Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35d0a7ea-9635-49d3-ac69-ce3bbcf5fdc7.roa
File: 35d0a7ea-9635-49d3-ac69-ce3bbcf5fdc7.roa (raw, json)
Hash identifier: bQTD9z3yxniwIq0VV1z29iWSRxgoj0+9s91415qNqPc=
Subject key identifier: 5F:23:D9:28:23:AC:FD:DD:DB:4B:4C:A7:7F:5A:D5:F1:7B:17:68:47
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 37CB6AC1144D158D304FA8B44BE0BB76EE6D9DA1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35d0a7ea-9635-49d3-ac69-ce3bbcf5fdc7.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:c000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:cb:6a:c1:14:4d:15:8d:30:4f:a8:b4:4b:e0:bb:76:ee:6d:9d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=ccfa2bbbf7c10c6d1528c9fe8c024dcf5dcb520a6f00f716eb738ce843c203a1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d2:71:44:0f:42:a7:19:b3:18:1f:a6:32:c6:
ea:8a:10:05:26:07:2c:37:26:74:4c:22:e0:66:9e:
53:57:6d:28:4f:66:2f:55:da:81:18:16:8a:b8:f2:
43:55:ea:68:98:cf:44:6f:9b:9a:f5:91:01:1f:0a:
44:c6:0b:55:07:f8:18:9b:1a:b1:9c:b5:de:82:54:
d3:54:ea:1b:ec:b5:57:c6:db:04:4c:68:7d:43:30:
80:f9:00:4b:fa:30:e2:84:74:f9:df:89:59:09:74:
ac:d2:da:0e:4e:b5:4a:68:17:85:ee:a2:9d:3c:62:
c9:d8:34:ae:5c:13:26:86:38:ef:65:4d:81:09:49:
3c:bb:0f:7e:f8:ff:a6:25:eb:51:63:69:25:2b:bb:
51:1f:4e:7f:a4:97:de:10:0c:ac:30:6d:cd:39:af:
e4:b7:e9:29:67:d1:d2:b1:0d:b0:06:3e:bd:66:f8:
13:ac:89:bf:73:dc:6c:1e:8d:57:66:bc:47:5d:d6:
b3:7a:58:95:96:cb:99:96:ed:28:3f:0c:52:14:c7:
06:f2:52:ae:76:e9:df:35:3f:78:31:de:5a:6d:13:
39:be:e0:51:be:94:e0:5e:4d:31:77:94:c0:b1:9b:
b6:76:93:d3:01:e5:07:f6:da:48:3d:f2:47:d5:b4:
e0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:23:D9:28:23:AC:FD:DD:DB:4B:4C:A7:7F:5A:D5:F1:7B:17:68:47
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35d0a7ea-9635-49d3-ac69-ce3bbcf5fdc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:c000::/40
Signature Algorithm: sha256WithRSAEncryption
75:87:b4:e7:53:de:95:0f:67:22:b8:7b:46:a2:57:88:06:e4:
b4:fb:ac:f3:9c:7b:ff:13:b8:42:95:17:b2:97:15:6b:1c:4a:
bf:9e:3b:54:db:f4:80:89:67:40:16:b6:35:32:af:f6:62:2a:
51:d1:eb:35:0d:09:c5:e4:68:eb:c9:95:e0:de:a9:b4:9b:37:
ab:f4:80:ff:b4:a4:4f:72:3e:e8:a5:36:dc:e0:83:70:87:48:
14:48:75:75:c2:6f:2b:1a:9f:17:b6:b1:65:b9:43:f4:ab:81:
a7:71:1b:ef:73:09:64:c8:8f:4e:10:a4:e5:fa:15:26:60:4d:
ea:09:51:ea:aa:87:e2:a6:0f:17:42:35:21:80:61:b9:88:ca:
a4:f5:59:30:c7:58:05:48:3e:f5:18:80:86:d1:21:70:e8:65:
b4:c7:4c:ec:dd:18:6e:c7:8d:81:63:28:e2:39:da:98:eb:c3:
71:8d:79:11:5c:a7:09:06:ed:1a:e2:51:66:68:9e:a5:39:a4:
c2:d2:00:54:77:2a:44:de:9d:d0:b6:d7:60:ea:d7:97:66:69:
a9:1f:b9:1b:d2:d8:4d:d9:39:15:b0:17:89:74:5b:75:f8:08:
9d:15:30:c0:96:c4:51:f8:31:29:58:e5:38:a8:25:76:f6:4e:
ef:3c:0b:48
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUN8tqwRRNFY0wT6i0S+C7du5tnaEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA4MDAwMDAwWhcNMjUwMjEyMjM1OTU5
WjB6MUkwRwYDVQQFE0BjY2ZhMmJiYmY3YzEwYzZkMTUyOGM5ZmU4YzAyNGRjZjVk
Y2I1MjBhNmYwMGY3MTZlYjczOGNlODQzYzIwM2ExMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCW0nFED0KnGbMYH6YyxuqKEAUmByw3JnRMIuBmnlNXbShP
Zi9V2oEYFoq48kNV6miYz0Rvm5r1kQEfCkTGC1UH+BibGrGctd6CVNNU6hvstVfG
2wRMaH1DMID5AEv6MOKEdPnfiVkJdKzS2g5OtUpoF4Xuop08YsnYNK5cEyaGOO9l
TYEJSTy7D374/6Yl61FjaSUru1EfTn+kl94QDKwwbc05r+S36Sln0dKxDbAGPr1m
+BOsib9z3GwejVdmvEdd1rN6WJWWy5mW7Sg/DFIUxwbyUq526d81P3gx3lptEzm+
4FG+lOBeTTF3lMCxm7Z2k9MB5Qf22kg98kfVtOAzAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUXyPZKCOs/d3bS0ynf1rV8XsXaEcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzM1ZDBhN2VhLTk2MzUtNDlkMy1hYzY5LWNlM2JiY2Y1ZmRjNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB//wDANBgkqhkiG9w0BAQsFAAOCAQEAdYe051PelQ9nIrh7RqJXiAbk
tPus85x7/xO4QpUXspcVaxxKv547VNv0gIlnQBa2NTKv9mIqUdHrNQ0JxeRo68mV
4N6ptJs3q/SA/7SkT3I+6KU23OCDcIdIFEh1dcJvKxqfF7axZblD9KuBp3Eb73MJ
ZMiPThCk5foVJmBN6glR6qqH4qYPF0I1IYBhuYjKpPVZMMdYBUg+9RiAhtEhcOhl
tMdM7N0YbseNgWMo4jnamOvDcY15EVynCQbtGuJRZmiepTmkwtIAVHcqRN6d0LbX
YOrXl2ZpqR+5G9LYTdk5FbAXiXRbdfgInRUwwJbEUfgxKVjlOKgldvZO7zwLSA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:48:53 2025 by rpki-client