Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e2e1e45-00bb-496c-960f-d19f4fe06f72.roa
File: 7e2e1e45-00bb-496c-960f-d19f4fe06f72.roa (raw, json)
Hash identifier: ispcWk8nULJ8f6Icgn/w1Cr58cxr596r9/S4jzaJGiA=
Subject key identifier: 54:99:97:FF:A9:95:CE:20:28:38:9D:2D:B6:11:27:C0:55:87:59:52
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 74C780A7B4222969BAD5FB053074EF7E495A2731
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e2e1e45-00bb-496c-960f-d19f4fe06f72.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf4:8000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:c7:80:a7:b4:22:29:69:ba:d5:fb:05:30:74:ef:7e:49:5a:27:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=1ffca6fdd3a73938587f128d335c5950a2ebe9062bba1efd81610fafcd031899, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:69:03:f4:7d:48:5f:18:9c:ad:76:08:2f:4f:
b4:ed:2a:34:83:c2:e3:20:e2:45:9d:2f:36:e3:69:
f8:33:31:77:19:2b:db:57:bf:ca:d1:ca:bf:99:e1:
32:8f:ef:17:be:c0:11:6e:8f:d7:7b:a4:1e:bd:68:
2c:97:a8:c1:db:40:2a:fa:d3:5e:19:4b:30:24:ab:
4a:7e:1d:03:84:46:ad:1c:c6:7f:c2:ff:85:f6:e3:
af:a3:68:f7:41:42:6f:eb:81:ee:ac:27:7f:24:7f:
6a:6f:a8:c1:2b:5f:2f:f4:ee:07:44:b7:97:b0:eb:
30:99:50:df:85:71:1c:76:53:61:94:6e:3f:d7:06:
0f:b1:d3:bc:9f:f2:e3:66:de:2c:fa:2c:7e:b7:94:
62:29:7f:09:fb:94:54:88:89:a5:5d:9c:05:0f:16:
cd:ad:7a:65:5f:4e:82:33:c1:6b:e4:68:21:d3:43:
20:9e:67:88:ba:7a:4a:78:77:e8:bc:c0:d7:5c:b1:
3c:d9:fc:1e:14:c8:84:5e:54:db:db:cc:c9:55:8a:
d8:bc:fc:f0:a2:96:f8:68:87:fa:c6:f5:a4:54:18:
27:88:2e:e0:63:9d:ac:d0:66:3d:cf:f3:4a:0c:7b:
ae:99:7b:92:13:df:29:9d:1b:3a:eb:61:1a:82:f1:
e2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:99:97:FF:A9:95:CE:20:28:38:9D:2D:B6:11:27:C0:55:87:59:52
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e2e1e45-00bb-496c-960f-d19f4fe06f72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf4:8000::/40
Signature Algorithm: sha256WithRSAEncryption
3b:0e:e9:76:5c:4b:12:95:76:52:4e:9d:ee:16:d4:21:0c:2a:
50:a4:e5:1f:d4:1a:f9:c3:9a:e2:fa:6f:f9:c0:a5:b3:ec:c1:
ad:72:27:be:e0:79:d0:ac:8f:21:07:50:a3:c8:13:a5:91:0b:
bb:4d:47:bd:2d:3a:6d:fb:9d:08:51:16:a1:b1:07:06:fd:3d:
bc:f2:ee:5b:0c:6b:5b:ce:1e:a3:22:50:46:d5:d3:cc:9b:8f:
a1:f8:be:3a:81:9e:60:eb:82:bc:42:ac:4d:f9:90:80:9e:8c:
5a:e4:b0:ad:db:cb:26:fd:3b:1a:93:ba:7b:8f:40:99:f4:a3:
b3:2c:12:8f:8f:18:67:6b:c3:59:97:28:5d:68:fd:a4:55:43:
ae:e5:92:5e:fe:e7:e3:00:55:9a:1e:0f:d4:32:69:fc:67:46:
e6:12:e9:58:c4:dd:e3:35:4f:7a:b4:5a:43:72:94:d1:44:82:
35:7a:43:0c:9a:31:86:4b:f0:dd:f6:cc:76:95:a4:98:9e:21:
38:6f:03:8b:1b:ed:02:ae:f5:d9:82:ce:98:07:2a:7e:22:93:
45:16:d0:67:a5:e1:6e:b3:a2:0f:94:94:c8:b2:7e:9d:5b:bb:
61:b2:fe:46:db:c5:b5:19:2f:6f:fe:97:2d:d3:3e:be:3b:13:
2e:14:dd:c9
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUdMeAp7QiKWm61fsFMHTvfklaJzEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAMWZmY2E2ZmRkM2E3MzkzODU4N2Yx
MjhkMzM1YzU5NTBhMmViZTkwNjJiYmExZWZkODE2MTBmYWZjZDAzMTg5OTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2kD9H1IXxicrXYIL0+07So0g8Lj
IOJFnS8242n4MzF3GSvbV7/K0cq/meEyj+8XvsARbo/Xe6QevWgsl6jB20Aq+tNe
GUswJKtKfh0DhEatHMZ/wv+F9uOvo2j3QUJv64HurCd/JH9qb6jBK18v9O4HRLeX
sOswmVDfhXEcdlNhlG4/1wYPsdO8n/LjZt4s+ix+t5RiKX8J+5RUiImlXZwFDxbN
rXplX06CM8Fr5Ggh00MgnmeIunpKeHfovMDXXLE82fweFMiEXlTb28zJVYrYvPzw
opb4aIf6xvWkVBgniC7gY52s0GY9z/NKDHuumXuSE98pnRs662EagvHiKwIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFFSZl/+plc4gKDidLbYRJ8BVh1lSMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzdlMmUxZTQ1LTAwYmItNDk2Yy05NjBmLWQxOWY0ZmUwNmY3Mi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba9IAwDQYJKoZIhvcNAQELBQADggEBADsO6XZcSxKVdlJOne4W
1CEMKlCk5R/UGvnDmuL6b/nApbPswa1yJ77gedCsjyEHUKPIE6WRC7tNR70tOm37
nQhRFqGxBwb9Pbzy7lsMa1vOHqMiUEbV08ybj6H4vjqBnmDrgrxCrE35kICejFrk
sK3byyb9OxqTunuPQJn0o7MsEo+PGGdrw1mXKF1o/aRVQ67lkl7+5+MAVZoeD9Qy
afxnRuYS6VjE3eM1T3q0WkNylNFEgjV6QwyaMYZL8N32zHaVpJieIThvA4sb7QKu
9dmCzpgHKn4ik0UW0Gel4W6zog+UlMiyfp1bu2Gy/kbbxbUZL2/+ly3TPr47Ey4U
3ck=
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:12:01 2025 by rpki-client