Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd0ac6ba-e775-4f86-853e-f467879f4e6c.roa
File: fd0ac6ba-e775-4f86-853e-f467879f4e6c.roa (raw, json)
Hash identifier: /ntqxp7wpC6lr+REEifQZ0yLR+0Ne6T0kR5v+9A7XHI=
Subject key identifier: 77:E9:C8:59:77:66:15:3C:96:AB:FC:1A:6B:2C:F7:EC:8D:88:CC:B8
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5710508EE082894A5772B26DA3F92E7AEA5ACFA3
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd0ac6ba-e775-4f86-853e-f467879f4e6c.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dab8:9000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:10:50:8e:e0:82:89:4a:57:72:b2:6d:a3:f9:2e:7a:ea:5a:cf:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=661705938df7bd16618e66f5f70ab651587bd91c420c0bb397c234de5415bd27, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5e:d6:e8:30:6a:52:00:2a:57:25:c5:24:8d:
d5:5c:b1:54:0b:26:50:c7:72:ee:ee:92:3a:4b:0d:
51:36:89:d2:59:2b:84:86:24:ce:06:02:7b:69:74:
8d:d8:c5:1f:05:2c:5a:bc:97:4f:8a:9a:01:dd:0f:
b9:a6:da:f4:67:fb:36:12:a9:eb:6c:aa:b5:d2:79:
ab:83:d8:c4:52:c7:0e:23:f6:8a:c7:37:8b:2d:f6:
83:83:f0:5a:37:92:02:59:3a:98:b9:e6:9e:ca:7a:
bf:e6:50:b6:79:af:1d:74:8c:12:c7:c5:46:6c:bd:
b2:3c:20:43:1e:24:7c:ae:56:3b:e0:70:cb:72:a1:
66:de:58:31:97:18:ed:01:81:7a:5d:39:77:a9:e1:
4b:a1:d1:18:2e:03:d5:55:72:fa:0c:45:8c:d4:34:
f6:45:b7:52:bd:47:d5:08:63:61:aa:ba:aa:83:bf:
2a:40:a0:c7:1d:d9:df:f0:e9:a9:78:a7:cf:1e:3f:
a3:77:95:81:56:f9:d3:1e:31:58:4a:30:aa:ef:7a:
3f:1a:11:b1:5a:3f:32:56:ce:1e:9f:81:aa:55:01:
a1:37:71:2a:5c:9c:33:1f:15:0b:b1:0a:8d:47:69:
d1:71:2c:c2:3a:b9:23:2b:d4:cd:4b:80:13:7b:c4:
60:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E9:C8:59:77:66:15:3C:96:AB:FC:1A:6B:2C:F7:EC:8D:88:CC:B8
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd0ac6ba-e775-4f86-853e-f467879f4e6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dab8:9000::/40
Signature Algorithm: sha256WithRSAEncryption
68:15:8d:e4:1a:76:54:94:4e:a6:52:48:1b:c9:12:da:3d:07:
57:f6:a7:54:c3:0b:0e:89:6f:51:f6:a7:0d:07:68:49:3f:1c:
29:bc:ee:5f:c3:4e:5b:64:a2:9b:88:5f:8b:b8:6d:78:43:33:
47:da:f9:02:50:82:bd:12:9d:e8:c9:91:e9:30:b0:31:7a:e3:
91:ba:ce:f2:f2:d3:c1:e4:e3:9b:5f:0f:16:65:f9:20:2c:88:
0d:b4:dd:75:ab:8c:da:68:1a:d4:05:44:4e:92:77:4b:a0:d2:
a4:64:99:f0:79:7d:5e:3d:95:09:86:76:a8:86:b9:59:6b:4b:
18:aa:a9:66:ee:26:89:57:52:6d:7c:b8:51:3d:51:9a:6c:ab:
13:14:f9:1a:1f:28:dd:8e:e3:fb:df:c4:0a:50:68:c4:41:73:
9f:18:9a:61:89:b1:60:da:cc:49:cc:d2:5e:4f:c3:23:71:37:
36:e8:4f:2a:76:7a:24:06:5b:de:88:17:71:fd:5d:a9:a7:ea:
b0:36:b9:6f:80:a9:52:6d:35:60:bb:88:5c:54:84:06:f7:ab:
db:12:9c:cf:2d:18:10:c4:d1:3b:75:d5:a7:2b:8c:7d:fb:71:
d3:90:09:e8:1f:84:e3:48:20:b8:be:de:ad:eb:c0:7e:8e:4b:
58:72:a4:25
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUVxBQjuCCiUpXcrJto/kueupaz6MwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEyNTAwMDAwMFoX
DTI1MDMwMTIzNTk1OVowejFJMEcGA1UEBRNANjYxNzA1OTM4ZGY3YmQxNjYxOGU2
NmY1ZjcwYWI2NTE1ODdiZDkxYzQyMGMwYmIzOTdjMjM0ZGU1NDE1YmQyNzEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh17W6DBqUgAqVyXFJI3VXLFUCyZQ
x3Lu7pI6Sw1RNonSWSuEhiTOBgJ7aXSN2MUfBSxavJdPipoB3Q+5ptr0Z/s2Eqnr
bKq10nmrg9jEUscOI/aKxzeLLfaDg/BaN5ICWTqYueaeynq/5lC2ea8ddIwSx8VG
bL2yPCBDHiR8rlY74HDLcqFm3lgxlxjtAYF6XTl3qeFLodEYLgPVVXL6DEWM1DT2
RbdSvUfVCGNhqrqqg78qQKDHHdnf8OmpeKfPHj+jd5WBVvnTHjFYSjCq73o/GhGx
Wj8yVs4en4GqVQGhN3EqXJwzHxULsQqNR2nRcSzCOrkjK9TNS4ATe8RgPwIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFHfpyFl3ZhU8lqv8Gmss9+yNiMy4MB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2ZkMGFjNmJhLWU3NzUtNGY4Ni04NTNlLWY0Njc4NzlmNGU2Yy5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAbauJAwDQYJKoZIhvcNAQELBQADggEBAGgVjeQadlSUTqZSSBvJ
Eto9B1f2p1TDCw6Jb1H2pw0HaEk/HCm87l/DTltkopuIX4u4bXhDM0fa+QJQgr0S
nejJkekwsDF645G6zvLy08Hk45tfDxZl+SAsiA203XWrjNpoGtQFRE6Sd0ug0qRk
mfB5fV49lQmGdqiGuVlrSxiqqWbuJolXUm18uFE9UZpsqxMU+RofKN2O4/vfxApQ
aMRBc58YmmGJsWDazEnM0l5PwyNxNzboTyp2eiQGW96IF3H9Xamn6rA2uW+AqVJt
NWC7iFxUhAb3q9sSnM8tGBDE0Tt11acrjH37cdOQCegfhONIILi+3q3rwH6OS1hy
pCU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:07:31 2025 by rpki-client