZmnz2j
3xOo0ehyjteDEHzerCSbY5PRSGrXOYpgvZfoAgIlYKTzsrT/mpVSyUEOFFq3TEIa
lX75n0VlearopEnVNqsTramEZfQf8tdtJDzhgjyRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUhun4ug4J+Qh+Nkgmd6r8fSzy9NowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2RmNjg1ZGY4LWM5MzctNDAyMy1iZWQ4LTUyZjMyNWI5YjQ0OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAPYJ4gwDQYJKoZIhvcNAQELBQADggEBAB8PYO8OtTq4dkBZD6cKAmZL+Cmy
LDqwpAYCH5+60lNzfbMiwdeZPOoT347XEelcZIZU/VKFoGnEmsYwyJLUSlyRwWEx
qeQYDtzCM9IQaEkyLysBd2GOjUgDliqIlLFF5SOvgCNieGcTbmKQ6KtVefKgMsys
i4s/x/arGewl0uo6AsCBNsRzii44UrhtXVhI0hD39DvqMUjd3QBcfTHgIpaPIATP
UNGsm0YoF9Wx0djO6fhq32FvisIXRWyTxc+LQdf22fR/415xpfdZInBh+M5swH/h
CaX5i3//6HX6/zNeWaVeztsC/aBLcESIxPntA+3UmroBbFeeJanauEwsKUE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:19 2025 by rpki-client