Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0bf782f4-80f3-4512-91df-e930588d2fb7.roa
File: 0bf782f4-80f3-4512-91df-e930588d2fb7.roa (raw, json)
Hash identifier: MoFunWr7xVVng/M+SVMIlk5an+lp3Z5mlfQsDUTotUg=
Subject key identifier: F1:C0:7D:40:C1:F4:B0:69:BB:A0:71:05:A0:FB:E3:6A:AA:C9:B8:B3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 32E63EF52A3FCC45133FECFCC292A1A4A70D9295
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0bf782f4-80f3-4512-91df-e930588d2fb7.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f00:8140::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:e6:3e:f5:2a:3f:cc:45:13:3f:ec:fc:c2:92:a1:a4:a7:0d:92:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=8ee54594c7eb507ab49495f78c0f8ce40eadf81c06993e0b967b9b6fd99a9abd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1b:33:d4:09:94:9b:e7:14:9e:ca:b7:bc:13:
84:dd:53:c2:9b:c1:d1:50:eb:eb:8d:24:fc:ab:23:
ed:bc:3b:91:f9:1b:6e:a4:7a:85:cc:7b:96:e3:b9:
e1:1d:c8:4e:7d:1f:62:30:20:c5:ec:9f:9c:9a:0d:
db:ae:ae:6a:c5:06:9b:6e:61:c7:62:a2:4b:26:52:
40:5a:cd:89:b4:86:26:02:1f:a6:5c:5a:a4:6d:80:
7d:d2:2e:1b:0e:cc:e6:40:93:18:75:5f:f1:6f:df:
6e:9e:28:73:25:fc:eb:9c:81:a7:e5:9d:1b:b8:47:
f2:f0:60:e7:78:f4:ec:2b:39:a9:cb:d7:6b:c1:0d:
18:23:8b:02:03:92:39:47:cf:c8:ff:be:fc:b2:c6:
81:94:11:86:66:74:3d:54:ec:a2:c2:17:2c:f4:e3:
cb:3f:3c:57:a4:40:22:94:9a:21:8f:97:af:8c:a4:
39:25:78:2f:0e:81:db:8e:b7:78:95:fe:19:40:c5:
de:2e:f8:24:ea:d8:5a:95:b4:e3:09:d1:45:65:05:
61:41:dc:f5:97:27:b7:86:bf:0c:c4:d7:30:ed:c9:
77:45:5f:fb:6f:e7:81:ec:b3:79:6b:f5:e5:b5:98:
0c:fe:9a:68:32:1e:db:c9:c6:fb:cf:88:5d:f8:5d:
99:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C0:7D:40:C1:F4:B0:69:BB:A0:71:05:A0:FB:E3:6A:AA:C9:B8:B3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0bf782f4-80f3-4512-91df-e930588d2fb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00:8140::/48
Signature Algorithm: sha256WithRSAEncryption
a5:30:cb:9c:d0:c8:cd:89:69:5f:26:aa:83:fa:5e:a4:05:3c:
0e:e3:21:3f:17:c2:7d:b0:be:33:45:f3:23:d6:86:04:0c:9f:
7c:bc:8a:0a:5a:4c:81:ca:96:87:e4:df:f0:f7:cf:01:85:d0:
6f:95:38:dc:d9:a3:ff:d4:8f:28:43:7c:28:09:de:fe:bb:ce:
02:ef:2a:17:32:5b:d8:17:69:48:e7:38:cb:a7:21:5a:f9:ca:
b4:c2:84:5e:58:08:3d:65:84:78:36:3f:3b:7d:fa:ec:ed:3f:
b7:e8:18:8e:c6:6e:c9:28:09:2a:08:49:e9:dd:c2:82:c1:6e:
39:a9:ad:6c:05:23:84:02:ef:26:74:85:c9:dc:c2:45:6c:9e:
01:5d:f6:d3:c3:52:f2:62:1e:7f:87:0e:34:6f:ea:b4:2c:1c:
c5:61:0d:e6:92:82:ad:e0:23:f7:fa:34:cc:b5:71:4f:88:94:
36:4f:86:14:c5:a1:b0:16:dc:43:93:c6:24:1e:85:6b:51:09:
1b:5d:85:1e:ea:d3:df:ab:a6:7a:cf:ee:37:37:ec:b0:31:b6:
9b:a7:a7:37:22:41:db:5e:5a:1b:cb:3b:da:28:46:0e:8e:90:
04:ff:50:10:45:40:1e:23:b2:b2:40:ca:cc:d3:7f:c9:43:1e:
fe:97:3b:36
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUMuY+9So/zEUTP+z8wpKhpKcNkpUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA3MDAwMDAwWhcNMjUwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0A4ZWU1NDU5NGM3ZWI1MDdhYjQ5NDk1Zjc4YzBmOGNlNDBl
YWRmODFjMDY5OTNlMGI5NjdiOWI2ZmQ5OWE5YWJkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDPGzPUCZSb5xSeyre8E4TdU8KbwdFQ6+uNJPyrI+28O5H5
G26keoXMe5bjueEdyE59H2IwIMXsn5yaDduurmrFBptuYcdioksmUkBazYm0hiYC
H6ZcWqRtgH3SLhsOzOZAkxh1X/Fv326eKHMl/OucgaflnRu4R/LwYOd49OwrOanL
12vBDRgjiwIDkjlHz8j/vvyyxoGUEYZmdD1U7KLCFyz048s/PFekQCKUmiGPl6+M
pDkleC8OgduOt3iV/hlAxd4u+CTq2FqVtOMJ0UVlBWFB3PWXJ7eGvwzE1zDtyXdF
X/tv54Hss3lr9eW1mAz+mmgyHtvJxvvPiF34XZkFAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU8cB9QMH0sGm7oHEFoPvjaqrJuLMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBiZjc4MmY0LTgwZjMtNDUxMi05MWRmLWU5MzA1ODhkMmZiNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB8AgUAwDQYJKoZIhvcNAQELBQADggEBAKUwy5zQyM2JaV8mqoP6XqQF
PA7jIT8Xwn2wvjNF8yPWhgQMn3y8igpaTIHKlofk3/D3zwGF0G+VONzZo//UjyhD
fCgJ3v67zgLvKhcyW9gXaUjnOMunIVr5yrTChF5YCD1lhHg2Pzt9+uztP7foGI7G
bskoCSoISendwoLBbjmprWwFI4QC7yZ0hcncwkVsngFd9tPDUvJiHn+HDjRv6rQs
HMVhDeaSgq3gI/f6NMy1cU+IlDZPhhTFobAW3EOTxiQehWtRCRtdhR7q09+rpnrP
7jc37LAxtpunpzciQdteWhvLO9ooRg6OkAT/UBBFQB4jsrJAyszTf8lDHv6XOzY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:38 2025 by rpki-client