Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3672d2f1-7991-40bd-afef-9cfaf5207b96.roa
File: 3672d2f1-7991-40bd-afef-9cfaf5207b96.roa (raw, json)
Hash identifier: Bz1M7yyxEFdvR4HagjF1wx5bE5YGDrHy56lXz4MmhG0=
Subject key identifier: A2:0D:4E:57:82:ED:36:7A:88:46:B3:3A:40:23:33:33:64:D6:D5:5F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4F985F21AC24263908BDE4BC9AB40C1D9241A3D2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3672d2f1-7991-40bd-afef-9cfaf5207b96.roa
Signing time: Sat 15 Mar 2025 00:41:21 +0000
ROA not before: Sat 15 Mar 2025 00:41:21 +0000
ROA not after: Sat 19 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 96.0.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:98:5f:21:ac:24:26:39:08:bd:e4:bc:9a:b4:0c:1d:92:41:a3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 15 00:41:21 2025 GMT
Not After : Apr 19 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e3:ec:c8:dc:a9:49:b1:9f:59:87:5b:2c:a3:
26:bc:1b:20:99:93:56:81:17:d2:b3:44:37:0d:43:
46:c8:a4:06:73:ec:9f:d3:a3:42:f1:89:49:5a:2d:
5e:02:6d:7b:3a:14:a8:95:3f:2d:00:c1:2e:21:f8:
85:d4:13:db:7f:34:48:e1:dd:a7:73:f6:7b:6d:67:
12:6f:ca:f6:cd:25:8a:69:d5:ac:00:2d:05:2d:e9:
d3:00:97:d9:15:8f:26:63:b8:0a:84:2e:c8:ae:10:
a1:b6:62:04:66:06:47:8a:fb:b6:9a:63:d6:5b:f0:
ad:2e:a1:63:cc:5f:d8:32:bb:1b:5f:a7:9f:c7:92:
df:aa:43:2f:60:6e:88:0a:d0:d6:5c:06:a6:38:57:
65:72:ea:3b:ab:ef:ad:b0:d5:53:37:25:91:63:3e:
81:71:20:e2:b3:de:62:95:75:2d:1e:f4:a7:37:06:
ed:37:cb:83:52:16:d4:c8:73:f4:f9:bd:ae:a9:12:
de:cf:2d:02:2b:c7:47:91:0b:cb:57:a8:20:b3:29:
aa:a4:2e:ed:ca:12:3b:a8:34:6d:a2:14:aa:72:e2:
92:32:98:59:ed:3f:5d:24:f9:e9:4d:63:85:a9:93:
b8:e6:78:a7:2b:ee:ad:bd:26:85:13:3d:d0:1a:51:
ac:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0D:4E:57:82:ED:36:7A:88:46:B3:3A:40:23:33:33:64:D6:D5:5F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3672d2f1-7991-40bd-afef-9cfaf5207b96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.0.96.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:7c:d9:68:c0:c3:40:8e:5f:a2:79:63:4e:93:a6:6f:b6:c5:
a9:fa:e2:91:ff:e0:8b:92:aa:d0:0b:b4:11:5b:d3:00:13:9c:
32:c7:13:6b:6f:a4:6e:ab:a7:10:8b:b5:94:b4:20:25:19:72:
ca:d5:19:ee:14:54:d4:64:37:2f:56:47:b7:94:02:89:13:c1:
f0:58:47:0a:6b:f6:da:34:42:6f:03:66:6b:10:3f:f6:47:76:
75:d2:85:c4:0d:d2:86:cc:38:05:fb:8d:ad:bf:25:20:20:b4:
32:ba:0a:69:2b:10:e8:26:d6:01:54:2f:a1:57:5d:a8:73:ad:
0a:ff:59:7b:20:79:3b:7f:ab:31:91:49:29:e1:6b:db:6c:53:
ed:df:87:71:a3:a3:8c:40:12:91:0c:2a:28:7b:45:6d:9c:d4:
7f:31:db:25:a4:c0:01:a6:79:ea:fd:3b:1d:2f:4d:56:d2:d6:
d0:f9:0b:65:b4:6f:6f:58:d9:d9:d5:51:d3:38:53:e9:32:e7:
0a:8e:5a:0e:4c:25:64:98:32:3c:88:51:3b:8b:57:c2:ad:fa:
c6:e8:c8:14:97:38:3d:cf:99:c8:5c:79:02:4e:f8:e1:7b:6b:
57:39:45:bf:df:ff:02:d9:74:c4:94:a5:41:2e:e3:0f:4f:04:
d4:f9:d1:b3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUT5hfIawkJjkIveS8mrQMHZJBo9IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE1MDA0MTIxWhcNMjUwNDE5MjM1OTU5
WjB6MUkwRwYDVQQFE0A5Y2M3MmZhYWIwM2M4YzdkOTVmYWJkYjI3Zjk2MTUwM2Rk
MzJiZWNkOWFjNjFjNDIxNjM3YTkwMWUyNGI1Y2I0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDD4+zI3KlJsZ9Zh1ssoya8GyCZk1aBF9KzRDcNQ0bIpAZz
7J/To0LxiUlaLV4CbXs6FKiVPy0AwS4h+IXUE9t/NEjh3adz9nttZxJvyvbNJYpp
1awALQUt6dMAl9kVjyZjuAqELsiuEKG2YgRmBkeK+7aaY9Zb8K0uoWPMX9gyuxtf
p5/Hkt+qQy9gbogK0NZcBqY4V2Vy6jur762w1VM3JZFjPoFxIOKz3mKVdS0e9Kc3
Bu03y4NSFtTIc/T5va6pEt7PLQIrx0eRC8tXqCCzKaqkLu3KEjuoNG2iFKpy4pIy
mFntP10k+elNY4Wpk7jmeKcr7q29JoUTPdAaUawlAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUog1OV4LtNnqIRrM6QCMzM2TW1V8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzM2NzJkMmYxLTc5OTEtNDBiZC1hZmVmLTljZmFmNTIwN2I5Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJgAGAwDQYJKoZIhvcNAQELBQADggEBAJp82WjAw0COX6J5Y06Tpm+2xan6
4pH/4IuSqtALtBFb0wATnDLHE2tvpG6rpxCLtZS0ICUZcsrVGe4UVNRkNy9WR7eU
AokTwfBYRwpr9to0Qm8DZmsQP/ZHdnXShcQN0obMOAX7ja2/JSAgtDK6CmkrEOgm
1gFUL6FXXahzrQr/WXsgeTt/qzGRSSnha9tsU+3fh3Gjo4xAEpEMKih7RW2c1H8x
2yWkwAGmeer9Ox0vTVbS1tD5C2W0b29Y2dnVUdM4U+ky5wqOWg5MJWSYMjyIUTuL
V8Kt+sboyBSXOD3PmchceQJO+OF7a1c5Rb/f/wLZdMSUpUEu4w9PBNT50bM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:21:46 2025 by rpki-client