Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03f274e7-21f5-4aef-abd3-5f9f8050b35a.roa
File: 03f274e7-21f5-4aef-abd3-5f9f8050b35a.roa (raw, json)
Hash identifier: rXJjaQz7f8Rlgz4iBUEbjGbSKEkO5Dynr4hvnUmQI7c=
Subject key identifier: 07:76:BC:31:CF:3D:0E:6C:9B:84:8C:24:C0:55:E2:F1:9D:46:6F:FA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 26C6BC331202EFB254B91C41AEEE0122509C2349
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03f274e7-21f5-4aef-abd3-5f9f8050b35a.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.214.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:c6:bc:33:12:02:ef:b2:54:b9:1c:41:ae:ee:01:22:50:9c:23:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=44b3c2a283ec6f470ec44fba058827f1748a03c074b32fb6f893b04e95522261, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:5b:3a:06:3f:89:dc:91:51:42:57:35:6b:
09:9a:3c:bc:27:a5:eb:68:54:f3:3e:f8:ab:94:88:
ab:60:47:b5:7d:4e:b8:06:07:e9:3e:a6:40:db:0b:
0c:2c:6d:49:6b:fb:7d:76:b2:94:ec:9a:20:ad:8e:
fb:84:22:5f:b9:aa:bb:d5:4f:af:d2:e9:e4:8a:83:
07:99:60:60:b1:80:03:99:9e:41:75:9b:1e:52:e6:
ad:0b:c5:ce:b1:12:40:3a:ea:d9:50:6f:51:56:f1:
3a:13:f2:c8:67:ac:c9:1f:34:53:01:e9:b1:25:dd:
56:d2:f6:d0:51:40:ef:3f:b7:3c:af:06:86:23:9f:
7d:40:09:3f:2a:0f:35:75:55:4f:88:be:4e:03:80:
c1:dd:44:dc:cb:93:41:ac:aa:26:43:f2:67:dc:3d:
ae:f2:fa:94:19:f8:83:fd:1f:e1:b4:88:fa:a8:ed:
43:f5:8a:9c:22:78:df:c3:c0:fb:e6:4e:e2:38:cd:
36:88:13:d5:3b:8f:93:3c:ef:57:db:f3:86:15:ae:
e2:64:70:9f:83:03:65:09:b0:87:64:bf:a9:90:87:
87:43:bc:4c:df:b1:85:9a:be:28:a2:1d:4c:26:3c:
80:22:de:71:fc:53:d4:5f:f3:4c:81:14:3b:36:2b:
22:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:76:BC:31:CF:3D:0E:6C:9B:84:8C:24:C0:55:E2:F1:9D:46:6F:FA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03f274e7-21f5-4aef-abd3-5f9f8050b35a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.214.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9b:0d:39:94:89:d0:75:7d:aa:02:80:56:90:64:44:9e:6e:c0:
98:3e:51:57:63:c3:89:78:8c:9d:a7:2a:92:c6:90:a2:c7:50:
e8:3e:41:0d:8b:30:b7:3d:7b:bc:b7:51:db:a8:22:bf:17:a4:
22:49:fe:63:2e:16:1a:f0:41:e0:c8:e5:23:4e:82:ad:37:76:
c4:83:41:33:30:d2:00:a5:21:63:9d:0a:7f:0e:4c:8a:56:75:
78:5e:9e:84:e0:23:2a:c9:11:2e:20:92:69:5a:3c:c5:85:16:
cc:a0:8f:00:30:32:96:17:06:07:d9:64:b7:03:a1:9c:e3:ce:
89:ef:c0:c9:9b:30:57:ad:a6:52:55:e5:48:55:34:b3:bb:fe:
a6:18:b8:d7:1a:9c:8c:a7:5c:8f:33:b7:b5:70:81:d3:dd:47:
fe:89:40:8a:07:17:40:73:68:ff:68:90:24:4a:23:09:ae:94:
ae:04:35:49:40:cc:5c:3a:d8:ce:08:6a:be:f2:08:37:68:c2:
98:fa:9b:2a:ec:08:11:e2:6e:2d:36:55:54:d6:c4:a0:82:89:
cf:a9:75:14:30:e1:3f:91:91:5a:26:69:3e:67:ac:d8:48:36:
54:38:cd:5b:d5:b0:d9:cb:68:f5:a8:17:f7:68:17:e9:5e:1c:
2e:9c:20:7e
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUJsa8MxIC77JUuRxBru4BIlCcI0kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTIxMDAwMDAwWhcNMjUwMjI1MjM1OTU5
WjB6MUkwRwYDVQQFE0A0NGIzYzJhMjgzZWM2ZjQ3MGVjNDRmYmEwNTg4MjdmMTc0
OGEwM2MwNzRiMzJmYjZmODkzYjA0ZTk1NTIyMjYxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCx0Vs6Bj+J3JFRQlc1awmaPLwnpetoVPM++KuUiKtgR7V9
TrgGB+k+pkDbCwwsbUlr+312spTsmiCtjvuEIl+5qrvVT6/S6eSKgweZYGCxgAOZ
nkF1mx5S5q0Lxc6xEkA66tlQb1FW8ToT8shnrMkfNFMB6bEl3VbS9tBRQO8/tzyv
BoYjn31ACT8qDzV1VU+Ivk4DgMHdRNzLk0GsqiZD8mfcPa7y+pQZ+IP9H+G0iPqo
7UP1ipwieN/DwPvmTuI4zTaIE9U7j5M871fb84YVruJkcJ+DA2UJsIdkv6mQh4dD
vEzfsYWaviiiHUwmPIAi3nH8U9Rf80yBFDs2KyIjAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUB3a8Mc89DmybhIwkwFXi8Z1Gb/owHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzAzZjI3NGU3LTIxZjUtNGFlZi1hYmQzLTVmOWY4MDUwYjM1YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQ1jANBgkqhkiG9w0BAQsFAAOCAQEAmw05lInQdX2qAoBWkGREnm7AmD5R
V2PDiXiMnacqksaQosdQ6D5BDYswtz17vLdR26givxekIkn+Yy4WGvBB4MjlI06C
rTd2xINBMzDSAKUhY50Kfw5MilZ1eF6ehOAjKskRLiCSaVo8xYUWzKCPADAylhcG
B9lktwOhnOPOie/AyZswV62mUlXlSFU0s7v+phi41xqcjKdcjzO3tXCB091H/olA
igcXQHNo/2iQJEojCa6UrgQ1SUDMXDrYzghqvvIIN2jCmPqbKuwIEeJuLTZVVNbE
oIKJz6l1FDDhP5GRWiZpPmes2Eg2VDjNW9Ww2cto9agX92gX6V4cLpwgfg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:31 2025 by rpki-client