Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f5b57beb-03dd-43a8-9a06-07f3f16a3f41.roa
File: f5b57beb-03dd-43a8-9a06-07f3f16a3f41.roa (raw, json)
Hash identifier: UmADZZTh+LqtESUDgdphxaFmIPndAHwKOnQaZwRivsA=
Subject key identifier: AC:2E:80:E5:FF:46:37:1F:34:BF:C4:CC:F9:6A:40:54:85:43:8B:AC
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 68D260539E68AE93EE1E5CEA11D527A61B31FC4E
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f5b57beb-03dd-43a8-9a06-07f3f16a3f41.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dafa:8000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:d2:60:53:9e:68:ae:93:ee:1e:5c:ea:11:d5:27:a6:1b:31:fc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=194b1f6402e6baaf902f6e2a06b97b4c47d84bbc9494055f4d5d197d5e9158b5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a0:3e:7e:6c:21:bc:77:20:28:ce:1a:11:a9:
03:7e:86:d3:b4:c3:2f:45:ac:17:b5:89:e4:6b:f7:
0d:98:1d:c5:a2:34:ab:dc:be:a1:8d:a0:bd:22:85:
2a:97:b4:53:ea:05:47:63:99:70:50:e9:81:a7:c4:
b5:fa:78:a1:15:a6:61:e5:77:9a:5e:aa:e6:01:99:
53:e2:a6:22:37:67:e7:72:c1:82:c3:43:ad:0b:b9:
a3:bf:c5:ac:55:d5:1a:93:39:0c:bf:ae:62:8a:42:
94:17:f6:17:1a:2f:52:b1:3e:df:78:79:df:cc:54:
00:c7:0d:80:04:73:6b:e6:14:8e:24:82:1e:e3:5f:
a0:a7:05:a7:f7:36:6b:34:53:1c:7a:02:c2:b3:d9:
9a:60:27:b4:64:bc:18:1e:92:fa:ac:77:d0:3c:0b:
63:72:e1:3c:3f:a9:42:07:bb:c2:6f:7e:64:53:09:
3f:15:ce:a5:2a:9a:62:f6:ad:40:b9:65:13:32:16:
04:1f:2c:49:05:98:5d:ad:d1:c5:44:9f:16:95:8b:
f9:66:e2:06:bb:d0:6d:2e:92:23:c3:3d:fb:ff:e5:
93:09:6f:a0:c8:6c:2e:c9:14:2f:8c:b9:65:0a:f2:
5e:03:92:46:c1:1a:07:c5:b7:09:9a:a4:d9:f8:02:
b8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2E:80:E5:FF:46:37:1F:34:BF:C4:CC:F9:6A:40:54:85:43:8B:AC
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f5b57beb-03dd-43a8-9a06-07f3f16a3f41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dafa:8000::/40
Signature Algorithm: sha256WithRSAEncryption
56:22:ae:e8:48:aa:74:73:9b:65:7f:6e:1f:7d:08:dd:fc:72:
07:04:bb:fa:d4:0b:45:4b:f8:fc:39:0e:b1:7a:79:5e:72:7f:
65:81:3c:1c:75:2a:28:ac:9e:aa:7c:94:be:76:f8:7f:c5:0f:
cb:2f:9c:68:73:28:fe:5b:7a:5a:0c:48:64:5a:85:3e:e3:8d:
c2:56:a4:fa:c6:b5:c7:2f:3d:d6:4e:ee:34:37:f4:b8:64:c2:
77:fc:fb:02:53:3d:db:df:11:c7:b8:1d:e2:ba:bd:a1:b1:b2:
48:7c:db:b6:ce:df:1a:d8:15:81:fa:a4:ba:bd:2a:c5:6b:c5:
47:8b:be:5c:13:f9:50:d4:75:5e:13:fd:c8:2c:91:74:bd:29:
fe:2f:4f:e3:44:66:9f:f9:69:30:1a:28:6d:2b:d3:3a:42:01:
5b:fa:68:94:d4:d5:5f:39:60:ce:6a:5f:6a:ad:7f:eb:47:f4:
5e:6f:cf:7a:5c:5e:75:51:ed:a2:64:c6:7d:77:c3:50:ba:99:
47:68:d9:84:29:52:ce:0b:a7:d6:4b:96:a3:f8:1e:09:18:bf:
a2:49:2b:26:50:a9:2d:de:12:4b:b1:83:c5:f9:c4:b7:b2:03:
64:4f:46:98:c0:9e:3e:2d:c5:a2:7c:5d:f6:37:02:cb:02:97:
c4:de:2c:42
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUaNJgU55orpPuHlzqEdUnphsx/E4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDExMzAwMDAwMFoX
DTI1MDIxNzIzNTk1OVowejFJMEcGA1UEBRNAMTk0YjFmNjQwMmU2YmFhZjkwMmY2
ZTJhMDZiOTdiNGM0N2Q4NGJiYzk0OTQwNTVmNGQ1ZDE5N2Q1ZTkxNThiNTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaA+fmwhvHcgKM4aEakDfobTtMMv
RawXtYnka/cNmB3FojSr3L6hjaC9IoUql7RT6gVHY5lwUOmBp8S1+nihFaZh5Xea
XqrmAZlT4qYiN2fncsGCw0OtC7mjv8WsVdUakzkMv65iikKUF/YXGi9SsT7feHnf
zFQAxw2ABHNr5hSOJIIe41+gpwWn9zZrNFMcegLCs9maYCe0ZLwYHpL6rHfQPAtj
cuE8P6lCB7vCb35kUwk/Fc6lKppi9q1AuWUTMhYEHyxJBZhdrdHFRJ8WlYv5ZuIG
u9BtLpIjwz37/+WTCW+gyGwuyRQvjLllCvJeA5JGwRoHxbcJmqTZ+AK4rwIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFKwugOX/RjcfNL/EzPlqQFSFQ4usMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2Y1YjU3YmViLTAzZGQtNDNhOC05YTA2LTA3ZjNmMTZhM2Y0MS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba+oAwDQYJKoZIhvcNAQELBQADggEBAFYiruhIqnRzm2V/bh99
CN38cgcEu/rUC0VL+Pw5DrF6eV5yf2WBPBx1Kiisnqp8lL52+H/FD8svnGhzKP5b
eloMSGRahT7jjcJWpPrGtccvPdZO7jQ39Lhkwnf8+wJTPdvfEce4HeK6vaGxskh8
27bO3xrYFYH6pLq9KsVrxUeLvlwT+VDUdV4T/cgskXS9Kf4vT+NEZp/5aTAaKG0r
0zpCAVv6aJTU1V85YM5qX2qtf+tH9F5vz3pcXnVR7aJkxn13w1C6mUdo2YQpUs4L
p9ZLlqP4HgkYv6JJKyZQqS3eEkuxg8X5xLeyA2RPRpjAnj4txaJ8XfY3AssCl8Te
LEI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:04:40 2025 by rpki-client