Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1655db6-c486-404e-a33e-9132a12eb476.roa
File: b1655db6-c486-404e-a33e-9132a12eb476.roa (raw, json)
Hash identifier: WVbK6ObCv4hC9FE53fg1tcGDk4WvYqeHXera22ed1Lc=
Subject key identifier: 48:62:6C:87:46:20:26:07:24:5B:F5:53:D3:E3:4B:17:FD:0B:DC:F2
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 06074BB84E98B9420A48179FEA93748150A8C861
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1655db6-c486-404e-a33e-9132a12eb476.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dafb:10c0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:07:4b:b8:4e:98:b9:42:0a:48:17:9f:ea:93:74:81:50:a8:c8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=f2794b013f1bdc1ead0cf931f7bec79386291768105706ccd5964bfa1f9cc0e6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:96:83:80:51:05:f0:03:cb:c6:5a:07:82:e1:
ee:1f:e3:f0:30:26:41:45:b3:07:e8:eb:14:d6:a7:
ca:b9:c7:5c:40:05:10:7b:93:85:11:33:85:c3:1e:
0b:2a:ca:4d:61:ce:c3:2d:8d:ac:dd:bd:89:00:e2:
35:7e:50:b0:65:8f:1e:d5:68:3b:fd:ab:78:35:4b:
a2:be:38:ca:f6:a8:5d:58:3f:1a:d5:78:e4:31:4f:
b4:87:4d:7e:6f:3a:1b:de:8d:aa:91:50:a2:f3:ba:
1c:18:de:b0:12:55:77:86:68:36:c5:62:27:da:7c:
80:2b:a7:7b:7c:f1:3f:ee:d8:ff:e2:1f:e9:fa:e5:
11:9e:7b:5b:50:bf:89:c3:7c:0d:b0:1b:b8:4c:cb:
2b:dd:eb:fd:94:4b:95:7e:88:37:9e:ac:1d:d1:8c:
9a:c6:7a:96:f9:58:fd:e7:d8:e0:6a:72:6d:72:6d:
20:1a:31:34:22:f3:7d:9a:49:a8:e4:d5:44:47:04:
f8:39:9a:a9:de:0d:e1:3a:7b:9f:9b:3c:44:14:f4:
5e:49:b4:2b:6b:a0:1c:96:3e:9c:49:cf:a0:1a:5e:
7e:c8:da:9e:fe:8d:a6:ec:9e:88:d5:d1:0e:c0:d5:
a8:a6:2e:70:a2:91:49:b5:94:6e:da:86:fc:2e:81:
36:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:62:6C:87:46:20:26:07:24:5B:F5:53:D3:E3:4B:17:FD:0B:DC:F2
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1655db6-c486-404e-a33e-9132a12eb476.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dafb:10c0::/46
Signature Algorithm: sha256WithRSAEncryption
26:54:40:65:4b:db:b1:59:09:24:8d:7b:f2:22:b1:3a:7a:95:
b5:a8:16:33:3a:97:00:d5:fa:11:c5:77:ae:89:80:33:aa:02:
86:c1:5d:49:39:2f:34:1e:8a:81:33:31:7f:10:9f:66:9e:47:
8b:c6:7a:43:d9:e9:18:b5:69:16:aa:14:79:21:bb:8a:ee:7b:
cc:25:71:2d:61:d8:ad:aa:1f:b8:e9:70:e6:17:f1:c8:bc:ba:
a2:de:f7:f6:fe:61:c3:6b:68:b4:d2:0e:1c:ec:2e:79:be:44:
ea:d0:f8:45:96:c1:e7:8f:48:3f:bc:5b:bf:2a:04:2f:5d:72:
65:df:29:6f:6f:22:ca:ff:6d:26:3f:80:82:74:ab:fe:9b:1a:
f8:fa:7e:7b:81:a2:00:11:05:4c:73:d2:bb:ae:ba:a4:da:f1:
b5:ba:96:51:d0:0f:d4:45:f6:f1:59:6f:3f:72:ca:1f:47:c6:
04:17:18:86:37:b7:04:0a:a0:a9:1a:2d:9f:5c:bd:8d:b3:1c:
3a:70:57:39:14:37:1e:94:86:bd:5e:c5:71:69:a6:59:79:d8:
c5:17:43:bb:a7:58:6b:00:55:cd:e2:91:f6:a2:57:3a:65:95:
24:bb:ba:f3:a5:da:2e:0b:5e:7a:96:36:8c:bc:9f:69:a2:4b:
69:94:a5:c0
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUBgdLuE6YuUIKSBef6pN0gVCoyGEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAZjI3OTRiMDEzZjFiZGMxZWFkMGNm
OTMxZjdiZWM3OTM4NjI5MTc2ODEwNTcwNmNjZDU5NjRiZmExZjljYzBlNjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5aDgFEF8APLxloHguHuH+PwMCZB
RbMH6OsU1qfKucdcQAUQe5OFETOFwx4LKspNYc7DLY2s3b2JAOI1flCwZY8e1Wg7
/at4NUuivjjK9qhdWD8a1XjkMU+0h01+bzob3o2qkVCi87ocGN6wElV3hmg2xWIn
2nyAK6d7fPE/7tj/4h/p+uURnntbUL+Jw3wNsBu4TMsr3ev9lEuVfog3nqwd0Yya
xnqW+Vj959jganJtcm0gGjE0IvN9mkmo5NVERwT4OZqp3g3hOnufmzxEFPReSbQr
a6Aclj6cSc+gGl5+yNqe/o2m7J6I1dEOwNWopi5wopFJtZRu2ob8LoE2hwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFEhibIdGICYHJFv1U9PjSxf9C9zyMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2IxNjU1ZGI2LWM0ODYtNDA0ZS1hMzNlLTkxMzJhMTJlYjQ3Ni5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcCJAba+xDAMA0GCSqGSIb3DQEBCwUAA4IBAQAmVEBlS9uxWQkkjXvy
IrE6epW1qBYzOpcA1foRxXeuiYAzqgKGwV1JOS80HoqBMzF/EJ9mnkeLxnpD2ekY
tWkWqhR5IbuK7nvMJXEtYditqh+46XDmF/HIvLqi3vf2/mHDa2i00g4c7C55vkTq
0PhFlsHnj0g/vFu/KgQvXXJl3ylvbyLK/20mP4CCdKv+mxr4+n57gaIAEQVMc9K7
rrqk2vG1upZR0A/URfbxWW8/csofR8YEFxiGN7cECqCpGi2fXL2Nsxw6cFc5FDce
lIa9XsVxaaZZedjFF0O7p1hrAFXN4pH2olc6ZZUku7rzpdouC156ljaMvJ9poktp
lKXA
-----END CERTIFICATE-----
Generated at Sun May 4 20:58:58 2025 by rpki-client