Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/396fb735-ddd1-4676-8f03-961ccd29c7fb.roa
File: 396fb735-ddd1-4676-8f03-961ccd29c7fb.roa (raw, json)
Hash identifier: /3rM4KukR6LycSoq18Fr60M/36yeJ8udJjosFYClEgE=
Subject key identifier: DA:1F:9B:6D:DE:10:80:10:DA:A5:EE:2C:54:0C:AD:0D:CE:A0:55:FB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 04BA74280CC51865A63CCC9FDE987CC9EC072AE8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/396fb735-ddd1-4676-8f03-961ccd29c7fb.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:ba:74:28:0c:c5:18:65:a6:3c:cc:9f:de:98:7c:c9:ec:07:2a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=c733afc39a951b73d6d71362509959121151234cc7c24d69af4e6eba28f59ee0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:29:6c:09:77:36:53:8e:3d:c4:86:cc:9f:09:
77:fe:0e:c2:eb:f4:5f:1a:1e:f9:70:c9:ca:80:5a:
c3:50:94:5b:b9:ec:36:fc:7c:20:62:6a:81:d6:28:
a4:c2:ba:ec:33:bd:3f:69:c6:25:69:f6:75:98:51:
9a:99:17:3e:85:c7:1e:1f:67:3f:bf:9e:2c:00:2e:
d9:40:9a:2c:2f:f2:1e:47:7e:69:66:e1:05:20:1c:
e3:73:6f:bc:fd:b3:f7:28:34:cd:4b:c0:b5:a5:8d:
ac:fd:bb:80:1a:31:9b:8f:da:53:41:a3:e1:99:a5:
2d:69:65:de:cc:33:f7:a3:a3:cb:97:dd:1b:01:63:
e9:2a:9b:5e:9e:9d:d4:4d:eb:ba:2d:af:0b:08:4d:
d0:0f:52:2f:13:6a:d2:ef:90:23:5b:c3:56:fe:77:
49:ae:0e:06:34:6b:d5:15:38:1a:ab:ce:14:3a:fd:
a5:ac:c0:1e:25:31:28:85:19:82:a6:80:a4:91:b6:
c0:02:06:32:ad:0f:53:23:5f:8a:69:66:20:e1:4e:
00:a1:22:76:f7:f7:b3:8d:04:e2:f6:cf:44:8d:5a:
b5:47:13:d0:af:76:3a:73:cb:a8:86:b9:e1:80:71:
be:4b:e2:f2:a1:87:20:29:76:bd:3b:e2:32:26:f8:
93:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1F:9B:6D:DE:10:80:10:DA:A5:EE:2C:54:0C:AD:0D:CE:A0:55:FB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/396fb735-ddd1-4676-8f03-961ccd29c7fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.162.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:c3:bb:68:bc:a9:9a:e1:4f:e6:95:34:73:10:35:a4:c9:56:
03:79:e0:45:75:f7:8f:52:cf:b8:b3:5a:fb:78:cd:14:99:aa:
81:93:81:26:97:b9:bc:fd:ac:9b:b0:00:25:24:d8:4d:6f:e9:
a8:01:d6:51:d4:ee:48:64:6a:7c:1a:9e:fb:95:c5:76:29:39:
1c:99:c8:9c:e2:2e:85:96:91:5f:c8:99:7c:86:f6:73:f1:2b:
23:f5:b4:bf:a5:63:be:51:b3:b9:84:47:d4:e9:97:c4:e9:9b:
cd:33:d3:0c:ef:48:6c:c0:42:54:d5:c3:e7:98:72:52:a8:e5:
f9:79:c1:52:c3:5f:b4:aa:60:03:fe:0b:de:c5:56:84:6b:c4:
59:cc:59:00:dd:64:c0:da:28:87:47:8a:2d:8e:da:24:30:0d:
c6:48:ab:a7:88:66:1f:c2:f5:52:c7:ec:e1:dd:d9:fc:fc:47:
c1:8d:16:c9:9d:5e:9c:b6:9d:29:4a:48:f4:99:7c:2f:7e:08:
02:3d:66:ab:63:f6:52:7e:aa:3e:b7:da:84:74:04:b2:f4:cb:
6d:78:05:2a:78:13:6a:03:15:57:44:29:d1:e7:c5:b1:03:7a:
e2:ca:9a:72:6b:12:08:15:8d:88:b6:3e:34:df:22:ee:cf:06:
48:94:3b:7a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBLp0KAzFGGWmPMyf3ph8yewHKugwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI4MDAwMDAwWhcNMjUwMzA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BjNzMzYWZjMzlhOTUxYjczZDZkNzEzNjI1MDk5NTkxMjEx
NTEyMzRjYzdjMjRkNjlhZjRlNmViYTI4ZjU5ZWUwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDTKWwJdzZTjj3EhsyfCXf+DsLr9F8aHvlwycqAWsNQlFu5
7Db8fCBiaoHWKKTCuuwzvT9pxiVp9nWYUZqZFz6Fxx4fZz+/niwALtlAmiwv8h5H
fmlm4QUgHONzb7z9s/coNM1LwLWljaz9u4AaMZuP2lNBo+GZpS1pZd7MM/ejo8uX
3RsBY+kqm16endRN67otrwsITdAPUi8TatLvkCNbw1b+d0muDgY0a9UVOBqrzhQ6
/aWswB4lMSiFGYKmgKSRtsACBjKtD1MjX4ppZiDhTgChInb397ONBOL2z0SNWrVH
E9Cvdjpzy6iGueGAcb5L4vKhhyApdr074jIm+JNZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU2h+bbd4QgBDape4sVAytDc6gVfswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzM5NmZiNzM1LWRkZDEtNDY3Ni04ZjAzLTk2MWNjZDI5YzdmYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjl6IwDQYJKoZIhvcNAQELBQADggEBAD/Du2i8qZrhT+aVNHMQNaTJVgN5
4EV1949Sz7izWvt4zRSZqoGTgSaXubz9rJuwACUk2E1v6agB1lHU7khkanwanvuV
xXYpORyZyJziLoWWkV/ImXyG9nPxKyP1tL+lY75Rs7mER9Tpl8Tpm80z0wzvSGzA
QlTVw+eYclKo5fl5wVLDX7SqYAP+C97FVoRrxFnMWQDdZMDaKIdHii2O2iQwDcZI
q6eIZh/C9VLH7OHd2fz8R8GNFsmdXpy2nSlKSPSZfC9+CAI9Zqtj9lJ+qj632oR0
BLL0y214BSp4E2oDFVdEKdHnxbEDeuLKmnJrEggVjYi2PjTfIu7PBkiUO3o=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:07:19 2025 by rpki-client