Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7111dbee-e85c-4c8f-9f4a-65126d765aac.roa
File: 7111dbee-e85c-4c8f-9f4a-65126d765aac.roa (raw, json)
Hash identifier: E3An26lNws5bSV6jwJrh8dLLW0TJNlO6lYZrFgqT0Os=
Subject key identifier: EB:B1:2C:48:CD:F6:59:9B:9A:F2:88:64:5F:FC:4D:7A:8B:2C:0E:A6
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5385F9A3118DBCAB4B97FE01E9A2D8B9EFC3B30D
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7111dbee-e85c-4c8f-9f4a-65126d765aac.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dafb:70c0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:85:f9:a3:11:8d:bc:ab:4b:97:fe:01:e9:a2:d8:b9:ef:c3:b3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=2ea78ea7feda7034c3f5db54fc0a31325408a46c6eea90d567150c7b6b79feb5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:6f:22:dd:49:64:55:c4:86:b1:ba:7c:e6:
49:e9:61:8a:1c:4b:02:c5:8e:ed:75:eb:ac:fc:47:
07:2b:63:32:33:65:87:cc:58:a7:31:8e:76:df:10:
1b:40:4d:a8:bd:98:bd:bf:c1:a3:1d:e2:b9:4f:cf:
a8:cd:50:df:7a:22:52:01:36:f8:57:cc:e1:56:d8:
0b:c1:02:85:24:aa:7a:85:7a:8d:ee:1b:b9:b4:2d:
b2:f7:9d:a6:5b:92:dc:26:cf:14:d5:65:13:45:ca:
de:48:86:fb:e3:b1:ed:6e:83:4b:16:f2:70:11:3c:
72:d2:61:4a:d9:0e:76:93:2f:9e:24:47:5d:86:0e:
d3:59:b0:ff:d0:87:55:f4:a6:23:6c:7b:25:f1:b2:
99:3f:76:ab:21:c4:8e:2b:bb:02:76:e0:24:38:6e:
7b:c3:aa:28:97:98:cc:9a:d3:c8:a7:a6:a9:22:65:
83:1a:43:06:3a:de:24:7a:55:82:37:5b:74:00:0a:
8b:1e:71:7c:88:cb:6c:53:ae:e8:05:55:22:1b:33:
a1:0b:10:71:ff:7d:a8:11:d5:32:2c:fa:5d:88:bc:
5d:a5:40:7d:bc:3f:d7:65:76:83:7b:c0:68:da:af:
40:5b:61:b6:36:7a:0e:ec:20:fc:5c:b3:5c:7d:b2:
38:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B1:2C:48:CD:F6:59:9B:9A:F2:88:64:5F:FC:4D:7A:8B:2C:0E:A6
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7111dbee-e85c-4c8f-9f4a-65126d765aac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dafb:70c0::/46
Signature Algorithm: sha256WithRSAEncryption
a1:e4:7f:f2:0a:21:62:d3:b3:c0:cf:ce:12:0b:52:33:e6:dd:
ec:95:c3:e4:24:88:f2:a8:e4:46:19:27:f3:61:b2:6b:a5:5c:
4b:2a:fa:5f:fc:e9:1c:ef:dd:c7:71:7a:d9:65:2e:85:45:0b:
e8:18:2d:52:b4:9f:e3:27:32:0c:7a:53:7d:c1:81:ec:6e:9d:
f9:ea:c0:23:1b:09:05:76:44:32:f0:48:3a:7f:bb:5a:ea:66:
11:06:a3:d3:ca:c1:59:c0:37:8c:ee:10:84:5d:d5:b5:e4:0d:
6d:17:9e:cc:cc:88:dc:b9:23:aa:63:7c:8b:aa:51:b5:a8:f2:
e8:41:dd:18:e6:f4:fb:54:ab:52:97:34:bb:30:95:5a:2d:68:
f7:f6:14:c0:5e:fa:ba:ce:51:23:2b:49:f1:4d:7e:5b:35:9e:
f9:d3:96:bc:55:bf:b2:ce:b9:3e:36:be:e9:a1:ae:91:8e:da:
8b:3f:9a:e8:08:39:1b:a9:c4:07:bb:38:45:6d:87:59:79:08:
18:35:e6:6e:6b:c9:22:47:a5:af:90:35:2e:4f:11:2c:8a:f9:
7a:89:87:5f:b7:ff:57:75:37:d3:47:a5:9b:d5:73:88:3a:e3:
c4:72:e3:cc:38:d5:a7:02:eb:dc:54:bb:1c:4b:fc:c7:ef:11:
8d:ca:1c:13
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUU4X5oxGNvKtLl/4B6aLYue/Dsw0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAMmVhNzhlYTdmZWRhNzAzNGMzZjVk
YjU0ZmMwYTMxMzI1NDA4YTQ2YzZlZWE5MGQ1NjcxNTBjN2I2Yjc5ZmViNTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdRvIt1JZFXEhrG6fOZJ6WGKHEsC
xY7tdeus/EcHK2MyM2WHzFinMY523xAbQE2ovZi9v8GjHeK5T8+ozVDfeiJSATb4
V8zhVtgLwQKFJKp6hXqN7hu5tC2y952mW5LcJs8U1WUTRcreSIb747HtboNLFvJw
ETxy0mFK2Q52ky+eJEddhg7TWbD/0IdV9KYjbHsl8bKZP3arIcSOK7sCduAkOG57
w6ool5jMmtPIp6apImWDGkMGOt4kelWCN1t0AAqLHnF8iMtsU67oBVUiGzOhCxBx
/32oEdUyLPpdiLxdpUB9vD/XZXaDe8Bo2q9AW2G2NnoO7CD8XLNcfbI4PwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFOuxLEjN9lmbmvKIZF/8TXqLLA6mMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzcxMTFkYmVlLWU4NWMtNGM4Zi05ZjRhLTY1MTI2ZDc2NWFhYy5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcCJAba+3DAMA0GCSqGSIb3DQEBCwUAA4IBAQCh5H/yCiFi07PAz84S
C1Iz5t3slcPkJIjyqORGGSfzYbJrpVxLKvpf/Okc793HcXrZZS6FRQvoGC1StJ/j
JzIMelN9wYHsbp356sAjGwkFdkQy8Eg6f7ta6mYRBqPTysFZwDeM7hCEXdW15A1t
F57MzIjcuSOqY3yLqlG1qPLoQd0Y5vT7VKtSlzS7MJVaLWj39hTAXvq6zlEjK0nx
TX5bNZ7505a8Vb+yzrk+Nr7poa6RjtqLP5roCDkbqcQHuzhFbYdZeQgYNeZua8ki
R6WvkDUuTxEsivl6iYdft/9XdTfTR6Wb1XOIOuPEcuPMONWnAuvcVLscS/zH7xGN
yhwT
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:54:38 2025 by rpki-client