Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2753f989-5094-40f6-9952-e005b9c4f0d6.roa
File: 2753f989-5094-40f6-9952-e005b9c4f0d6.roa (raw, json)
Hash identifier: 1I77Mt5IgyaYmSjUEit+mjnbBoe9OVrug3GTG+eSKFo=
Subject key identifier: EC:4F:1B:F0:82:FC:C5:19:9C:46:2C:84:C0:65:3D:79:A3:F0:94:81
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 185A9AD287955597D6297E5BD89C3A4CABBC273D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2753f989-5094-40f6-9952-e005b9c4f0d6.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 44.192.0.0/11 maxlen: 11
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:5a:9a:d2:87:95:55:97:d6:29:7e:5b:d8:9c:3a:4c:ab:bc:27:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=b331af6e7f36d93a1e072415bdc7ad07d24126c41e0c6a01ceaa00714885ae98, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:1c:06:6d:12:d8:5d:f6:f3:42:37:56:2d:
13:e2:57:18:e1:be:a8:0d:04:2b:c0:b8:ee:de:cd:
dd:b8:38:9a:02:a9:79:34:82:aa:ce:79:0d:91:9f:
c2:2a:23:ff:03:5e:65:c7:db:46:de:4b:36:a6:e3:
1e:a5:9a:7f:e9:74:43:36:00:35:47:59:e0:40:ee:
99:ee:9d:61:61:a6:05:94:57:84:d8:a8:be:b1:8a:
ad:4e:78:18:85:b7:ba:0c:a7:41:93:4c:90:81:0e:
7b:80:10:1f:ee:1a:e4:be:27:cf:13:1d:8c:63:db:
18:a8:88:f4:f2:e6:45:fe:3b:e9:6d:bc:86:3f:cb:
15:af:f5:d0:d5:76:01:d9:f2:4e:79:18:b9:e1:e9:
a7:05:2c:a1:5a:fc:d9:1e:9d:7d:63:a9:72:cc:3c:
60:84:ae:87:42:4a:b2:f7:08:48:d6:2d:29:61:f7:
66:13:bd:5c:27:8c:42:5c:89:58:7d:df:3d:f2:90:
05:66:a3:aa:26:53:53:44:38:41:f7:35:4e:68:a4:
2e:ee:f0:c4:35:2a:dd:19:0d:08:25:58:36:69:3e:
c9:86:f8:97:2f:74:53:4b:a6:e6:67:19:8f:c9:e7:
27:1e:e7:78:1e:b2:07:6a:2b:78:b7:f2:b6:c1:5e:
57:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4F:1B:F0:82:FC:C5:19:9C:46:2C:84:C0:65:3D:79:A3:F0:94:81
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2753f989-5094-40f6-9952-e005b9c4f0d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
44.192.0.0/11
Signature Algorithm: sha256WithRSAEncryption
35:11:1d:24:53:5d:a9:94:5d:28:72:0a:dc:ff:7c:15:d3:75:
15:c4:eb:9b:91:48:00:d0:c0:8d:62:6b:11:2e:0d:b8:40:dc:
fd:16:c9:c0:90:7b:dc:65:1e:7b:42:4f:19:bc:47:57:f2:d3:
88:2d:32:b4:55:b3:4a:57:79:de:d3:e0:d5:5a:8f:e2:be:c4:
2a:b7:79:8b:08:9a:b3:f7:99:3d:e8:5d:b0:b1:39:1f:f2:c1:
1e:54:bf:99:3f:23:c5:ae:03:e3:3e:fc:b8:f4:57:61:f0:2b:
fc:ea:ae:9f:96:f5:33:13:6e:f6:1e:f4:e5:8c:ee:c7:d5:88:
e6:55:06:a7:f6:9b:59:50:7a:77:70:36:26:73:09:45:ef:fc:
9d:04:44:05:23:fe:3f:56:44:c5:86:b6:4e:2e:2c:ed:c0:8d:
de:7d:f6:ec:c9:af:45:20:50:c3:bc:90:2d:61:64:35:a2:9d:
4c:f5:0f:41:c1:a9:2e:82:59:db:e6:86:94:7d:56:3b:8f:69:
83:4c:18:0d:f9:a6:57:3d:98:1e:5c:27:03:c1:b6:a4:e3:b9:
6b:5b:26:4f:72:09:54:12:98:84:94:1a:5d:80:9b:b4:54:8f:
52:61:3f:44:40:ca:b9:45:4f:2a:0e:f8:ba:83:3e:05:0a:7f:
7c:f3:f1:56
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUGFqa0oeVVZfWKX5b2Jw6TKu8Jz0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI3MDAwMDAwWhcNMjUwMzAzMjM1OTU5
WjB6MUkwRwYDVQQFE0BiMzMxYWY2ZTdmMzZkOTNhMWUwNzI0MTViZGM3YWQwN2Qy
NDEyNmM0MWUwYzZhMDFjZWFhMDA3MTQ4ODVhZTk4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/vhwGbRLYXfbzQjdWLRPiVxjhvqgNBCvAuO7ezd24OJoC
qXk0gqrOeQ2Rn8IqI/8DXmXH20beSzam4x6lmn/pdEM2ADVHWeBA7pnunWFhpgWU
V4TYqL6xiq1OeBiFt7oMp0GTTJCBDnuAEB/uGuS+J88THYxj2xioiPTy5kX+O+lt
vIY/yxWv9dDVdgHZ8k55GLnh6acFLKFa/NkenX1jqXLMPGCErodCSrL3CEjWLSlh
92YTvVwnjEJciVh93z3ykAVmo6omU1NEOEH3NU5opC7u8MQ1Kt0ZDQglWDZpPsmG
+JcvdFNLpuZnGY/J5yce53gesgdqK3i38rbBXldPAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU7E8b8IL8xRmcRiyEwGU9eaPwlIEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI3NTNmOTg5LTUwOTQtNDBmNi05OTUyLWUwMDViOWM0ZjBkNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwUswDANBgkqhkiG9w0BAQsFAAOCAQEANREdJFNdqZRdKHIK3P98FdN1FcTr
m5FIANDAjWJrES4NuEDc/RbJwJB73GUee0JPGbxHV/LTiC0ytFWzSld53tPg1VqP
4r7EKrd5iwias/eZPehdsLE5H/LBHlS/mT8jxa4D4z78uPRXYfAr/Oqun5b1MxNu
9h705Yzux9WI5lUGp/abWVB6d3A2JnMJRe/8nQREBSP+P1ZExYa2Ti4s7cCN3n32
7MmvRSBQw7yQLWFkNaKdTPUPQcGpLoJZ2+aGlH1WO49pg0wYDfmmVz2YHlwnA8G2
pOO5a1smT3IJVBKYhJQaXYCbtFSPUmE/REDKuUVPKg74uoM+BQp/fPPxVg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:59 2025 by rpki-client