Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/adefc5a5-3ef1-40d9-a5b9-85160a2361dd.roa
File: adefc5a5-3ef1-40d9-a5b9-85160a2361dd.roa (raw, json)
Hash identifier: o8Xmv5zliB1e3DW+9eSed3oU72YRH8RUsPmlJ6Ydj9M=
Subject key identifier: 1E:EA:A7:97:5F:C6:B0:D7:81:2F:22:18:71:C3:1D:41:7D:4D:59:10
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 486455490A6A3A84EE41575EB090658D8B8FB8CD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/adefc5a5-3ef1-40d9-a5b9-85160a2361dd.roa
Signing time: Mon 24 Mar 2025 15:40:21 +0000
ROA not before: Mon 24 Mar 2025 15:40:21 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.230.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:64:55:49:0a:6a:3a:84:ee:41:57:5e:b0:90:65:8d:8b:8f:b8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 24 15:40:21 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:85:f9:b6:76:de:35:ad:85:93:0d:6e:7e:1c:
eb:d7:4f:5c:2f:0c:2e:8c:e8:a2:76:fc:6d:ba:e1:
76:06:76:5d:4b:85:e9:51:47:00:98:ac:74:fe:58:
48:af:1b:50:fd:8f:a4:99:4e:25:42:9d:5e:69:e4:
48:31:c4:11:92:00:e5:4e:cd:1c:6d:0e:fc:1d:49:
00:64:d9:96:21:12:5e:78:c2:7a:84:e6:99:38:69:
7a:0b:89:13:bf:6e:04:75:9d:31:bc:6a:48:b0:87:
fb:99:91:73:0d:8a:c6:e8:01:10:54:96:2d:0c:05:
fe:84:0f:18:37:b3:a1:5c:f2:49:c6:93:31:bc:30:
56:32:44:25:61:7f:09:a1:12:6d:43:e3:50:cc:ad:
3f:61:b0:59:bd:53:7b:95:04:00:f9:56:84:4a:08:
30:80:ee:5d:25:93:13:a6:3c:11:58:5d:f4:5f:d0:
f5:ac:78:96:3c:d8:34:58:d0:80:d5:90:e3:db:0e:
7f:88:7b:dc:b3:3c:7f:37:b3:58:1f:55:bd:d2:d6:
e9:65:54:ad:f6:7d:1c:55:a5:e9:4e:35:36:32:69:
5f:c5:b3:21:6b:6e:5c:5b:f6:9c:c9:f1:9a:4d:08:
a0:52:63:02:28:6e:fe:cf:bf:2b:28:85:57:c4:a1:
a7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EA:A7:97:5F:C6:B0:D7:81:2F:22:18:71:C3:1D:41:7D:4D:59:10
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/adefc5a5-3ef1-40d9-a5b9-85160a2361dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.230.87.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:d9:e9:2f:b3:84:fb:ce:f4:07:ca:98:b0:39:9c:fd:83:5b:
52:91:7d:1b:46:76:c5:60:99:02:97:b2:42:5a:ae:77:5f:c7:
2a:84:3b:3c:3d:8a:7b:a4:dc:1d:d0:94:51:05:dc:46:20:fd:
02:f7:da:05:bf:8c:cd:63:c2:a1:9b:43:d3:16:c3:81:3f:40:
2f:bf:e7:e3:aa:c8:e3:b6:c9:62:5a:9c:af:42:ad:a4:83:2c:
ab:93:45:0e:52:cf:52:b5:e8:16:66:54:80:b1:5d:d1:a4:a0:
82:e1:23:40:74:e4:97:a3:b7:b7:8c:47:80:d5:62:bc:93:8e:
1b:ff:3b:33:81:fa:18:6f:e1:91:87:63:16:04:25:e1:78:a7:
4a:be:f3:b9:2e:a8:1e:49:28:e9:26:3f:ad:c9:61:ad:73:62:
10:f3:08:d4:1a:ec:cd:be:d4:ae:61:e7:0b:3e:e1:35:08:28:
2f:15:9e:fb:af:42:9b:c0:7e:11:0d:2f:9d:e1:53:a1:67:00:
dc:83:3c:e0:6d:0d:1d:38:af:d6:d6:48:63:47:99:a8:77:c6:
3e:e5:26:b0:67:8f:bf:43:22:1a:90:7c:d8:9f:a8:6f:ac:64:
eb:75:0c:50:06:f0:6d:7f:46:dc:f8:2c:e5:8b:de:ec:3b:36:
38:43:76:ce
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSGRVSQpqOoTuQVdesJBljYuPuM0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI0MTU0MDIxWhcNMjUwNDI4MjM1OTU5
WjB6MUkwRwYDVQQFE0A0Mzk5NmQ3MjAxYTI4ZGUzOTU4NjA5YjM2OTc2NDFkZDAw
NWM4YjRjZTZlMzAzZWZlMjg5MTg3M2QwNjkwZjU1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCthfm2dt41rYWTDW5+HOvXT1wvDC6M6KJ2/G264XYGdl1L
helRRwCYrHT+WEivG1D9j6SZTiVCnV5p5EgxxBGSAOVOzRxtDvwdSQBk2ZYhEl54
wnqE5pk4aXoLiRO/bgR1nTG8akiwh/uZkXMNisboARBUli0MBf6EDxg3s6Fc8knG
kzG8MFYyRCVhfwmhEm1D41DMrT9hsFm9U3uVBAD5VoRKCDCA7l0lkxOmPBFYXfRf
0PWseJY82DRY0IDVkOPbDn+Ie9yzPH83s1gfVb3S1ullVK32fRxVpelONTYyaV/F
syFrblxb9pzJ8ZpNCKBSYwIobv7PvysohVfEoaflAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUHuqnl1/GsNeBLyIYccMdQX1NWRAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FkZWZjNWE1LTNlZjEtNDBkOS1hNWI5LTg1MTYwYTIzNjFkZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADY5lcwDQYJKoZIhvcNAQELBQADggEBAKnZ6S+zhPvO9AfKmLA5nP2DW1KR
fRtGdsVgmQKXskJarndfxyqEOzw9inuk3B3QlFEF3EYg/QL32gW/jM1jwqGbQ9MW
w4E/QC+/5+OqyOO2yWJanK9CraSDLKuTRQ5Sz1K16BZmVICxXdGkoILhI0B05Jej
t7eMR4DVYryTjhv/OzOB+hhv4ZGHYxYEJeF4p0q+87kuqB5JKOkmP63JYa1zYhDz
CNQa7M2+1K5h5ws+4TUIKC8VnvuvQpvAfhENL53hU6FnANyDPOBtDR04r9bWSGNH
mah3xj7lJrBnj79DIhqQfNifqG+sZOt1DFAG8G1/Rtz4LOWL3uw7NjhDds4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:03 2025 by rpki-client