Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/489cd053-7758-46e7-8b64-3fb90765e375.roa
File: 489cd053-7758-46e7-8b64-3fb90765e375.roa (raw, json)
Hash identifier: 9VA/6zbzRXDYVzN77j/ICP+XwH8Q5g7cDHzhCyOcmc4=
Subject key identifier: A5:4B:38:0B:69:D5:53:55:DF:4E:78:C3:21:FD:08:4F:9E:60:A7:81
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7BB787005B0CFAC2484A4BFE758E922DA415D1FB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/489cd053-7758-46e7-8b64-3fb90765e375.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 139.56.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:b7:87:00:5b:0c:fa:c2:48:4a:4b:fe:75:8e:92:2d:a4:15:d1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=82326dae6af9f7c2f7424117c393743b4c47e09ff36567680dcf059322347469, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c1:96:48:61:c1:d9:64:af:36:e6:a3:17:36:
b2:3b:93:2d:81:99:28:a0:e0:b4:42:c1:0b:42:06:
e0:cc:58:04:95:30:43:ce:e3:f6:00:52:a8:fc:e5:
ca:46:7a:57:50:72:3d:02:e2:38:aa:b0:67:b8:90:
40:f8:44:33:19:03:70:2c:f4:09:b9:e9:86:04:cb:
14:e6:a3:a3:70:79:e6:e2:43:31:04:40:f2:db:72:
56:3f:20:8f:06:ca:3d:1f:29:d0:c2:a8:3f:6a:7e:
d6:bc:ba:33:88:9b:db:5d:b8:a1:e3:07:ff:fd:b8:
d4:c1:af:61:9d:5c:19:65:c7:ac:a1:9a:fa:6d:d0:
0c:80:b2:08:14:6c:42:b8:89:6c:6b:e7:c0:3e:e6:
e2:aa:30:7a:5b:f3:f5:82:b3:52:ae:13:89:e6:09:
c3:07:0b:92:bc:5b:67:44:79:85:4e:ed:0d:56:8d:
33:53:4d:69:73:b3:12:90:25:67:57:fb:e3:49:0b:
97:eb:5d:43:2d:be:cc:9d:25:28:fa:63:d5:b4:a7:
ec:7f:29:04:5f:b8:d7:bb:1c:06:44:c6:d9:9e:87:
11:56:da:53:41:4e:39:7a:6a:71:bf:c4:5a:c5:37:
0b:fc:6f:95:84:72:37:9f:ae:ea:de:49:94:32:c5:
0d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4B:38:0B:69:D5:53:55:DF:4E:78:C3:21:FD:08:4F:9E:60:A7:81
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/489cd053-7758-46e7-8b64-3fb90765e375.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.56.0.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:22:89:70:aa:eb:48:d8:16:c0:8a:c9:33:81:d4:60:dd:02:
d6:0d:10:c2:cc:f4:f4:82:ee:b1:23:a9:f6:e7:6b:e7:f0:86:
a3:42:92:99:cf:3b:43:fd:4e:6b:81:17:b6:69:d8:08:4b:b9:
1b:39:8d:67:ea:2e:7a:77:b2:0c:f3:15:30:4d:16:20:33:f5:
7f:85:15:73:63:d4:b9:8b:fe:23:ec:51:2e:95:35:9e:19:85:
c2:4b:ab:9b:24:71:cf:ea:1d:bc:4b:56:89:56:58:ba:fe:ca:
15:96:53:bc:34:aa:69:3a:2a:22:2a:89:ba:51:e0:23:42:4e:
d4:53:70:74:f9:68:01:79:11:76:e3:ac:27:0b:eb:23:66:aa:
79:ee:1c:7f:c0:90:76:cb:e1:1b:e7:4b:4c:2e:ae:f1:22:0f:
de:08:39:c9:44:04:5b:2e:74:e0:69:0d:a3:54:fd:bc:ec:78:
30:c1:2e:cd:36:9f:6e:91:2d:ad:f3:6a:b5:99:cb:ed:be:e3:
37:63:a0:10:f4:46:7f:98:1e:4d:77:7d:02:a3:9c:c9:5b:0d:
23:d5:d4:fc:bb:b5:45:3a:0f:f3:df:71:03:b0:a3:6f:39:f2:
33:56:69:84:59:44:55:a8:14:14:94:57:71:a7:cc:70:b5:e1:
aa:5d:4c:80
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUe7eHAFsM+sJISkv+dY6SLaQV0fswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTIxMDAwMDAwWhcNMjUwMjI1MjM1OTU5
WjB6MUkwRwYDVQQFE0A4MjMyNmRhZTZhZjlmN2MyZjc0MjQxMTdjMzkzNzQzYjRj
NDdlMDlmZjM2NTY3NjgwZGNmMDU5MzIyMzQ3NDY5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzwZZIYcHZZK825qMXNrI7ky2BmSig4LRCwQtCBuDMWASV
MEPO4/YAUqj85cpGeldQcj0C4jiqsGe4kED4RDMZA3As9Am56YYEyxTmo6Nweebi
QzEEQPLbclY/II8Gyj0fKdDCqD9qfta8ujOIm9tduKHjB//9uNTBr2GdXBllx6yh
mvpt0AyAsggUbEK4iWxr58A+5uKqMHpb8/WCs1KuE4nmCcMHC5K8W2dEeYVO7Q1W
jTNTTWlzsxKQJWdX++NJC5frXUMtvsydJSj6Y9W0p+x/KQRfuNe7HAZExtmehxFW
2lNBTjl6anG/xFrFNwv8b5WEcjefrureSZQyxQ1DAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUpUs4C2nVU1XfTnjDIf0IT55gp4EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ4OWNkMDUzLTc3NTgtNDZlNy04YjY0LTNmYjkwNzY1ZTM3NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACLOAAwDQYJKoZIhvcNAQELBQADggEBALIiiXCq60jYFsCKyTOB1GDdAtYN
EMLM9PSC7rEjqfbna+fwhqNCkpnPO0P9TmuBF7Zp2AhLuRs5jWfqLnp3sgzzFTBN
FiAz9X+FFXNj1LmL/iPsUS6VNZ4ZhcJLq5skcc/qHbxLVolWWLr+yhWWU7w0qmk6
KiIqibpR4CNCTtRTcHT5aAF5EXbjrCcL6yNmqnnuHH/AkHbL4RvnS0wurvEiD94I
OclEBFsudOBpDaNU/bzseDDBLs02n26RLa3zarWZy+2+4zdjoBD0Rn+YHk13fQKj
nMlbDSPV1Py7tUU6D/PfcQOwo2858jNWaYRZRFWoFBSUV3GnzHC14apdTIA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:39 2025 by rpki-client