Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d8565c56-388b-48f4-90b0-4bbd36d0c2fe.roa
File: d8565c56-388b-48f4-90b0-4bbd36d0c2fe.roa (raw, json)
Hash identifier: +KWiMAwMp2OyZrfEX5FVjNXCYDBLbA2rw5DDUjvqWe8=
Subject key identifier: A7:FF:E2:94:45:90:23:A9:00:E1:E7:F0:E5:35:20:6D:DA:60:AA:65
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 57EB521B2E906BABD3E01BDA22C7C87C03F642E2
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d8565c56-388b-48f4-90b0-4bbd36d0c2fe.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf8:a000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:eb:52:1b:2e:90:6b:ab:d3:e0:1b:da:22:c7:c8:7c:03:f6:42:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=fbbc6aa3651eaa7c2736e0ff245c9dbbe7fdd88a94cc4f664239263e8e164a25, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a5:da:80:a5:15:3d:7f:92:e4:be:1e:76:51:
0b:d1:68:29:ae:11:28:0a:ee:3f:09:3f:3e:c1:04:
e1:b2:7e:a0:ec:17:fa:f6:48:70:d9:eb:74:ca:04:
55:0a:4d:f0:9a:e4:de:cd:ba:a9:08:0f:c2:2e:8f:
b6:47:d0:60:38:da:19:52:af:e5:37:85:b5:48:86:
ac:71:d9:43:af:95:b1:c0:73:79:0e:ec:20:d3:66:
55:51:40:de:1e:22:75:57:17:d6:4c:47:95:70:1a:
59:b5:3c:36:c9:60:58:bb:00:62:4e:41:43:f8:98:
0e:64:d5:e4:06:70:df:1d:3b:17:64:75:cf:9c:f6:
a0:1d:00:ac:c0:e3:5c:52:76:ba:dc:24:61:29:5f:
0e:2e:43:41:74:a4:36:4c:12:4b:a4:4c:8a:97:cc:
68:e5:76:72:a9:95:0b:50:05:64:ef:a0:71:2c:79:
94:c0:98:1d:d5:ee:c3:97:d8:7d:fc:cd:6c:77:d9:
18:fe:ae:d4:34:23:a4:29:cb:78:63:c8:de:51:0b:
93:ce:58:f2:38:4a:ca:77:10:f2:ed:5d:19:b7:20:
05:00:eb:b6:a1:0c:f5:22:1e:20:08:0e:d6:7f:65:
23:16:50:f8:e3:c0:ac:e4:84:37:87:af:ee:0f:36:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FF:E2:94:45:90:23:A9:00:E1:E7:F0:E5:35:20:6D:DA:60:AA:65
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d8565c56-388b-48f4-90b0-4bbd36d0c2fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf8:a000::/40
Signature Algorithm: sha256WithRSAEncryption
a6:6a:38:ce:49:27:f1:bd:1b:8a:fd:86:99:5d:31:26:8b:34:
22:97:4b:29:1c:38:78:ce:31:d5:ac:11:90:90:7f:28:10:f9:
6e:30:23:68:d9:d3:f2:ea:e1:51:53:d8:0a:91:d6:e6:f6:ca:
9b:80:6f:c1:d6:3f:87:35:ff:4e:78:8c:ed:45:5c:8d:23:4e:
a0:bb:02:e1:a6:08:ab:92:e8:75:52:78:36:cb:af:04:45:67:
6d:53:52:41:f3:d7:c2:fe:d9:fc:30:e8:44:e7:8b:87:0a:a7:
f2:7e:f3:65:42:5a:ab:78:df:19:40:ee:2d:2f:b5:60:c2:67:
52:82:97:31:50:96:27:1a:3d:3a:81:cf:a6:59:09:61:9c:03:
04:a3:ab:6b:0c:25:c2:3f:7a:50:de:d7:7e:9e:97:b6:b4:7e:
59:e8:46:2f:08:00:2c:d5:3b:6d:85:90:48:4c:b1:62:ed:c5:
9f:e2:86:68:df:b3:23:c9:e2:06:31:d3:56:f2:1d:f1:f2:00:
b8:cd:a4:a9:a8:54:51:47:0b:71:96:63:aa:eb:78:93:7c:39:
b8:e4:be:ba:a0:1b:37:91:9d:f8:e4:23:eb:6f:e5:0e:28:8a:
14:90:fd:08:0a:6f:25:85:f4:f3:0d:87:83:51:c4:cd:ca:9d:
07:49:81:4e
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUV+tSGy6Qa6vT4BvaIsfIfAP2QuIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwODAwMDAwMFoX
DTI1MDIxMjIzNTk1OVowejFJMEcGA1UEBRNAZmJiYzZhYTM2NTFlYWE3YzI3MzZl
MGZmMjQ1YzlkYmJlN2ZkZDg4YTk0Y2M0ZjY2NDIzOTI2M2U4ZTE2NGEyNTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6XagKUVPX+S5L4edlEL0WgprhEo
Cu4/CT8+wQThsn6g7Bf69khw2et0ygRVCk3wmuTezbqpCA/CLo+2R9BgONoZUq/l
N4W1SIascdlDr5WxwHN5Duwg02ZVUUDeHiJ1VxfWTEeVcBpZtTw2yWBYuwBiTkFD
+JgOZNXkBnDfHTsXZHXPnPagHQCswONcUna63CRhKV8OLkNBdKQ2TBJLpEyKl8xo
5XZyqZULUAVk76BxLHmUwJgd1e7Dl9h9/M1sd9kY/q7UNCOkKct4Y8jeUQuTzljy
OErKdxDy7V0ZtyAFAOu2oQz1Ih4gCA7Wf2UjFlD448Cs5IQ3h6/uDzbm7QIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFKf/4pRFkCOpAOHn8OU1IG3aYKplMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2Q4NTY1YzU2LTM4OGItNDhmNC05MGIwLTRiYmQzNmQwYzJmZS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba+KAwDQYJKoZIhvcNAQELBQADggEBAKZqOM5JJ/G9G4r9hpld
MSaLNCKXSykcOHjOMdWsEZCQfygQ+W4wI2jZ0/Lq4VFT2AqR1ub2ypuAb8HWP4c1
/054jO1FXI0jTqC7AuGmCKuS6HVSeDbLrwRFZ21TUkHz18L+2fww6ETni4cKp/J+
82VCWqt43xlA7i0vtWDCZ1KClzFQlicaPTqBz6ZZCWGcAwSjq2sMJcI/elDe136e
l7a0flnoRi8IACzVO22FkEhMsWLtxZ/ihmjfsyPJ4gYx01byHfHyALjNpKmoVFFH
C3GWY6rreJN8ObjkvrqgGzeRnfjkI+tv5Q4oihSQ/QgKbyWF9PMNh4NRxM3KnQdJ
gU4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:30:07 2025 by rpki-client