Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e83772b-20e7-44cd-b060-03d5950ee025.roa
File: 5e83772b-20e7-44cd-b060-03d5950ee025.roa (raw, json)
Hash identifier: 3EmxReXbwr7dfwT3JqWOQrTjftMLAdPmcxtNWwEYJuQ=
Subject key identifier: 4C:ED:DD:57:1D:4E:A5:9A:FD:1D:22:DF:71:44:17:D9:69:68:3E:44
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7C739B25579025E6588530E98F8337B1EF334F05
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e83772b-20e7-44cd-b060-03d5950ee025.roa
Signing time: Mon 10 Mar 2025 15:11:23 +0000
ROA not before: Mon 10 Mar 2025 15:11:23 +0000
ROA not after: Mon 14 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.149.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:73:9b:25:57:90:25:e6:58:85:30:e9:8f:83:37:b1:ef:33:4f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 10 15:11:23 2025 GMT
Not After : Apr 14 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c8:f2:93:1e:0e:90:7e:2f:46:af:ea:c3:62:
26:ad:d6:32:c5:3b:c7:66:21:1b:57:f2:af:a2:1c:
d5:fc:f4:09:7e:d5:76:04:a7:bf:a0:6f:4c:2d:f6:
fe:15:94:1f:0a:46:6e:6d:3b:f1:a3:7e:3c:c1:fe:
b5:31:84:f9:0b:65:18:7c:99:36:ab:08:55:6b:89:
b8:e7:24:a4:2a:7b:2d:c4:82:dd:50:76:9f:e9:e7:
2d:af:e0:cd:31:53:ab:22:56:a4:04:1b:80:1a:83:
a7:a6:ce:d4:f3:22:0c:d0:32:bd:c7:1b:fb:57:1c:
a6:34:66:e5:bc:d1:34:ee:a7:10:f8:78:b7:d4:69:
ce:05:0d:a8:eb:37:a9:69:09:98:28:6d:66:07:02:
d3:59:56:78:d4:29:90:60:ef:ff:98:3a:01:90:16:
d4:9b:d3:ce:5a:46:17:51:41:04:24:65:26:76:36:
14:5c:f6:c8:16:17:6e:72:b9:ed:81:70:c9:f2:15:
49:b4:91:ea:02:8c:0d:5e:76:6f:bc:43:17:70:36:
d6:8a:34:bd:e5:2f:74:71:46:37:cf:98:eb:c0:4e:
f8:10:ac:79:2f:65:66:4e:dd:6c:a2:fb:65:f2:48:
63:e6:71:40:46:76:cc:09:e6:82:c6:db:24:dc:55:
97:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:ED:DD:57:1D:4E:A5:9A:FD:1D:22:DF:71:44:17:D9:69:68:3E:44
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e83772b-20e7-44cd-b060-03d5950ee025.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.149.0.0/16
Signature Algorithm: sha256WithRSAEncryption
98:cd:47:7d:fa:ac:d1:83:ed:c9:98:71:40:c5:ec:6a:97:eb:
15:70:65:72:70:ff:42:e3:bb:89:c5:80:6d:3c:d1:2d:49:61:
5b:1b:42:bb:a4:c0:1a:ab:5f:fa:c0:d9:a1:86:2e:23:69:a7:
56:33:cb:9a:c4:33:9f:f7:89:6c:97:b2:1a:21:04:3e:4f:1c:
09:33:e1:d0:a5:b9:a7:35:e0:58:ae:2c:b4:f9:a3:2a:13:23:
18:77:c0:03:13:fa:88:62:4a:a2:f7:30:11:df:e0:04:37:18:
a5:2a:0f:b9:6a:2d:39:28:86:09:39:f4:29:ae:34:2f:68:84:
06:6d:87:9d:94:fe:36:c8:6d:a9:dd:1f:f3:65:98:b2:53:bd:
49:6e:fa:cb:ae:7a:5f:56:46:a3:25:b0:97:03:61:ce:bb:9b:
ba:1a:57:37:ec:1c:54:f5:43:bd:fe:45:ee:86:ed:1d:11:f2:
58:fd:c8:ab:4a:25:ec:0f:59:f9:dc:7b:7a:31:e2:04:64:7b:
d4:f7:7d:7b:b5:4f:db:86:ad:75:53:7f:45:f9:1a:00:ca:c1:
24:ce:09:32:a1:52:26:78:93:1c:0c:83:b0:1e:a7:a5:fe:81:
94:0e:11:d4:62:64:d9:2c:f2:f5:b2:8e:df:b1:47:7e:09:04:
1f:43:32:e2
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUfHObJVeQJeZYhTDpj4M3se8zTwUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzEwMTUxMTIzWhcNMjUwNDE0MjM1OTU5
WjB6MUkwRwYDVQQFE0AwNTQ2ZWExYWFjYmUzMzRkZDkwNzc1MWEwMzJlODZmMTRh
OWI2NmEzNTA5MTJmNDc5NDkwMjA0NDhkMDY5NjFmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDGyPKTHg6Qfi9Gr+rDYiat1jLFO8dmIRtX8q+iHNX89Al+
1XYEp7+gb0wt9v4VlB8KRm5tO/GjfjzB/rUxhPkLZRh8mTarCFVribjnJKQqey3E
gt1Qdp/p5y2v4M0xU6siVqQEG4Aag6emztTzIgzQMr3HG/tXHKY0ZuW80TTupxD4
eLfUac4FDajrN6lpCZgobWYHAtNZVnjUKZBg7/+YOgGQFtSb085aRhdRQQQkZSZ2
NhRc9sgWF25yue2BcMnyFUm0keoCjA1edm+8QxdwNtaKNL3lL3RxRjfPmOvATvgQ
rHkvZWZO3Wyi+2XySGPmcUBGdswJ5oLG2yTcVZedAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUTO3dVx1OpZr9HSLfcUQX2WloPkQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVlODM3NzJiLTIwZTctNDRjZC1iMDYwLTAzZDU5NTBlZTAyNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4lTANBgkqhkiG9w0BAQsFAAOCAQEAmM1Hffqs0YPtyZhxQMXsapfrFXBl
cnD/QuO7icWAbTzRLUlhWxtCu6TAGqtf+sDZoYYuI2mnVjPLmsQzn/eJbJeyGiEE
Pk8cCTPh0KW5pzXgWK4stPmjKhMjGHfAAxP6iGJKovcwEd/gBDcYpSoPuWotOSiG
CTn0Ka40L2iEBm2HnZT+Nshtqd0f82WYslO9SW76y656X1ZGoyWwlwNhzrubuhpX
N+wcVPVDvf5F7obtHRHyWP3Iq0ol7A9Z+dx7ejHiBGR71Pd9e7VP24atdVN/Rfka
AMrBJM4JMqFSJniTHAyDsB6npf6BlA4R1GJk2Szy9bKO37FHfgkEH0My4g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:39 2025 by rpki-client