Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16b78eb9-3900-423b-9232-5f508710c51b.roa
File: 16b78eb9-3900-423b-9232-5f508710c51b.roa (raw, json)
Hash identifier: 2vcgGEnzyo3BXbaRBNUtjwbessCFZZLlefaj9Eqn4+M=
Subject key identifier: DA:90:7E:D3:17:B3:46:F9:95:9B:71:40:0C:B3:4C:F4:CD:BC:B5:39
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 66E9D710DB48786C852AD3F8C1B624624056E3C9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16b78eb9-3900-423b-9232-5f508710c51b.roa
Signing time: Sat 15 Mar 2025 00:31:36 +0000
ROA not before: Sat 15 Mar 2025 00:31:36 +0000
ROA not after: Sat 19 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:e9:d7:10:db:48:78:6c:85:2a:d3:f8:c1:b6:24:62:40:56:e3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 15 00:31:36 2025 GMT
Not After : Apr 19 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:db:0c:0b:55:06:2d:1a:3b:f2:65:ee:c3:43:
e0:90:86:9f:78:e7:41:ae:7d:74:64:12:87:21:ea:
34:42:b0:c4:e5:72:fc:d0:a5:be:c0:94:0c:53:d4:
a9:e9:84:2d:c6:cb:d2:50:0d:de:ec:52:83:aa:ff:
02:83:25:a9:62:28:7c:3a:ce:af:36:fd:57:34:1b:
1d:d5:ea:e5:7e:d0:b9:28:0d:17:a2:bb:87:cb:a4:
54:cb:66:0f:6c:bd:59:cf:d9:ad:08:9f:88:1c:91:
18:7a:f0:52:fe:2d:3d:e0:ac:29:68:f9:78:53:b2:
07:1f:91:90:5d:52:ba:e6:be:d5:43:03:45:66:e2:
57:ad:87:2a:a1:b0:ad:c3:a9:e5:d9:07:a7:50:aa:
a4:ec:4b:a8:fd:ae:0f:bd:ab:1f:2f:91:15:fb:bf:
4a:06:b8:6a:34:b1:54:ab:af:d0:1f:5e:56:4e:f0:
86:99:61:dd:70:b8:ff:7c:7e:50:2a:ae:24:d8:41:
82:4e:9a:96:c4:b6:4d:11:ce:25:d2:de:6b:94:a0:
68:0e:a6:d3:a6:5f:14:5a:78:20:84:e4:6b:18:14:
24:89:6a:90:09:89:4b:db:a2:f7:0e:2d:42:af:19:
89:d2:90:53:7f:6d:f8:ab:7d:d7:0c:7a:e2:5e:f0:
6f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:90:7E:D3:17:B3:46:F9:95:9B:71:40:0C:B3:4C:F4:CD:BC:B5:39
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16b78eb9-3900-423b-9232-5f508710c51b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.107.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:82:f4:4a:60:f6:10:e6:d0:72:45:a6:d2:6d:7d:54:ff:b7:
b2:39:4f:b6:08:a7:ef:73:7e:b5:56:7b:20:87:f1:bb:06:45:
5b:56:97:2f:fa:73:2b:20:6d:ac:d5:b6:ca:94:f8:27:3e:6a:
75:ab:96:80:ce:77:7d:de:8b:46:1f:c4:fb:f0:dd:8e:41:df:
2d:54:1f:a7:e9:3a:4f:9d:48:82:e4:18:41:0a:d7:df:35:34:
b8:e4:14:3b:a0:ed:76:45:24:54:e0:0d:85:30:4b:03:e6:1e:
05:f6:16:7f:6d:28:45:71:fe:01:51:99:54:32:62:31:7b:45:
00:b2:9c:32:d2:26:af:89:ba:67:d9:9b:d5:19:cd:7b:7b:ca:
43:d3:e7:b7:cf:2d:69:8a:cc:63:e3:6f:0e:e8:31:c7:87:47:
25:a6:83:3d:d7:8e:f9:85:28:43:1d:fa:15:74:ff:6b:ae:7f:
f8:12:c6:c5:19:88:4b:15:eb:19:c8:c9:46:58:bf:d0:eb:fc:
2f:aa:69:0a:b2:00:e9:e6:2e:a9:22:ce:bb:5b:81:ca:5c:95:
eb:81:93:c7:83:f9:d5:33:0d:f1:91:fc:ec:10:1e:24:7f:68:
1a:57:33:17:71:00:7c:fe:4d:43:b4:fd:33:b3:68:e4:36:97:
78:ac:d8:02
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZunXENtIeGyFKtP4wbYkYkBW48kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE1MDAzMTM2WhcNMjUwNDE5MjM1OTU5
WjB6MUkwRwYDVQQFE0BhNjRjZDdlNjZjN2ZmOTFhNzg0ZjE3MWU4OWJjZTA1MTg3
Mzg1OGY5OTA4MTU2ODZjODJhOGUyMmQ1NWI0ZDQzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCG2wwLVQYtGjvyZe7DQ+CQhp9450GufXRkEoch6jRCsMTl
cvzQpb7AlAxT1KnphC3Gy9JQDd7sUoOq/wKDJaliKHw6zq82/Vc0Gx3V6uV+0Lko
DReiu4fLpFTLZg9svVnP2a0In4gckRh68FL+LT3grClo+XhTsgcfkZBdUrrmvtVD
A0Vm4lethyqhsK3DqeXZB6dQqqTsS6j9rg+9qx8vkRX7v0oGuGo0sVSrr9AfXlZO
8IaZYd1wuP98flAqriTYQYJOmpbEtk0RziXS3muUoGgOptOmXxRaeCCE5GsYFCSJ
apAJiUvbovcOLUKvGYnSkFN/bfirfdcMeuJe8G8rAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU2pB+0xezRvmVm3FADLNM9M28tTkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE2Yjc4ZWI5LTM5MDAtNDIzYi05MjMyLTVmNTA4NzEwYzUxYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABA/GswDQYJKoZIhvcNAQELBQADggEBANWC9Epg9hDm0HJFptJtfVT/t7I5
T7YIp+9zfrVWeyCH8bsGRVtWly/6cysgbazVtsqU+Cc+anWrloDOd33ei0YfxPvw
3Y5B3y1UH6fpOk+dSILkGEEK1981NLjkFDug7XZFJFTgDYUwSwPmHgX2Fn9tKEVx
/gFRmVQyYjF7RQCynDLSJq+JumfZm9UZzXt7ykPT57fPLWmKzGPjbw7oMceHRyWm
gz3XjvmFKEMd+hV0/2uuf/gSxsUZiEsV6xnIyUZYv9Dr/C+qaQqyAOnmLqkizrtb
gcpcleuBk8eD+dUzDfGR/OwQHiR/aBpXMxdxAHz+TUO0/TOzaOQ2l3is2AI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:45 2025 by rpki-client