Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08757016-fb8f-4c6c-a4ea-4c395f43a59d.roa
File: 08757016-fb8f-4c6c-a4ea-4c395f43a59d.roa (raw, json)
Hash identifier: GaA+VUTFuxCqX33b2qRF7Xfn55Tf3B1kBmAKd3PSGJ8=
Subject key identifier: 33:C7:62:49:55:AF:E9:DF:54:2E:98:7A:71:ED:0F:CA:3C:15:D9:4E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0431406175607A2A35711F33ACA9857598AC2278
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08757016-fb8f-4c6c-a4ea-4c395f43a59d.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.18.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:31:40:61:75:60:7a:2a:35:71:1f:33:ac:a9:85:75:98:ac:22:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=5da3b95cf386b475e77c59e8f025a18dd2685db4102e87fe86878fbf78a59376, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e4:9b:15:52:72:97:54:27:18:8f:3b:c7:16:
a0:bb:5c:50:fa:fc:17:71:19:41:0f:44:91:0f:fc:
ab:f2:28:0f:44:5a:c2:cf:8d:90:49:b4:cc:35:18:
17:95:5c:d7:7a:a7:3c:b6:16:9d:ee:90:c2:8f:1d:
e1:7b:21:c7:74:79:05:82:7b:d9:0f:6e:d4:6e:53:
65:47:ca:a4:a5:75:37:23:a8:53:7e:2e:d6:f8:b0:
1a:f5:6b:51:dc:0e:bd:95:7e:77:bf:2e:42:12:e8:
f7:c1:44:fe:14:3b:41:5a:c4:47:f6:47:1b:a8:bf:
3d:3e:bf:4f:cf:e7:b8:2e:77:38:63:d9:41:50:dd:
6a:7d:9d:44:58:ec:fb:d6:06:1e:05:55:45:0e:c0:
91:6d:8a:a1:44:4e:35:59:f6:ad:7b:0f:33:d1:0d:
15:11:34:17:8c:d5:bf:cb:68:cb:41:73:ce:68:0b:
f4:3b:0e:ad:b5:4e:20:4d:3a:ad:ec:b9:3a:9e:1e:
e1:81:56:08:1b:6c:db:ff:f5:ef:c2:3b:c5:5e:f0:
a3:e9:b9:0a:38:42:6f:0b:7b:a4:b5:99:f4:41:ec:
bb:7c:46:45:e9:4a:78:cd:e9:3b:92:4d:e7:d4:6d:
ea:be:1c:63:10:2a:1a:52:e3:97:65:09:5b:28:81:
b3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C7:62:49:55:AF:E9:DF:54:2E:98:7A:71:ED:0F:CA:3C:15:D9:4E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08757016-fb8f-4c6c-a4ea-4c395f43a59d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.18.148.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:4f:63:25:3e:00:11:76:05:7d:66:22:e3:c4:e4:82:70:73:
e1:a4:f5:f9:f0:39:d7:f8:95:86:60:53:11:0d:d3:f0:8e:eb:
8b:bf:aa:7e:9b:2f:f3:c9:c0:5f:77:ec:a7:6f:f8:14:81:8b:
e1:a9:11:81:30:7e:ab:d2:fd:df:9a:9b:f2:d0:6e:bb:d7:ae:
ee:16:1d:27:2a:dc:21:20:81:f6:7c:38:00:28:de:98:ee:fd:
73:93:a3:3a:51:22:54:65:84:22:a4:a5:57:c9:94:58:d4:f6:
84:8b:55:32:a5:b2:e2:52:cc:df:49:36:cd:8f:4c:b1:d8:53:
43:93:41:d0:f6:0f:2a:37:71:09:e9:2c:d6:53:3a:80:71:16:
a5:ae:15:dd:a9:d8:05:af:25:e2:31:55:1f:65:3c:16:57:0a:
be:9c:21:6c:94:0c:73:91:c1:d0:27:e8:b4:c4:82:66:06:64:
b1:49:22:18:d6:da:8c:9c:c7:8c:06:40:6d:a4:4a:21:8f:43:
f3:46:c0:bf:42:67:bf:50:82:e3:d0:0f:fb:10:8e:75:23:e0:
df:31:20:bb:59:01:58:e7:0b:a2:08:49:60:64:2c:55:f1:fe:
76:f1:21:57:ea:44:37:bb:1a:54:ff:2e:c9:bf:ba:cb:70:3e:
67:29:24:71
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBDFAYXVgeio1cR8zrKmFdZisIngwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI3MDAwMDAwWhcNMjUwMzAzMjM1OTU5
WjB6MUkwRwYDVQQFE0A1ZGEzYjk1Y2YzODZiNDc1ZTc3YzU5ZThmMDI1YTE4ZGQy
Njg1ZGI0MTAyZTg3ZmU4Njg3OGZiZjc4YTU5Mzc2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDE5JsVUnKXVCcYjzvHFqC7XFD6/BdxGUEPRJEP/KvyKA9E
WsLPjZBJtMw1GBeVXNd6pzy2Fp3ukMKPHeF7Icd0eQWCe9kPbtRuU2VHyqSldTcj
qFN+Ltb4sBr1a1HcDr2Vfne/LkIS6PfBRP4UO0FaxEf2Rxuovz0+v0/P57gudzhj
2UFQ3Wp9nURY7PvWBh4FVUUOwJFtiqFETjVZ9q17DzPRDRURNBeM1b/LaMtBc85o
C/Q7Dq21TiBNOq3suTqeHuGBVggbbNv/9e/CO8Ve8KPpuQo4Qm8Le6S1mfRB7Lt8
RkXpSnjN6TuSTefUbeq+HGMQKhpS45dlCVsogbOLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUM8diSVWv6d9ULph6ce0PyjwV2U4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA4NzU3MDE2LWZiOGYtNGM2Yy1hNGVhLTRjMzk1ZjQzYTU5ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEyEpQwDQYJKoZIhvcNAQELBQADggEBAD5PYyU+ABF2BX1mIuPE5IJwc+Gk
9fnwOdf4lYZgUxEN0/CO64u/qn6bL/PJwF937Kdv+BSBi+GpEYEwfqvS/d+am/LQ
brvXru4WHScq3CEggfZ8OAAo3pju/XOTozpRIlRlhCKkpVfJlFjU9oSLVTKlsuJS
zN9JNs2PTLHYU0OTQdD2Dyo3cQnpLNZTOoBxFqWuFd2p2AWvJeIxVR9lPBZXCr6c
IWyUDHORwdAn6LTEgmYGZLFJIhjW2oycx4wGQG2kSiGPQ/NGwL9CZ79QguPQD/sQ
jnUj4N8xILtZAVjnC6IISWBkLFXx/nbxIVfqRDe7GlT/Lsm/ustwPmcpJHE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:44:02 2025 by rpki-client