Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02368d39-5a4f-44bd-a7b6-9d87f3fcc37b.roa
File: 02368d39-5a4f-44bd-a7b6-9d87f3fcc37b.roa (raw, json)
Hash identifier: kuLHcGqrJoxjqUNIbfjDvCb3RQ6E8NcPPHR+qM52IYs=
Subject key identifier: 3D:46:B2:C0:E8:E2:91:1D:8D:25:AF:86:9C:57:E5:B7:2E:16:82:9E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2E587C9032AD2433153C5E5E489B4758906E2676
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02368d39-5a4f-44bd-a7b6-9d87f3fcc37b.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.31.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:58:7c:90:32:ad:24:33:15:3c:5e:5e:48:9b:47:58:90:6e:26:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=b061f681c9ce4d963a65d69ce237b1cb40a78b5a3fdf0d2a67821f74c2209c81, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ec:69:46:37:de:37:81:d6:49:04:c6:2a:29:
22:0b:99:39:c0:d2:b9:f7:d9:08:c6:26:5f:0f:37:
0f:69:d0:5a:2f:a0:fb:2c:b1:c4:17:51:93:4e:99:
52:73:cf:cc:47:b4:7c:8f:9d:88:24:91:f4:86:4f:
0e:64:ef:28:9c:fc:8a:68:9b:d3:ff:95:12:78:5d:
a0:e4:96:2c:9d:47:45:d2:1e:4e:40:4e:c2:80:d5:
b7:17:b7:97:f3:d2:05:95:40:1b:76:03:8b:57:dc:
2c:03:78:72:da:28:89:91:2b:08:d1:08:33:2d:42:
35:ee:59:52:90:15:24:71:85:30:50:94:de:2d:53:
e4:02:08:f1:f0:7d:a3:6c:3f:fc:1e:f7:dd:ef:09:
90:7c:fa:0b:10:ac:64:b3:b1:e6:11:4a:93:dc:13:
2d:7f:28:d8:a0:1c:72:21:f1:95:e1:ee:6e:34:d2:
5e:40:09:d4:14:a1:2c:99:f2:1a:83:fe:82:ed:2a:
b3:a1:79:f9:37:63:cd:54:2c:84:33:1c:c3:5f:2c:
d6:a6:09:03:bd:43:c2:42:17:80:15:8b:4c:f2:42:
63:83:e4:c5:9f:f0:1a:49:56:5e:26:b0:51:0a:f3:
cc:4d:f0:19:14:c8:ca:6b:9c:74:dc:8e:ba:f8:e3:
74:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:46:B2:C0:E8:E2:91:1D:8D:25:AF:86:9C:57:E5:B7:2E:16:82:9E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02368d39-5a4f-44bd-a7b6-9d87f3fcc37b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.31.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0e:3e:54:5a:74:de:19:06:32:e6:48:bb:91:71:84:6f:15:b2:
6a:9f:da:f4:24:df:d0:e5:8c:53:a9:ee:ab:55:07:e3:22:fd:
13:79:27:a0:b6:0c:c7:a8:b7:a7:0b:a2:dc:03:83:67:81:5c:
ad:70:76:f2:66:53:52:e7:f3:80:dd:0e:56:83:74:b4:5e:31:
50:2c:dd:ff:e1:fa:86:7f:bb:40:97:4d:97:98:25:1b:3d:5e:
45:47:af:d1:3f:e7:92:13:00:0d:eb:98:4c:7c:1c:b4:f7:be:
63:59:9b:30:33:4d:f6:c5:46:e6:74:2c:16:8e:16:0f:55:d2:
94:0b:69:9d:f5:51:39:c6:65:f7:0c:5a:58:ab:b2:cc:f1:10:
2a:c2:9c:d7:ae:17:23:38:f5:48:4e:eb:56:5d:ef:11:24:cb:
0f:dc:2f:cb:9b:06:2d:32:f7:0b:d1:a4:a2:89:bc:f3:ee:72:
83:31:f1:9f:14:58:10:30:5d:aa:4c:d2:74:ef:5f:82:a4:66:
9c:52:a3:c2:31:b3:6a:3a:5a:5c:22:48:24:12:fc:bf:ec:fa:
b5:b7:ab:e9:f2:83:4a:f9:38:80:9f:94:32:30:06:03:20:c2:
fc:68:8f:a6:d7:bc:bb:9a:f4:35:52:5c:d1:59:44:fc:2c:ac:
d7:73:b8:27
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIULlh8kDKtJDMVPF5eSJtHWJBuJnYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTIxMDAwMDAwWhcNMjUwMjI1MjM1OTU5
WjB6MUkwRwYDVQQFE0BiMDYxZjY4MWM5Y2U0ZDk2M2E2NWQ2OWNlMjM3YjFjYjQw
YTc4YjVhM2ZkZjBkMmE2NzgyMWY3NGMyMjA5YzgxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDY7GlGN943gdZJBMYqKSILmTnA0rn32QjGJl8PNw9p0Fov
oPssscQXUZNOmVJzz8xHtHyPnYgkkfSGTw5k7yic/Ipom9P/lRJ4XaDkliydR0XS
Hk5ATsKA1bcXt5fz0gWVQBt2A4tX3CwDeHLaKImRKwjRCDMtQjXuWVKQFSRxhTBQ
lN4tU+QCCPHwfaNsP/we993vCZB8+gsQrGSzseYRSpPcEy1/KNigHHIh8ZXh7m40
0l5ACdQUoSyZ8hqD/oLtKrOhefk3Y81ULIQzHMNfLNamCQO9Q8JCF4AVi0zyQmOD
5MWf8BpJVl4msFEK88xN8BkUyMprnHTcjrr443RDAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUPUaywOjikR2NJa+GnFflty4Wgp4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzAyMzY4ZDM5LTVhNGYtNDRiZC1hN2I2LTlkODdmM2ZjYzM3Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQHzANBgkqhkiG9w0BAQsFAAOCAQEADj5UWnTeGQYy5ki7kXGEbxWyap/a
9CTf0OWMU6nuq1UH4yL9E3knoLYMx6i3pwui3AODZ4FcrXB28mZTUufzgN0OVoN0
tF4xUCzd/+H6hn+7QJdNl5glGz1eRUev0T/nkhMADeuYTHwctPe+Y1mbMDNN9sVG
5nQsFo4WD1XSlAtpnfVROcZl9wxaWKuyzPEQKsKc164XIzj1SE7rVl3vESTLD9wv
y5sGLTL3C9Gkoom88+5ygzHxnxRYEDBdqkzSdO9fgqRmnFKjwjGzajpaXCJIJBL8
v+z6tber6fKDSvk4gJ+UMjAGAyDC/GiPpte8u5r0NVJc0VlE/Cys13O4Jw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:21 2025 by rpki-client