Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4beabc7-a32b-43e4-a626-5326ff70b8ff.roa
File: f4beabc7-a32b-43e4-a626-5326ff70b8ff.roa (raw, json)
Hash identifier: UiWTkvZujXVOwtbx5ielQimT+K9UpntWbPpG9s+REYI=
Subject key identifier: 04:CD:55:B3:57:6B:50:0C:33:7C:A7:17:27:E7:54:AE:D8:6C:8E:B8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0677CE3E9718004D529E83F0AA041210294A0016
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4beabc7-a32b-43e4-a626-5326ff70b8ff.roa
Signing time: Fri 28 Mar 2025 00:00:47 +0000
ROA not before: Fri 28 Mar 2025 00:00:47 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.227.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:77:ce:3e:97:18:00:4d:52:9e:83:f0:aa:04:12:10:29:4a:00:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 28 00:00:47 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:69:b3:5d:05:b0:7d:a2:92:cb:27:95:d1:37:
47:f9:04:77:21:70:a5:3f:28:ba:32:bf:a0:eb:83:
b7:b6:95:b7:00:59:9a:88:17:9e:41:c7:2e:b0:59:
bb:0d:bf:af:cb:70:46:0d:19:ab:43:c1:f0:b1:c9:
cb:3e:c5:a2:25:15:6a:68:e4:93:cc:34:1e:89:06:
df:c8:55:fb:a4:82:59:28:e9:a4:2d:ac:b0:ca:05:
a9:21:98:b4:a0:1b:07:d1:29:37:50:8d:a3:c3:00:
a7:c8:1d:1e:d3:b7:f6:45:a2:d7:a9:9b:66:b3:f3:
63:a8:e4:48:3f:8e:d7:3a:1a:9a:6d:ed:2a:58:30:
25:71:dd:40:55:b8:0d:33:54:97:7b:31:b3:f1:e0:
18:92:6e:a5:e7:24:f6:65:7c:59:51:a8:77:d9:b7:
df:db:10:bb:59:0d:4b:b2:35:0a:5f:49:1d:7c:a1:
dc:cb:dc:b6:1e:64:b3:41:17:cc:ff:37:fd:a8:9f:
06:ba:af:06:2e:b2:7c:f4:dc:4d:47:fe:27:55:47:
47:7b:ad:e9:a6:40:b9:3d:79:46:2d:f4:70:68:11:
5f:b3:5f:33:84:86:cb:6b:63:84:f5:09:07:5f:fd:
58:34:c9:a1:72:79:47:ce:e1:a0:ea:bd:17:be:9d:
25:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CD:55:B3:57:6B:50:0C:33:7C:A7:17:27:E7:54:AE:D8:6C:8E:B8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4beabc7-a32b-43e4-a626-5326ff70b8ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.227.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:72:d9:4b:7c:47:f1:c8:21:1b:b9:e6:b8:ca:55:b5:65:11:
2f:2b:c7:b1:94:50:96:81:c6:6c:b7:de:2c:c5:14:78:26:8d:
f7:5d:f3:f3:6a:08:99:21:51:dd:b5:b1:74:46:66:d4:ba:5e:
17:b1:0b:fa:5b:c2:fa:7b:48:41:77:f2:07:92:54:58:b7:75:
0d:fa:89:13:79:29:a9:98:8f:d3:94:15:ba:95:be:87:26:aa:
ce:75:2d:cc:4e:ee:86:6c:b5:a7:45:f3:29:ea:c8:0e:80:00:
2f:26:ca:1f:8f:35:0b:db:25:71:dd:a1:aa:c6:2c:1f:ff:fa:
c8:74:78:74:3e:d3:7c:a0:81:ef:98:d1:71:8a:f8:16:a9:83:
f0:0b:f0:cc:d5:e1:23:33:81:d0:04:9d:34:2e:0d:2d:7d:c1:
6a:09:c2:a5:fa:a7:dc:c2:65:38:be:de:ee:b3:41:5e:71:ca:
f3:6d:cb:78:d7:4b:54:40:56:2b:bc:44:af:d9:31:cb:55:c9:
a3:c8:f4:9b:47:f0:ff:c8:b0:56:8b:da:28:f4:dc:96:06:6f:
2b:ad:de:bc:1e:2a:bb:e7:c3:a8:d7:88:06:55:df:a7:9b:61:
9e:7e:5e:47:32:fe:93:ea:f8:fc:5e:e7:4e:96:b3:a9:be:49:
d9:1e:e1:ca
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUBnfOPpcYAE1SnoPwqgQSEClKABYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MDAwMDQ3WhcNMjUwNTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AxMDY5M2JkYjc2Yzg0MWMwYWEwMWVkNTc3MjA2MWMxZDAz
YWMxZjM0NTgzMGZmNmQ1Zjk0Mzk5ZDI0NDU1NzYwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCeabNdBbB9opLLJ5XRN0f5BHchcKU/KLoyv6Drg7e2lbcA
WZqIF55Bxy6wWbsNv6/LcEYNGatDwfCxycs+xaIlFWpo5JPMNB6JBt/IVfukglko
6aQtrLDKBakhmLSgGwfRKTdQjaPDAKfIHR7Tt/ZFotepm2az82Oo5Eg/jtc6Gppt
7SpYMCVx3UBVuA0zVJd7MbPx4BiSbqXnJPZlfFlRqHfZt9/bELtZDUuyNQpfSR18
odzL3LYeZLNBF8z/N/2onwa6rwYusnz03E1H/idVR0d7remmQLk9eUYt9HBoEV+z
XzOEhstrY4T1CQdf/Vg0yaFyeUfO4aDqvRe+nSWDAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUBM1Vs1drUAwzfKcXJ+dUrthsjrgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y0YmVhYmM3LWEzMmItNDNlNC1hNjI2LTUzMjZmZjcwYjhmZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAP4zANBgkqhkiG9w0BAQsFAAOCAQEAdHLZS3xH8cghG7nmuMpVtWURLyvH
sZRQloHGbLfeLMUUeCaN913z82oImSFR3bWxdEZm1LpeF7EL+lvC+ntIQXfyB5JU
WLd1DfqJE3kpqZiP05QVupW+hyaqznUtzE7uhmy1p0XzKerIDoAALybKH481C9sl
cd2hqsYsH//6yHR4dD7TfKCB75jRcYr4FqmD8AvwzNXhIzOB0ASdNC4NLX3BagnC
pfqn3MJlOL7e7rNBXnHK823LeNdLVEBWK7xEr9kxy1XJo8j0m0fw/8iwVovaKPTc
lgZvK63evB4qu+fDqNeIBlXfp5thnn5eRzL+k+r4/F7nTpazqb5J2R7hyg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:05 2025 by rpki-client