Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15bb3a95-996e-4ced-b889-69ac9faeacfa.roa
File: 15bb3a95-996e-4ced-b889-69ac9faeacfa.roa (raw, json)
Hash identifier: OqdKkbG2+0LgCRyH/CoYBHW9jXOccCL6cOVu5Iqnybw=
Subject key identifier: 96:AD:CE:C5:94:90:63:55:DD:8A:CE:22:DE:D9:13:EF:22:0D:78:DD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0A5EE0A09C225B5358CD5663208C7FEA6C71D623
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15bb3a95-996e-4ced-b889-69ac9faeacfa.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.49.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:5e:e0:a0:9c:22:5b:53:58:cd:56:63:20:8c:7f:ea:6c:71:d6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=c392cff5f2f7b3af3b558f14fde81b35eddf43375ac7f0aac83b03ec44efb8bc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:79:09:34:16:51:c1:ae:57:b8:00:ef:ec:
aa:2d:61:e3:0c:5d:58:65:11:09:ca:94:e6:bf:89:
4e:41:42:19:5e:f5:73:3e:79:ae:4d:c4:65:54:88:
be:9f:df:21:9e:f6:7b:cb:6a:b5:d1:96:1b:ae:aa:
78:59:50:ec:40:b4:f1:c2:2c:d2:84:18:da:b1:5c:
c6:88:a8:00:da:6d:02:fd:89:0b:eb:13:10:77:f7:
3e:19:14:c4:75:44:9f:04:8a:5f:49:40:0d:20:42:
4d:af:09:94:1a:b1:5b:f4:3f:75:91:c4:f7:14:10:
fb:6b:8e:74:60:bc:f1:aa:ad:1c:c1:5a:5d:19:11:
c8:49:9c:24:e2:bb:db:32:97:1e:d4:25:e1:e1:43:
fd:5b:6d:82:5a:86:b7:09:c2:fa:ca:b2:82:49:31:
b1:9d:19:4f:bb:57:a9:29:14:3e:ab:45:93:b7:e4:
fe:76:e8:e9:7e:1d:b4:47:ed:9d:f9:c5:9f:79:b3:
34:bc:c3:4a:cf:8b:7d:d4:38:b7:a9:f2:22:1d:1b:
18:f5:91:84:85:a5:a0:16:f4:db:ce:2e:01:7d:88:
c4:ac:c2:d9:21:98:6d:7c:16:ad:2d:c0:99:c2:70:
01:d1:a4:7e:a2:7c:fc:85:e2:a5:62:da:02:60:c2:
12:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AD:CE:C5:94:90:63:55:DD:8A:CE:22:DE:D9:13:EF:22:0D:78:DD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15bb3a95-996e-4ced-b889-69ac9faeacfa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.49.64.0/20
Signature Algorithm: sha256WithRSAEncryption
b6:2d:52:4e:14:cb:24:be:06:78:1e:31:08:a3:1f:b6:52:af:
f2:d9:a8:99:ca:70:43:c4:8a:43:8c:de:cb:a5:f8:6b:d6:7a:
13:74:3c:2f:bc:bd:a1:be:ff:6d:dd:8e:c1:a2:85:57:43:3e:
59:cb:cb:88:10:0f:02:da:35:07:ec:e4:f0:e2:2c:f9:9a:a5:
bd:78:17:e9:ee:02:7a:db:1a:17:b7:f6:10:67:a4:14:3f:6d:
ce:b6:ea:54:a5:11:e9:2b:43:6a:58:4c:6b:a5:18:6b:57:67:
9b:70:a1:64:33:a0:84:11:ed:fa:1d:3c:8d:10:a2:16:2b:44:
42:29:df:3a:c5:84:da:b3:e0:46:b4:4d:9c:2e:1d:68:ac:c3:
76:13:e2:cc:ae:da:60:a2:7a:1e:b2:dd:a3:f9:17:40:7b:d5:
05:65:de:63:8d:51:8d:1c:ce:b4:11:fb:1e:d5:e8:5f:8c:20:
dd:8a:63:2f:a5:ec:28:3e:d9:88:df:df:a7:89:85:fe:0c:65:
24:ba:94:ec:a8:be:da:5d:db:03:9d:eb:12:07:4c:c7:d9:77:
e1:d5:a6:77:f3:ac:5a:9d:0e:12:6d:64:f7:67:4b:6c:a6:fd:
90:9b:90:9b:08:f8:6e:98:12:06:c8:95:25:9b:34:3c:ad:24:
26:2b:7b:57
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCl7goJwiW1NYzVZjIIx/6mxx1iMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI4MDAwMDAwWhcNMjUwMzA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BjMzkyY2ZmNWYyZjdiM2FmM2I1NThmMTRmZGU4MWIzNWVk
ZGY0MzM3NWFjN2YwYWFjODNiMDNlYzQ0ZWZiOGJjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCspXkJNBZRwa5XuADv7KotYeMMXVhlEQnKlOa/iU5BQhle
9XM+ea5NxGVUiL6f3yGe9nvLarXRlhuuqnhZUOxAtPHCLNKEGNqxXMaIqADabQL9
iQvrExB39z4ZFMR1RJ8Eil9JQA0gQk2vCZQasVv0P3WRxPcUEPtrjnRgvPGqrRzB
Wl0ZEchJnCTiu9sylx7UJeHhQ/1bbYJahrcJwvrKsoJJMbGdGU+7V6kpFD6rRZO3
5P526Ol+HbRH7Z35xZ95szS8w0rPi33UOLep8iIdGxj1kYSFpaAW9NvOLgF9iMSs
wtkhmG18Fq0twJnCcAHRpH6ifPyF4qVi2gJgwhIdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUlq3OxZSQY1Xdis4i3tkT7yINeN0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE1YmIzYTk1LTk5NmUtNGNlZC1iODg5LTY5YWM5ZmFlYWNmYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATYMUAwDQYJKoZIhvcNAQELBQADggEBALYtUk4UyyS+BngeMQijH7ZSr/LZ
qJnKcEPEikOM3sul+GvWehN0PC+8vaG+/23djsGihVdDPlnLy4gQDwLaNQfs5PDi
LPmapb14F+nuAnrbGhe39hBnpBQ/bc626lSlEekrQ2pYTGulGGtXZ5twoWQzoIQR
7fodPI0QohYrREIp3zrFhNqz4Ea0TZwuHWisw3YT4syu2mCieh6y3aP5F0B71QVl
3mONUY0czrQR+x7V6F+MIN2KYy+l7Cg+2Yjf36eJhf4MZSS6lOyovtpd2wOd6xIH
TMfZd+HVpnfzrFqdDhJtZPdnS2ym/ZCbkJsI+G6YEgbIlSWbNDytJCYre1c=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:41 2025 by rpki-client