Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f026282-f10b-4ef5-906c-37599d97fc01.roa
File: 6f026282-f10b-4ef5-906c-37599d97fc01.roa (raw, json)
Hash identifier: s6PgzZDYX4jD+/wsZHs4A6nkXqSTdB1A1NNpiE+hmV0=
Subject key identifier: EA:CF:5C:74:01:1E:7D:DE:F5:1C:85:E2:BB:D1:7B:D9:64:BB:ED:2A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 55219F5A90B619A08194CAD7DEE6C0817703527A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f026282-f10b-4ef5-906c-37599d97fc01.roa
Signing time: Fri 21 Mar 2025 00:40:20 +0000
ROA not before: Fri 21 Mar 2025 00:40:20 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:21:9f:5a:90:b6:19:a0:81:94:ca:d7:de:e6:c0:81:77:03:52:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 21 00:40:20 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:20:25:1b:3d:bc:15:77:29:44:a7:95:13:f7:
de:8f:64:eb:4d:a2:34:de:57:dd:11:6f:8e:b3:a4:
8a:33:52:00:43:b2:8a:9f:e2:c8:2c:1b:3b:48:26:
6b:97:d2:ea:c2:7b:27:8a:70:53:78:88:ec:79:6b:
e6:ea:8f:5a:77:74:10:1e:a1:b1:fd:ec:6d:51:99:
4e:bb:2d:94:d4:72:24:51:d9:e9:ab:40:75:e1:ac:
58:d4:18:45:2a:d6:d6:52:e6:7d:c6:22:2a:e6:de:
e6:c7:8a:97:3f:2f:73:46:f2:40:d8:0a:33:b9:79:
d8:5f:e1:98:93:53:36:f5:83:07:9b:71:7a:81:de:
25:a0:a0:ea:cb:2c:1f:94:92:44:fd:48:fc:7b:a5:
f5:57:d7:f3:28:00:23:b2:1b:91:95:1c:02:bf:3e:
34:ca:67:24:f6:3a:d5:90:a1:47:be:c8:28:a6:e6:
e1:57:60:d9:bb:25:ba:b3:e2:36:5b:05:7d:8c:1a:
1f:3a:36:5f:03:77:43:a7:fe:d0:6b:7a:52:59:43:
db:31:43:68:4e:cd:cb:10:f3:3f:8e:4f:28:2e:cf:
d3:b6:fc:34:5b:52:7d:a3:34:ae:68:4b:6c:f4:c8:
18:c4:1a:11:30:8e:fc:4b:cb:43:66:53:48:12:d3:
17:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CF:5C:74:01:1E:7D:DE:F5:1C:85:E2:BB:D1:7B:D9:64:BB:ED:2A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f026282-f10b-4ef5-906c-37599d97fc01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.160.0/21
Signature Algorithm: sha256WithRSAEncryption
18:9c:84:22:a6:84:f7:89:67:4e:05:0d:42:3c:26:5e:b1:10:
b2:ce:37:cb:6f:49:6e:20:59:7f:e7:85:6f:84:b6:52:61:00:
15:5a:a1:66:c7:19:7b:8a:05:b9:60:bc:8e:00:08:60:a1:11:
7c:a7:0b:f4:8a:ec:b9:63:21:c8:6a:01:f9:b3:6c:7a:5c:a8:
87:07:63:87:79:e6:d1:f7:15:e8:c5:41:b9:4c:74:a6:80:ff:
a8:bb:32:f3:9e:2a:fb:59:ac:65:6d:ec:bc:e3:fe:b5:3d:e2:
5e:63:87:82:1a:7d:12:bf:3a:a3:dd:4e:51:4d:7a:71:99:35:
2e:ea:2b:14:62:37:26:db:38:99:c9:2a:97:9c:a9:1e:0c:0b:
d1:d0:1c:20:4a:53:bc:32:a8:02:b7:a8:a2:0e:c6:c5:ff:13:
57:4f:e6:3c:64:4f:31:f7:16:84:49:24:55:b5:90:ce:81:91:
ea:47:16:50:9d:cc:76:36:19:88:d5:d2:27:14:b1:74:63:ce:
4e:95:30:93:6b:62:99:e1:8e:85:c1:35:a1:f9:15:9b:75:b3:
08:61:72:75:87:59:b3:18:cb:ba:f9:6b:41:80:92:17:2c:fe:
52:43:95:86:0e:25:a6:ed:9f:1a:83:ab:e3:cd:cf:2f:24:3a:
3f:18:98:cd
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVSGfWpC2GaCBlMrX3ubAgXcDUnowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzIxMDA0MDIwWhcNMjUwNDI1MjM1OTU5
WjB6MUkwRwYDVQQFE0AwMWM5Mzc4ZDIxZTI0MTY5YjJlYjc0MDIzYTg3Mzg2YjZj
YzNjM2NlOGUwY2E1MGU5Mjc2OTc5Y2ZlNzc5YjFiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDMICUbPbwVdylEp5UT996PZOtNojTeV90Rb46zpIozUgBD
soqf4sgsGztIJmuX0urCeyeKcFN4iOx5a+bqj1p3dBAeobH97G1RmU67LZTUciRR
2emrQHXhrFjUGEUq1tZS5n3GIirm3ubHipc/L3NG8kDYCjO5edhf4ZiTUzb1gweb
cXqB3iWgoOrLLB+UkkT9SPx7pfVX1/MoACOyG5GVHAK/PjTKZyT2OtWQoUe+yCim
5uFXYNm7Jbqz4jZbBX2MGh86Nl8Dd0On/tBrelJZQ9sxQ2hOzcsQ8z+OTyguz9O2
/DRbUn2jNK5oS2z0yBjEGhEwjvxLy0NmU0gS0xc9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU6s9cdAEefd71HIXiu9F72WS77SowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZmMDI2MjgyLWYxMGItNGVmNS05MDZjLTM3NTk5ZDk3ZmMwMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANjl6AwDQYJKoZIhvcNAQELBQADggEBABichCKmhPeJZ04FDUI8Jl6xELLO
N8tvSW4gWX/nhW+EtlJhABVaoWbHGXuKBblgvI4ACGChEXynC/SK7LljIchqAfmz
bHpcqIcHY4d55tH3FejFQblMdKaA/6i7MvOeKvtZrGVt7Lzj/rU94l5jh4IafRK/
OqPdTlFNenGZNS7qKxRiNybbOJnJKpecqR4MC9HQHCBKU7wyqAK3qKIOxsX/E1dP
5jxkTzH3FoRJJFW1kM6BkepHFlCdzHY2GYjV0icUsXRjzk6VMJNrYpnhjoXBNaH5
FZt1swhhcnWHWbMYy7r5a0GAkhcs/lJDlYYOJabtnxqDq+PNzy8kOj8YmM0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:11 2025 by rpki-client