Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5e20664-bb4b-418f-9be3-4d905265deec.roa
File: a5e20664-bb4b-418f-9be3-4d905265deec.roa (raw, json)
Hash identifier: VmY500nTZliclYv/pgBJX/958Ri23n7Frd/rM26WtP0=
Subject key identifier: 3C:52:61:BB:D4:ED:7A:71:06:01:F7:93:DB:89:D4:FA:F8:0C:AB:CE
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5CF2523679385D24B0212A7AE09DA5CA98CE821B
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5e20664-bb4b-418f-9be3-4d905265deec.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da68:8000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:f2:52:36:79:38:5d:24:b0:21:2a:7a:e0:9d:a5:ca:98:ce:82:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=954b32426a3be5a1f830cb1efcde4009f60340e7f3d256f2a179c0815f6adc18, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:38:72:b7:4e:8f:0a:f2:ac:c8:d8:e6:62:
89:52:ac:89:24:99:b9:14:24:ef:34:b3:25:5b:ab:
91:81:2e:0c:bb:4e:86:d3:ba:9f:ab:ef:ad:31:84:
80:23:a8:ab:9f:b0:df:04:71:ee:8e:1a:8c:ec:1a:
ab:8b:56:f8:6d:b2:c2:f0:3a:2f:76:75:ef:0b:b7:
58:f6:98:bd:50:95:7a:58:f3:df:ea:8e:4c:b1:6f:
0f:f4:e4:56:67:6f:66:5e:a1:f7:f8:ec:5e:48:30:
6b:a5:e7:43:7f:c2:35:03:62:33:fc:7b:73:46:da:
fb:72:32:f0:11:a6:91:7d:ec:f5:e6:52:31:99:15:
32:b2:e3:b4:a2:9b:a7:c2:05:e4:32:71:78:1a:2e:
d9:6a:92:b5:55:c5:74:76:4c:dd:31:b1:3d:10:3e:
29:69:4e:51:68:19:10:e8:d6:5c:5c:62:31:fc:57:
53:ef:f5:2a:9b:9f:0e:67:5b:d4:d2:13:a2:e6:61:
0d:5b:7a:27:aa:59:b5:a4:af:ae:54:6a:a6:94:29:
de:8e:4c:da:65:a1:41:bf:51:99:f3:a3:e7:10:5d:
ac:3e:6f:5d:79:db:f5:cd:e1:c5:b0:e6:6f:4c:51:
0f:b6:1f:5c:50:1b:8d:f0:07:cc:43:43:e8:0a:a2:
31:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:52:61:BB:D4:ED:7A:71:06:01:F7:93:DB:89:D4:FA:F8:0C:AB:CE
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5e20664-bb4b-418f-9be3-4d905265deec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da68:8000::/40
Signature Algorithm: sha256WithRSAEncryption
ba:aa:b8:24:d5:11:86:8e:ab:45:a6:c0:b1:4f:27:55:0c:ca:
47:85:27:15:56:26:ed:6c:c6:ba:4a:8c:24:06:1a:b9:6d:0a:
04:9e:d0:50:48:9c:c5:b0:d8:59:2f:d4:88:ba:4e:5a:77:7d:
19:e1:82:af:be:d3:65:bd:67:81:27:85:92:21:61:9a:8c:b8:
71:0a:40:f5:34:56:7b:b8:a3:ec:ee:84:6d:e6:91:da:99:25:
1a:67:95:db:43:be:9f:a6:7a:ec:3b:43:18:0f:bd:9a:8a:4a:
86:6a:5b:97:29:92:e0:64:bc:97:27:3b:ab:57:a0:7a:24:78:
44:c3:1a:d8:cd:29:d9:7e:55:5f:7f:e9:b6:14:a9:5d:70:59:
fc:23:85:5a:6a:48:08:2a:5a:ab:09:b7:84:f7:ab:54:1a:54:
5a:dd:51:2e:f6:cb:8a:e1:2d:11:27:61:fd:2d:5c:4f:b5:a4:
92:9d:7e:d6:11:80:14:62:90:1f:3a:62:b9:23:e5:c9:e5:26:
5c:9b:58:8a:e1:9e:e3:31:ea:6f:fe:27:b3:7a:20:80:a4:6c:
fc:bf:b8:da:a0:c2:f6:0e:6d:91:4b:d1:58:54:56:a3:49:0b:
e9:f1:ea:be:0e:26:7a:20:00:34:6c:3a:64:f4:74:59:8c:18:
9e:c9:3b:9f
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUXPJSNnk4XSSwISp64J2lypjOghswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDExMDAwMDAwMFoX
DTI1MDIxNDIzNTk1OVowejFJMEcGA1UEBRNAOTU0YjMyNDI2YTNiZTVhMWY4MzBj
YjFlZmNkZTQwMDlmNjAzNDBlN2YzZDI1NmYyYTE3OWMwODE1ZjZhZGMxODEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsik4crdOjwryrMjY5mKJUqyJJJm5
FCTvNLMlW6uRgS4Mu06G07qfq++tMYSAI6irn7DfBHHujhqM7Bqri1b4bbLC8Dov
dnXvC7dY9pi9UJV6WPPf6o5MsW8P9ORWZ29mXqH3+OxeSDBrpedDf8I1A2Iz/Htz
Rtr7cjLwEaaRfez15lIxmRUysuO0opunwgXkMnF4Gi7ZapK1VcV0dkzdMbE9ED4p
aU5RaBkQ6NZcXGIx/FdT7/Uqm58OZ1vU0hOi5mENW3onqlm1pK+uVGqmlCnejkza
ZaFBv1GZ86PnEF2sPm9dedv1zeHFsOZvTFEPth9cUBuN8AfMQ0PoCqIxiQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFDxSYbvU7XpxBgH3k9uJ1Pr4DKvOMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2E1ZTIwNjY0LWJiNGItNDE4Zi05YmUzLTRkOTA1MjY1ZGVlYy5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAbaaIAwDQYJKoZIhvcNAQELBQADggEBALqquCTVEYaOq0WmwLFP
J1UMykeFJxVWJu1sxrpKjCQGGrltCgSe0FBInMWw2Fkv1Ii6Tlp3fRnhgq++02W9
Z4EnhZIhYZqMuHEKQPU0Vnu4o+zuhG3mkdqZJRpnldtDvp+meuw7QxgPvZqKSoZq
W5cpkuBkvJcnO6tXoHokeETDGtjNKdl+VV9/6bYUqV1wWfwjhVpqSAgqWqsJt4T3
q1QaVFrdUS72y4rhLREnYf0tXE+1pJKdftYRgBRikB86Yrkj5cnlJlybWIrhnuMx
6m/+J7N6IICkbPy/uNqgwvYObZFL0VhUVqNJC+nx6r4OJnogADRsOmT0dFmMGJ7J
O58=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:40:19 2025 by rpki-client