Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32c6f2e6-113c-4d40-a541-26a09c985dde.roa
File: 32c6f2e6-113c-4d40-a541-26a09c985dde.roa (raw, json)
Hash identifier: gtyTfqTwgVm/D0TsS+3YYU09t1uMpajVYsoD7byddTQ=
Subject key identifier: E3:4E:45:08:7F:89:3B:3F:52:5F:08:83:74:AD:57:6D:50:5F:9B:08
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 22ECC743FD5279E904547196EFE8076D9071C994
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32c6f2e6-113c-4d40-a541-26a09c985dde.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daff:2800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:ec:c7:43:fd:52:79:e9:04:54:71:96:ef:e8:07:6d:90:71:c9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=d0654fbb647cd03ca6811a1aec9b7c2e4c054ff023ea3323e0dda69bf8959158, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:94:06:1e:eb:3b:dd:69:21:69:f9:26:f1:da:
bb:f9:8b:5e:f6:40:7a:9d:9e:fe:47:6f:0a:31:d2:
b5:7a:e5:b3:e0:a8:b4:e2:38:a9:7e:0c:57:f2:3d:
98:8e:71:8a:da:ff:58:36:17:95:1e:b2:40:74:7b:
a7:be:d0:40:23:c2:3a:70:2f:ae:0b:92:8d:80:3e:
e8:6b:31:e2:f8:77:ca:98:cf:f2:2a:77:ad:28:5d:
70:f4:d0:61:4a:e4:9c:f5:dc:e5:80:41:0f:46:4b:
59:84:56:a3:23:c7:2a:7b:00:4d:19:f1:46:df:5f:
f0:46:04:c7:12:62:d3:3e:e5:2e:c5:a6:59:cf:84:
86:b5:c8:5a:f3:aa:a8:55:5d:a1:de:36:37:44:81:
57:0e:77:77:68:75:70:4d:da:af:bf:9d:0e:2a:fd:
cc:0d:00:9a:c0:61:d5:cd:3c:99:1f:ee:4c:bf:43:
ab:0c:95:37:c9:8d:6f:e9:db:7a:91:8e:6c:5b:10:
4a:97:cc:5a:4a:fe:8f:79:19:23:37:d0:6a:79:9d:
9b:f2:a0:79:0b:3b:9e:dc:4d:6b:16:77:03:e4:66:
1f:a2:a0:6c:04:28:22:61:76:b5:69:2b:d3:1a:5b:
34:56:e7:a4:d0:5a:1e:11:d5:83:44:f0:ca:b5:b2:
fb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4E:45:08:7F:89:3B:3F:52:5F:08:83:74:AD:57:6D:50:5F:9B:08
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32c6f2e6-113c-4d40-a541-26a09c985dde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daff:2800::/40
Signature Algorithm: sha256WithRSAEncryption
28:eb:ec:eb:e7:09:e7:9e:1c:8b:13:d9:04:a0:57:e3:66:88:
94:ea:f9:46:4a:60:64:a3:0b:4b:8a:16:80:b1:f7:e6:8a:a7:
89:c2:de:64:15:52:6e:4b:86:87:ec:96:c9:85:51:c8:80:e9:
f1:19:27:df:ab:52:28:19:b0:63:ea:32:f8:18:13:ae:64:7b:
3e:a7:3a:e6:03:e5:42:1b:4c:e4:40:ae:a8:05:f8:ef:31:4f:
23:6b:ef:1f:3e:8c:0d:16:10:df:ca:c7:57:d3:4c:8b:a7:f2:
87:25:77:71:27:82:93:9e:7f:34:04:8d:2b:a6:96:23:af:08:
d7:b0:ec:0c:35:70:f0:45:fd:32:89:55:e8:a8:31:4f:b6:e1:
30:fc:38:9c:b9:c7:db:f9:aa:1d:94:92:ea:25:b8:0b:5d:51:
7e:10:c3:e3:3b:2f:54:53:bf:9e:f7:a2:e5:1e:4c:a8:64:c6:
49:85:ac:db:20:6e:53:27:26:14:5d:a0:0d:e6:3f:32:fc:89:
79:7b:0c:93:54:fb:1b:f5:3c:d2:f8:13:24:84:9e:bc:91:01:
5f:4a:e8:1a:53:25:cf:18:25:6f:0f:33:82:70:6e:b7:07:0a:
ff:6d:b6:78:df:1a:b7:c1:29:c1:60:03:1b:05:e3:e7:44:2c:
8b:2f:f1:8e
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUIuzHQ/1SeekEVHGW7+gHbZBxyZQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAZDA2NTRmYmI2NDdjZDAzY2E2ODEx
YTFhZWM5YjdjMmU0YzA1NGZmMDIzZWEzMzIzZTBkZGE2OWJmODk1OTE1ODEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JQGHus73Wkhafkm8dq7+Yte9kB6
nZ7+R28KMdK1euWz4Ki04jipfgxX8j2YjnGK2v9YNheVHrJAdHunvtBAI8I6cC+u
C5KNgD7oazHi+HfKmM/yKnetKF1w9NBhSuSc9dzlgEEPRktZhFajI8cqewBNGfFG
31/wRgTHEmLTPuUuxaZZz4SGtcha86qoVV2h3jY3RIFXDnd3aHVwTdqvv50OKv3M
DQCawGHVzTyZH+5Mv0OrDJU3yY1v6dt6kY5sWxBKl8xaSv6PeRkjN9BqeZ2b8qB5
Czue3E1rFncD5GYfoqBsBCgiYXa1aSvTGls0Vuek0FoeEdWDRPDKtbL7QwIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFONORQh/iTs/Ul8Ig3StV21QX5sIMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzMyYzZmMmU2LTExM2MtNGQ0MC1hNTQxLTI2YTA5Yzk4NWRkZS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba/ygwDQYJKoZIhvcNAQELBQADggEBACjr7OvnCeeeHIsT2QSg
V+NmiJTq+UZKYGSjC0uKFoCx9+aKp4nC3mQVUm5LhofslsmFUciA6fEZJ9+rUigZ
sGPqMvgYE65kez6nOuYD5UIbTORArqgF+O8xTyNr7x8+jA0WEN/Kx1fTTIun8ocl
d3EngpOefzQEjSumliOvCNew7Aw1cPBF/TKJVeioMU+24TD8OJy5x9v5qh2Ukuol
uAtdUX4Qw+M7L1RTv573ouUeTKhkxkmFrNsgblMnJhRdoA3mPzL8iXl7DJNU+xv1
PNL4EySEnryRAV9K6BpTJc8YJW8PM4JwbrcHCv9ttnjfGrfBKcFgAxsF4+dELIsv
8Y4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:11:11 2025 by rpki-client