Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9af42b84-868b-40ae-8b6f-2581ba3cf61d.roa
File: 9af42b84-868b-40ae-8b6f-2581ba3cf61d.roa (raw, json)
Hash identifier: sekhRbDI4vMLjzgaUyrnLjZQxpFqi5YQmHjDFErlTwc=
Subject key identifier: 34:7B:20:0D:FD:4D:41:C2:56:12:18:24:52:5E:BD:F1:48:A7:28:F9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3D18CA7F53D161CFC3DCF4B1A5081E7693BD25C5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9af42b84-868b-40ae-8b6f-2581ba3cf61d.roa
Signing time: Tue 04 Mar 2025 16:51:07 +0000
ROA not before: Tue 04 Mar 2025 16:51:07 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.254.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:18:ca:7f:53:d1:61:cf:c3:dc:f4:b1:a5:08:1e:76:93:bd:25:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 4 16:51:07 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:42:16:ec:ba:7f:39:df:03:9e:6e:0b:e2:a3:
f1:d8:97:50:89:45:b5:ca:4d:06:bb:57:2d:13:80:
75:f9:8b:a0:76:72:5f:81:89:45:87:f2:f8:b5:14:
79:ba:1a:69:86:17:32:d5:18:e7:72:77:51:18:c1:
58:df:e1:20:88:bc:c3:cf:cf:4a:ae:88:8b:f2:df:
5b:a4:4b:35:2c:8a:5b:80:e1:b4:56:cf:f2:22:99:
a4:53:32:0c:9c:cd:49:f8:4d:59:7d:f9:fd:80:ba:
ee:0c:bd:85:6e:dd:7d:77:d9:50:a9:1f:d8:3f:b5:
76:2b:e2:2f:66:2e:49:61:b2:06:f8:e4:23:09:37:
f1:ea:35:13:ea:70:c7:29:56:07:7e:5d:a0:0a:3d:
8c:f5:eb:db:0e:4f:46:cc:d8:28:ae:0b:d3:c6:b6:
bb:59:19:5d:e5:27:16:07:cb:b1:72:6c:05:2c:f0:
1f:15:6c:d1:9f:c4:37:df:a5:bd:df:43:6c:d5:5c:
cf:bc:0f:53:d2:a3:ab:70:5e:56:a4:c5:3b:b2:d1:
98:5a:9c:bc:3b:75:6b:a9:4f:73:10:fc:5d:b5:df:
bc:70:19:e6:7a:da:41:93:76:8b:b7:0c:15:11:dd:
dc:fa:d9:02:e6:ae:11:70:68:8a:0d:c2:ea:fc:f8:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7B:20:0D:FD:4D:41:C2:56:12:18:24:52:5E:BD:F1:48:A7:28:F9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9af42b84-868b-40ae-8b6f-2581ba3cf61d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.254.0.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:d3:0b:e0:c4:8c:93:15:20:ff:d5:66:b0:64:3a:d2:6f:18:
f0:0b:2a:92:10:6e:44:10:4a:64:30:01:85:e7:dc:3a:c6:fc:
bd:3c:93:2c:68:53:df:3f:f5:24:e0:f1:09:35:db:d9:0a:d8:
7c:d5:73:1b:55:7f:8d:1a:e1:cb:8f:54:50:28:42:17:74:d8:
65:97:85:ba:e9:11:58:56:c8:ed:10:fb:40:78:a6:59:c7:1b:
c6:5e:3a:f1:39:b7:fe:2d:95:2a:e7:cc:9f:f6:53:4c:9f:7a:
36:46:ca:34:94:8f:1e:9c:41:46:32:78:a6:ca:04:e9:76:1f:
2c:8e:1f:35:50:d8:76:70:c0:a0:61:09:9d:97:e7:c2:29:4a:
78:a3:11:79:0c:ef:f1:ba:38:71:1d:9d:91:49:ce:ff:d7:1e:
f1:96:25:6f:49:71:a6:01:37:47:36:08:ef:79:68:13:2a:a1:
5b:03:79:43:f3:79:1d:2b:66:f7:29:a4:4c:06:51:03:2a:72:
9a:ce:fe:76:4f:ab:30:87:b0:82:52:c8:08:d9:c7:39:26:4e:
c8:15:18:b0:20:12:2d:a6:41:74:be:77:1f:5c:2e:7a:db:ab:
65:6c:0f:c5:6e:9a:cd:c4:c3:11:bc:ff:57:b4:6c:42:03:91:
52:1b:25:d4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPRjKf1PRYc/D3PSxpQgedpO9JcUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzA0MTY1MTA3WhcNMjUwNDA4MjM1OTU5
WjB6MUkwRwYDVQQFE0AxY2VhOTQ5OWUyMThkMzQyMTYzMDg5NzEzM2E2Nzg3YWY2
YzY1YzkxMDY1NDhlZDc0N2IxOGM2OTY4Y2QyNDM5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDzQhbsun853wOebgvio/HYl1CJRbXKTQa7Vy0TgHX5i6B2
cl+BiUWH8vi1FHm6GmmGFzLVGOdyd1EYwVjf4SCIvMPPz0quiIvy31ukSzUsiluA
4bRWz/IimaRTMgyczUn4TVl9+f2Auu4MvYVu3X132VCpH9g/tXYr4i9mLklhsgb4
5CMJN/HqNRPqcMcpVgd+XaAKPYz169sOT0bM2CiuC9PGtrtZGV3lJxYHy7FybAUs
8B8VbNGfxDffpb3fQ2zVXM+8D1PSo6twXlakxTuy0ZhanLw7dWupT3MQ/F2137xw
GeZ62kGTdou3DBUR3dz62QLmrhFwaIoNwur8+CptAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUNHsgDf1NQcJWEhgkUl698UinKPkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzlhZjQyYjg0LTg2OGItNDBhZS04YjZmLTI1ODFiYTNjZjYxZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMX/gAwDQYJKoZIhvcNAQELBQADggEBAD7TC+DEjJMVIP/VZrBkOtJvGPAL
KpIQbkQQSmQwAYXn3DrG/L08kyxoU98/9STg8Qk129kK2HzVcxtVf40a4cuPVFAo
Qhd02GWXhbrpEVhWyO0Q+0B4plnHG8ZeOvE5t/4tlSrnzJ/2U0yfejZGyjSUjx6c
QUYyeKbKBOl2HyyOHzVQ2HZwwKBhCZ2X58IpSnijEXkM7/G6OHEdnZFJzv/XHvGW
JW9JcaYBN0c2CO95aBMqoVsDeUPzeR0rZvcppEwGUQMqcprO/nZPqzCHsIJSyAjZ
xzkmTsgVGLAgEi2mQXS+dx9cLnrbq2VsD8Vums3EwxG8/1e0bEIDkVIbJdQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:26 2025 by rpki-client