Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b990f5b3-241d-4db7-8197-5e39d9181be8.roa
File: b990f5b3-241d-4db7-8197-5e39d9181be8.roa (raw, json)
Hash identifier: 40+xCDO2WPllRQ8HspvmlD+cRXuS6BkX1L4jcsWVV8A=
Subject key identifier: CC:F8:E9:8D:19:E6:B7:7C:4D:02:B5:2A:98:95:5F:0C:9B:30:53:36
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 7CDB7237158245DBB24355C99022ED0ED74F4695
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b990f5b3-241d-4db7-8197-5e39d9181be8.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf2:2840::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:db:72:37:15:82:45:db:b2:43:55:c9:90:22:ed:0e:d7:4f:46:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=af8ec707b290d50460d05060b417c3e7bd5db99214f85eb13332a9ab8ea5d53a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:de:81:d5:50:99:20:bb:d9:9c:26:d9:96:
1b:c3:13:54:13:04:bb:4e:fc:e3:17:20:b8:d1:68:
19:84:34:14:fb:9b:15:5e:aa:73:3d:f5:94:2f:b4:
9f:90:2d:78:fc:85:cb:b5:b0:94:15:03:74:eb:7f:
33:0e:51:99:f6:7b:cd:ff:4f:61:8f:d3:a5:c6:ca:
fe:b5:83:15:a0:9c:30:ab:5e:ca:89:72:88:07:a2:
99:0d:45:29:46:72:ed:48:5e:b6:f1:f0:64:6a:a8:
18:94:3c:5a:ff:25:dd:0d:a5:34:ed:6e:93:b4:f2:
e9:83:63:44:b0:3c:12:11:83:8b:53:47:9e:3d:a0:
9b:c1:45:0e:05:aa:bf:c4:5a:e8:b4:f8:be:6f:8a:
da:fd:f4:29:02:5e:c9:65:b1:05:4e:c9:d2:31:1a:
a1:ed:da:58:4b:f6:9d:af:d0:3a:e3:19:41:38:47:
e7:b6:4a:d7:7d:b5:cf:b2:04:63:38:50:31:98:9a:
d7:60:0b:81:17:25:58:61:1b:7f:01:b7:41:a4:45:
b7:a2:d3:32:6e:3c:4e:53:5d:70:f0:e8:7b:eb:fd:
cc:d4:82:33:59:e7:5e:29:8c:9b:13:63:80:cd:75:
df:fd:4a:d9:c7:dd:56:20:a1:16:58:03:39:da:88:
7d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F8:E9:8D:19:E6:B7:7C:4D:02:B5:2A:98:95:5F:0C:9B:30:53:36
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b990f5b3-241d-4db7-8197-5e39d9181be8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf2:2840::/48
Signature Algorithm: sha256WithRSAEncryption
b0:3b:a6:84:c8:64:dd:67:8a:04:54:e2:3d:a0:ca:6b:9e:aa:
56:f0:94:13:80:e3:6d:71:c4:15:30:f1:02:20:5a:e4:04:6b:
e7:37:1c:c3:e1:af:5f:58:ed:fc:60:7a:37:97:ff:d9:d1:37:
44:85:28:73:93:12:aa:72:17:68:fd:b3:6a:6e:1c:dc:bc:b8:
7c:30:56:d3:75:7e:73:8e:b4:b7:0e:38:42:7f:d6:f2:9b:ec:
78:5a:05:53:ec:48:e1:7e:10:04:c0:e9:0c:dd:11:cd:e8:e9:
7f:98:8b:59:42:90:60:77:84:c3:6c:a6:dd:be:1f:56:cd:ce:
49:9e:6f:c0:8e:2c:61:1e:77:f6:0b:a8:5f:bf:a6:98:ce:05:
0a:0c:83:0c:db:71:fa:6a:9d:52:71:c6:af:f6:80:0b:50:02:
ac:4c:51:5e:8e:18:ec:01:28:df:62:0b:5a:8c:de:78:db:e8:
dd:84:b3:72:d5:82:8e:50:81:68:69:9f:4e:77:2c:65:db:2e:
0b:9f:f0:a2:73:b9:ad:dc:5a:9c:b7:59:18:e4:af:69:be:8b:
83:3e:09:68:d1:67:80:78:a7:31:f3:33:42:65:ab:f2:41:ad:
bd:17:43:3b:ce:65:5b:96:e5:87:e2:d2:99:13:ae:b3:cf:e9:
eb:a7:de:8f
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUfNtyNxWCRduyQ1XJkCLtDtdPRpUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAYWY4ZWM3MDdiMjkwZDUwNDYwZDA1
MDYwYjQxN2MzZTdiZDVkYjk5MjE0Zjg1ZWIxMzMzMmE5YWI4ZWE1ZDUzYTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAvegdVQmSC72Zwm2ZYbwxNUEwS7
TvzjFyC40WgZhDQU+5sVXqpzPfWUL7SfkC14/IXLtbCUFQN0638zDlGZ9nvN/09h
j9Olxsr+tYMVoJwwq17KiXKIB6KZDUUpRnLtSF628fBkaqgYlDxa/yXdDaU07W6T
tPLpg2NEsDwSEYOLU0eePaCbwUUOBaq/xFrotPi+b4ra/fQpAl7JZbEFTsnSMRqh
7dpYS/adr9A64xlBOEfntkrXfbXPsgRjOFAxmJrXYAuBFyVYYRt/AbdBpEW3otMy
bjxOU11w8Oh76/3M1IIzWedeKYybE2OAzXXf/UrZx91WIKEWWAM52oh9MwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFMz46Y0Z5rd8TQK1KpiVXwybMFM2MB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2I5OTBmNWIzLTI0MWQtNGRiNy04MTk3LTVlMzlkOTE4MWJlOC5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAba8ihAMA0GCSqGSIb3DQEBCwUAA4IBAQCwO6aEyGTdZ4oEVOI9
oMprnqpW8JQTgONtccQVMPECIFrkBGvnNxzD4a9fWO38YHo3l//Z0TdEhShzkxKq
chdo/bNqbhzcvLh8MFbTdX5zjrS3DjhCf9bym+x4WgVT7EjhfhAEwOkM3RHN6Ol/
mItZQpBgd4TDbKbdvh9Wzc5Jnm/AjixhHnf2C6hfv6aYzgUKDIMM23H6ap1Sccav
9oALUAKsTFFejhjsASjfYgtajN542+jdhLNy1YKOUIFoaZ9Odyxl2y4Ln/Cic7mt
3Fqct1kY5K9pvouDPglo0WeAeKcx8zNCZavyQa29F0M7zmVbluWH4tKZE66zz+nr
p96P
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:28 2025 by rpki-client