Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e7ffe27-bb9f-402e-8f90-08945a4d91ee.roa
File: 2e7ffe27-bb9f-402e-8f90-08945a4d91ee.roa (raw, json)
Hash identifier: SUGRz6q9F0lHT7i3PktOhsmK+52k3LzBt0WwuzcsEv0=
Subject key identifier: 60:29:69:CA:D9:84:C8:9E:CE:EC:13:84:C7:FB:11:4F:D4:70:40:6E
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 64092B382CA5177738E3C3CBB83515BC08048BC3
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e7ffe27-bb9f-402e-8f90-08945a4d91ee.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da36:6000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:09:2b:38:2c:a5:17:77:38:e3:c3:cb:b8:35:15:bc:08:04:8b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=08f6e03f141099112324681e3b174967585dc3735e92f2c35c07adb2e41fcacf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:67:86:53:88:37:89:6f:a2:73:e6:e7:10:
42:18:01:22:46:16:8c:e5:12:b0:e4:e6:b8:78:a6:
65:c3:0b:36:39:44:16:fc:b9:bb:a7:1a:12:88:e4:
07:69:21:d0:d4:31:a2:11:de:0a:91:10:3c:b5:16:
03:a7:7f:bc:5d:b7:49:31:9a:da:a6:cf:45:d3:99:
db:ef:c2:3a:a0:f6:8a:2f:59:2e:89:9f:7c:95:57:
dc:7a:6b:87:8a:a3:7f:f6:15:17:f3:20:0a:3a:a0:
ad:6d:a2:77:27:93:3a:43:d7:42:af:be:d3:c2:a6:
23:d5:dc:f2:a4:bc:81:83:88:13:5f:6b:ad:1c:78:
e2:a5:df:76:20:e4:b1:31:d5:73:1e:c1:5a:1f:fd:
ee:3b:32:3f:33:ef:46:9b:bc:3b:45:77:33:f5:08:
ed:05:67:fe:8b:3b:6d:5d:dd:1f:5e:3b:8c:c8:ab:
7d:8b:77:18:14:ef:72:72:94:88:0a:a8:4b:1a:b4:
ea:7a:cc:97:a4:ce:30:22:a5:9c:b8:f1:50:4a:97:
72:1c:da:19:f5:0c:96:1a:02:5c:95:56:91:ed:a1:
12:57:56:d7:6b:ed:fd:64:b4:78:b7:ad:7c:77:a2:
b3:86:57:cf:33:5b:81:16:ac:b6:24:77:d2:80:5e:
7c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:29:69:CA:D9:84:C8:9E:CE:EC:13:84:C7:FB:11:4F:D4:70:40:6E
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e7ffe27-bb9f-402e-8f90-08945a4d91ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da36:6000::/40
Signature Algorithm: sha256WithRSAEncryption
46:2b:7d:56:d0:36:ee:34:3c:c8:fa:69:2c:3b:67:bc:aa:50:
9a:94:8e:e0:9f:73:b7:c6:ed:1e:9f:7f:4d:90:c1:23:02:8c:
40:3a:5d:c9:71:c8:02:c5:59:29:f2:31:ce:c3:6e:2c:f7:82:
98:f7:48:28:32:28:a2:7f:26:54:a1:1f:b6:99:c4:8f:9f:3f:
cd:ee:c8:55:4b:94:a6:5a:0a:87:e4:b1:91:10:3a:b7:c6:56:
4d:8a:5d:b8:e8:67:44:d6:c9:f7:30:51:c5:c1:d2:44:e9:ef:
b7:47:e5:24:1f:df:9b:e7:27:00:98:e3:4c:2c:96:2d:a9:ef:
ff:5c:de:13:8c:42:10:1f:57:92:89:b7:3e:98:bf:78:68:b7:
70:aa:46:3e:9c:55:20:c5:9a:16:83:2a:8e:38:96:1a:42:5f:
b6:dd:d9:3a:17:da:f5:43:97:28:5a:82:7b:0e:11:5f:db:1d:
03:db:37:b5:40:69:b1:7e:ef:41:9f:02:73:e0:eb:29:60:fd:
a2:cb:fa:dd:e4:0a:41:16:81:ce:6c:65:c4:59:5f:b0:76:f8:
76:7d:fc:1f:8a:90:a1:68:02:7a:8b:0e:ee:33:0a:23:61:0d:
f5:54:f3:06:66:e7:38:b7:c1:99:cc:89:73:bd:fe:9a:fd:45:
20:a8:18:b5
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUZAkrOCylF3c448PLuDUVvAgEi8MwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAMDhmNmUwM2YxNDEwOTkxMTIzMjQ2
ODFlM2IxNzQ5Njc1ODVkYzM3MzVlOTJmMmMzNWMwN2FkYjJlNDFmY2FjZjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSJnhlOIN4lvonPm5xBCGAEiRhaM
5RKw5Oa4eKZlwws2OUQW/Lm7pxoSiOQHaSHQ1DGiEd4KkRA8tRYDp3+8XbdJMZra
ps9F05nb78I6oPaKL1kuiZ98lVfcemuHiqN/9hUX8yAKOqCtbaJ3J5M6Q9dCr77T
wqYj1dzypLyBg4gTX2utHHjipd92IOSxMdVzHsFaH/3uOzI/M+9Gm7w7RXcz9Qjt
BWf+izttXd0fXjuMyKt9i3cYFO9ycpSICqhLGrTqesyXpM4wIqWcuPFQSpdyHNoZ
9QyWGgJclVaR7aESV1bXa+39ZLR4t618d6KzhlfPM1uBFqy2JHfSgF58tQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFGApacrZhMiezuwThMf7EU/UcEBuMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzJlN2ZmZTI3LWJiOWYtNDAyZS04ZjkwLTA4OTQ1YTRkOTFlZS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAbaNmAwDQYJKoZIhvcNAQELBQADggEBAEYrfVbQNu40PMj6aSw7
Z7yqUJqUjuCfc7fG7R6ff02QwSMCjEA6XclxyALFWSnyMc7Dbiz3gpj3SCgyKKJ/
JlShH7aZxI+fP83uyFVLlKZaCofksZEQOrfGVk2KXbjoZ0TWyfcwUcXB0kTp77dH
5SQf35vnJwCY40wsli2p7/9c3hOMQhAfV5KJtz6Yv3hot3CqRj6cVSDFmhaDKo44
lhpCX7bd2ToX2vVDlyhagnsOEV/bHQPbN7VAabF+70GfAnPg6ylg/aLL+t3kCkEW
gc5sZcRZX7B2+HZ9/B+KkKFoAnqLDu4zCiNhDfVU8wZm5zi3wZnMiXO9/pr9RSCo
GLU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:18 2025 by rpki-client