Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/663fa6aa-9936-47d7-9f13-719ba997b9b3.roa
File: 663fa6aa-9936-47d7-9f13-719ba997b9b3.roa (raw, json)
Hash identifier: 1mvI3dYhlzYw4MQHfA/4MX6hPWo4wczb9YCoV1nxbnE=
Subject key identifier: B3:EF:6C:61:34:51:BE:2E:18:7E:7F:BE:06:A2:EB:10:FA:DD:00:14
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 544C5367A250743097FFC02E0947FE3AE06B6FA5
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/663fa6aa-9936-47d7-9f13-719ba997b9b3.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da1c:8000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:4c:53:67:a2:50:74:30:97:ff:c0:2e:09:47:fe:3a:e0:6b:6f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=c1903ce6a1e18ed3e9b781a344590d99a8bfadb3a4e58d9af316bbc6be92ae74, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:98:5c:ef:fc:de:d3:0c:ac:ff:26:22:47:0b:
6b:f5:50:cd:6e:a5:e1:32:e4:a0:f7:bf:c4:44:e2:
d5:f5:ab:39:f6:89:61:1e:6b:22:8e:f1:7d:6c:5b:
ed:24:29:79:72:66:b7:56:c4:91:d5:b5:05:de:fc:
0c:32:62:9b:05:78:11:30:72:2e:11:af:05:b4:a6:
c5:18:e2:12:b2:5f:37:34:12:81:90:30:77:a3:a9:
09:4d:91:6f:b5:82:a8:06:84:bd:03:72:bd:d8:f7:
2c:ad:2f:95:a4:2c:1d:d3:f6:45:6a:df:64:4d:72:
29:9a:d7:0b:2d:9a:2c:66:05:e2:f7:08:34:cf:36:
4b:51:97:da:9f:50:ae:ca:54:b3:27:ae:f2:24:06:
a7:8c:bc:64:db:6f:bf:b4:84:c2:14:d5:2e:57:67:
39:c3:03:fa:a4:01:f9:52:9d:53:2b:82:7b:44:23:
ab:f0:1b:09:a5:15:02:31:d9:09:ca:66:e0:fa:35:
16:ca:a7:be:47:f5:a5:bf:11:3b:06:c7:c0:5d:b7:
da:46:25:69:93:1c:61:18:53:fe:c7:a2:47:23:4e:
30:dc:b5:4a:9a:48:fd:d9:f4:6e:ec:f2:7a:75:78:
6d:9d:f6:ac:41:84:20:93:ea:34:b3:d5:6e:d3:92:
cc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EF:6C:61:34:51:BE:2E:18:7E:7F:BE:06:A2:EB:10:FA:DD:00:14
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/663fa6aa-9936-47d7-9f13-719ba997b9b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da1c:8000::/36
Signature Algorithm: sha256WithRSAEncryption
98:3f:00:bf:d6:e1:5c:ed:d9:b2:4a:a7:9d:ba:74:fc:61:d5:
40:f7:4a:79:14:ad:af:35:b3:d9:5f:a3:c8:d7:fa:37:59:d5:
d6:d8:e7:58:4d:0f:9c:33:ba:5b:6b:ff:64:3b:88:44:7b:18:
85:1b:f4:2f:b7:5e:ab:58:25:f1:5e:31:27:81:14:9c:6d:f3:
e1:67:4e:fe:f8:f0:57:7b:42:3c:ab:9d:85:d2:d0:96:4a:31:
8a:d5:c1:bb:e7:e9:26:aa:c1:2d:9c:9a:cc:72:7c:40:be:0c:
17:b2:f6:5c:6a:ed:55:6f:18:89:fb:f0:b9:af:2d:9e:85:ea:
73:3b:f1:bd:10:a7:c4:d3:77:15:c5:4e:df:8d:d3:f2:bf:1d:
24:d8:75:2e:82:68:1f:fb:f9:38:05:d5:a6:3d:0b:92:7b:a3:
25:02:55:54:df:94:36:9c:f3:90:b7:d9:e6:c3:28:a9:a4:90:
bc:e1:7b:53:4b:4a:3b:83:34:78:a5:ca:c4:af:5b:23:85:e4:
f0:28:18:80:bb:89:cc:1e:d7:53:07:14:ae:db:5f:30:28:91:
13:ca:40:8f:72:5a:7b:9f:79:c0:78:07:50:6c:6d:07:5f:b5:
10:6c:a5:42:08:f0:7e:8a:ec:40:b9:01:e1:af:77:4b:df:54:
69:d2:4a:d8
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUVExTZ6JQdDCX/8AuCUf+OuBrb6UwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAYzE5MDNjZTZhMWUxOGVkM2U5Yjc4
MWEzNDQ1OTBkOTlhOGJmYWRiM2E0ZTU4ZDlhZjMxNmJiYzZiZTkyYWU3NDEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5hc7/ze0wys/yYiRwtr9VDNbqXh
MuSg97/EROLV9as59olhHmsijvF9bFvtJCl5cma3VsSR1bUF3vwMMmKbBXgRMHIu
Ea8FtKbFGOISsl83NBKBkDB3o6kJTZFvtYKoBoS9A3K92PcsrS+VpCwd0/ZFat9k
TXIpmtcLLZosZgXi9wg0zzZLUZfan1CuylSzJ67yJAanjLxk22+/tITCFNUuV2c5
wwP6pAH5Up1TK4J7RCOr8BsJpRUCMdkJymbg+jUWyqe+R/WlvxE7BsfAXbfaRiVp
kxxhGFP+x6JHI04w3LVKmkj92fRu7PJ6dXhtnfasQYQgk+o0s9Vu05LMgQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFLPvbGE0Ub4uGH5/vgai6xD63QAUMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzY2M2ZhNmFhLTk5MzYtNDdkNy05ZjEzLTcxOWJhOTk3YjliMy5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYEJAbaHIAwDQYJKoZIhvcNAQELBQADggEBAJg/AL/W4Vzt2bJKp526
dPxh1UD3SnkUra81s9lfo8jX+jdZ1dbY51hND5wzultr/2Q7iER7GIUb9C+3XqtY
JfFeMSeBFJxt8+FnTv748Fd7QjyrnYXS0JZKMYrVwbvn6SaqwS2cmsxyfEC+DBey
9lxq7VVvGIn78LmvLZ6F6nM78b0Qp8TTdxXFTt+N0/K/HSTYdS6CaB/7+TgF1aY9
C5J7oyUCVVTflDac85C32ebDKKmkkLzhe1NLSjuDNHilysSvWyOF5PAoGIC7icwe
11MHFK7bXzAokRPKQI9yWnufecB4B1BsbQdftRBspUII8H6K7EC5AeGvd0vfVGnS
Stg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:48 2025 by rpki-client