Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cca3dd2e-e256-4ecc-b4fb-b212de3e5681.roa
File: cca3dd2e-e256-4ecc-b4fb-b212de3e5681.roa (raw, json)
Hash identifier: SC4SmUkCn+olrYdALIkBVKj+jqdjOBLeX37wc29+65Q=
Subject key identifier: 2A:73:63:97:01:15:09:FD:15:26:9C:64:FF:01:64:92:75:BC:9E:36
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 543F84C7D6AF5EF6668244790B227DB8E7151F86
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cca3dd2e-e256-4ecc-b4fb-b212de3e5681.roa
Signing time: Sat 15 Mar 2025 00:00:25 +0000
ROA not before: Sat 15 Mar 2025 00:00:25 +0000
ROA not after: Sat 19 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.215.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:3f:84:c7:d6:af:5e:f6:66:82:44:79:0b:22:7d:b8:e7:15:1f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 15 00:00:25 2025 GMT
Not After : Apr 19 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:98:a4:eb:15:a0:0e:03:fa:11:88:f4:74:
85:0e:5d:88:36:8b:19:16:26:e1:82:86:00:f2:b6:
03:be:be:6d:8c:17:6e:d6:5a:b2:3e:db:97:89:bd:
5f:2a:ba:6d:01:8c:d3:0b:f4:51:72:70:d9:6c:8d:
94:30:08:a4:d2:1a:ce:7d:d4:0b:c8:50:9a:3b:06:
1f:49:8d:2e:0f:a5:29:8a:16:07:03:07:2d:ef:f4:
42:2f:01:d3:0d:2e:45:26:0e:3a:bd:ae:28:3a:8e:
8e:38:7a:0b:7e:37:2f:df:1f:a2:b6:15:20:36:06:
9c:e2:47:3e:a2:93:d1:21:37:a4:3c:36:fe:fe:f6:
59:92:44:74:3d:ba:9c:93:05:e4:2f:d9:12:9a:55:
65:16:6e:1e:84:0e:dc:b4:b3:76:3a:77:2c:c3:a6:
3b:3d:35:c8:de:86:bb:c4:5c:3b:82:81:4f:be:4a:
ae:45:98:7e:4c:02:3c:79:2d:4a:43:20:ae:8b:69:
3e:73:29:31:01:89:57:81:86:4e:39:8c:0d:2e:a6:
0e:2f:48:44:8b:78:41:f0:f1:88:41:1a:24:1c:59:
36:4e:9a:c3:8a:32:f5:0f:59:49:61:e7:1d:88:7d:
68:90:b3:15:52:ee:7c:aa:ac:2b:9f:95:d8:1d:d3:
14:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:73:63:97:01:15:09:FD:15:26:9C:64:FF:01:64:92:75:BC:9E:36
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cca3dd2e-e256-4ecc-b4fb-b212de3e5681.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.215.128.0/17
Signature Algorithm: sha256WithRSAEncryption
d7:c4:9f:da:d3:70:f5:a3:6f:12:cd:9e:05:3a:34:b5:8d:16:
62:3c:d9:41:0c:c5:ac:2d:5d:49:15:22:05:e6:eb:6f:20:3f:
bd:57:1e:7c:8d:e7:1a:19:8f:68:46:e2:e5:09:8d:52:1c:fe:
8e:40:cb:d9:92:e2:81:5d:79:d2:b4:e4:59:c4:9f:15:89:e4:
16:5d:6c:53:2a:5e:0d:16:a5:75:25:2d:36:4e:63:6c:7f:f4:
93:72:c4:45:f3:6d:e4:53:a6:75:98:38:a2:f2:19:a9:06:04:
84:49:9e:06:36:0c:58:c6:cc:54:06:1b:85:20:d3:72:88:f5:
93:d9:be:5b:bd:11:b4:03:3b:74:54:ae:64:82:2a:7e:7c:6a:
02:ed:50:46:8d:f1:4f:ee:e3:b5:7c:37:9a:03:df:77:37:c1:
c4:40:7c:63:64:37:c8:cf:81:48:77:e8:05:5e:61:49:c9:b4:
b6:70:34:86:99:7b:1d:aa:1c:2d:58:ed:4f:09:24:7f:0b:81:
6b:e5:85:17:6c:10:5b:57:05:f4:2e:1a:f0:f0:b6:4e:ce:13:
4a:7a:03:79:dc:71:9e:d9:56:7c:98:71:71:48:c2:60:b6:98:
13:49:cb:0e:79:08:cf:9a:17:4c:c8:f4:07:5e:2e:96:b5:0d:
f6:aa:51:f1
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVD+Ex9avXvZmgkR5CyJ9uOcVH4YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE1MDAwMDI1WhcNMjUwNDE5MjM1OTU5
WjB6MUkwRwYDVQQFE0A3ODJmNWNlMjM3ZGNjNzA1YWY4NTg2MGMyMzU5NWVmYWU0
NzZhMmE5ZTNjZjU0YmJmYjA4ZGI0ZmFhZTI2YTM4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC+NJik6xWgDgP6EYj0dIUOXYg2ixkWJuGChgDytgO+vm2M
F27WWrI+25eJvV8qum0BjNML9FFycNlsjZQwCKTSGs591AvIUJo7Bh9JjS4PpSmK
FgcDBy3v9EIvAdMNLkUmDjq9rig6jo44egt+Ny/fH6K2FSA2BpziRz6ik9EhN6Q8
Nv7+9lmSRHQ9upyTBeQv2RKaVWUWbh6EDty0s3Y6dyzDpjs9NcjehrvEXDuCgU++
Sq5FmH5MAjx5LUpDIK6LaT5zKTEBiVeBhk45jA0upg4vSESLeEHw8YhBGiQcWTZO
msOKMvUPWUlh5x2IfWiQsxVS7nyqrCufldgd0xTRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUKnNjlwEVCf0VJpxk/wFkknW8njYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NjYTNkZDJlLWUyNTYtNGVjYy1iNGZiLWIyMTJkZTNlNTY4MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAfY14AwDQYJKoZIhvcNAQELBQADggEBANfEn9rTcPWjbxLNngU6NLWNFmI8
2UEMxawtXUkVIgXm628gP71XHnyN5xoZj2hG4uUJjVIc/o5Ay9mS4oFdedK05FnE
nxWJ5BZdbFMqXg0WpXUlLTZOY2x/9JNyxEXzbeRTpnWYOKLyGakGBIRJngY2DFjG
zFQGG4Ug03KI9ZPZvlu9EbQDO3RUrmSCKn58agLtUEaN8U/u47V8N5oD33c3wcRA
fGNkN8jPgUh36AVeYUnJtLZwNIaZex2qHC1Y7U8JJH8LgWvlhRdsEFtXBfQuGvDw
tk7OE0p6A3nccZ7ZVnyYcXFIwmC2mBNJyw55CM+aF0zI9AdeLpa1DfaqUfE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:07 2025 by rpki-client