Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5cb9a48f-17e2-4fa1-8ff6-b5f80c8a8908.roa
File: 5cb9a48f-17e2-4fa1-8ff6-b5f80c8a8908.roa (raw, json)
Hash identifier: zZPpw2lT2awsshhcLHIMKcul+hjymfRO4EbAci8u5Ss=
Subject key identifier: BE:9F:7F:47:3E:67:58:C0:87:19:9F:B9:F0:18:19:CC:9E:D6:6F:04
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0CFD5A2D4E856AB352C65DFB395F6F9D1D10F0B2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5cb9a48f-17e2-4fa1-8ff6-b5f80c8a8908.roa
Signing time: Fri 17 Jan 2025 00:00:00 +0000
ROA not before: Fri 17 Jan 2025 00:00:00 +0000
ROA not after: Fri 21 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fef:c000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:fd:5a:2d:4e:85:6a:b3:52:c6:5d:fb:39:5f:6f:9d:1d:10:f0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 17 00:00:00 2025 GMT
Not After : Feb 21 23:59:59 2025 GMT
Subject: serialNumber=d677f2f29820420260b6e8303a0ba00cf2171313d210d55d9aca481d6297d5d0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5d:f0:ec:73:9d:2c:c6:48:50:b7:eb:5b:40:
60:f8:0b:02:00:4f:21:5c:4e:ad:b3:9a:fb:21:a6:
9d:42:b6:18:94:4b:4a:d8:19:be:a1:e5:7a:50:10:
0c:45:58:1f:de:59:20:48:c0:94:6d:7f:aa:19:48:
8f:7c:7f:1a:66:c5:34:a4:f4:76:2e:06:a3:8f:82:
62:e8:1a:ee:42:9f:0c:84:cf:25:e0:c8:78:2e:4e:
7a:af:6e:67:7e:51:de:39:7a:af:7e:9f:19:3c:b0:
d7:f9:74:bb:84:7f:00:c2:1d:13:ff:2c:e3:96:a0:
18:68:4c:20:11:a5:13:48:03:fe:bc:f4:0a:bd:4f:
04:d5:15:d8:9c:1e:51:38:67:37:8b:57:8c:72:ae:
a3:09:e5:f3:bc:cf:b1:27:95:2d:7e:25:fa:49:d2:
4b:48:6a:0c:88:7d:32:82:19:a0:03:2a:53:54:f6:
a6:dd:88:ed:1e:12:41:88:03:19:8a:92:9e:56:7f:
75:04:06:9b:1a:97:44:d0:98:23:6d:79:9f:8a:87:
02:1a:73:89:94:39:a1:5c:38:a8:92:85:76:76:a6:
44:39:f2:32:c9:a8:7a:74:48:ce:1a:80:56:36:24:
21:43:e4:23:8b:9c:ed:89:f8:2c:ad:4c:dd:a7:ad:
87:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9F:7F:47:3E:67:58:C0:87:19:9F:B9:F0:18:19:CC:9E:D6:6F:04
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5cb9a48f-17e2-4fa1-8ff6-b5f80c8a8908.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fef:c000::/40
Signature Algorithm: sha256WithRSAEncryption
0b:c1:f5:a3:3b:a2:38:45:c7:d7:64:92:27:95:89:0f:be:f9:
24:22:c7:9e:a8:05:4b:d3:f8:df:32:f4:be:b2:63:7f:09:9b:
a3:fd:71:66:0d:90:dc:81:b3:e5:c1:c5:11:a1:8e:86:fc:25:
a2:6d:9e:99:2d:be:5a:af:26:0b:0d:3b:44:69:3f:32:ec:da:
60:9e:6c:1c:5b:b4:23:f1:e4:21:64:a2:39:84:e3:ab:ad:da:
bc:d5:40:0a:7f:40:9f:25:cb:ee:bd:b9:f0:e0:79:21:5f:42:
a6:ee:37:57:5f:3b:92:07:c3:c2:f0:8b:06:f7:8d:41:c2:65:
14:56:a3:cf:7c:f8:d7:28:8c:fa:50:44:ac:d3:66:26:90:24:
ac:4f:63:3a:a2:3b:f7:44:b9:3d:46:5c:8a:b9:74:f9:75:ce:
a3:53:d2:38:dd:45:51:87:4a:8b:6d:fe:0f:83:fe:d8:6d:db:
61:5a:97:b6:4d:e5:41:ba:1f:81:cd:7d:85:dd:2d:52:47:5f:
0e:81:52:10:f9:15:ee:07:a3:55:0e:20:43:5f:cc:87:80:af:
e0:95:a7:8f:77:d3:59:dd:8e:c9:0b:51:8f:4a:1a:27:11:46:
80:9e:34:c8:cc:ec:1b:e9:67:77:b4:70:a4:f6:b9:e9:8e:12:
a3:9f:e5:70
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUDP1aLU6FarNSxl37OV9vnR0Q8LIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTE3MDAwMDAwWhcNMjUwMjIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BkNjc3ZjJmMjk4MjA0MjAyNjBiNmU4MzAzYTBiYTAwY2Yy
MTcxMzEzZDIxMGQ1NWQ5YWNhNDgxZDYyOTdkNWQwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDxXfDsc50sxkhQt+tbQGD4CwIATyFcTq2zmvshpp1CthiU
S0rYGb6h5XpQEAxFWB/eWSBIwJRtf6oZSI98fxpmxTSk9HYuBqOPgmLoGu5CnwyE
zyXgyHguTnqvbmd+Ud45eq9+nxk8sNf5dLuEfwDCHRP/LOOWoBhoTCARpRNIA/68
9Aq9TwTVFdicHlE4ZzeLV4xyrqMJ5fO8z7EnlS1+JfpJ0ktIagyIfTKCGaADKlNU
9qbdiO0eEkGIAxmKkp5Wf3UEBpsal0TQmCNteZ+KhwIac4mUOaFcOKiShXZ2pkQ5
8jLJqHp0SM4agFY2JCFD5COLnO2J+CytTN2nrYfFAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUvp9/Rz5nWMCHGZ+58BgZzJ7WbwQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVjYjlhNDhmLTE3ZTItNGZhMS04ZmY2LWI1ZjgwYzhhODkwOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/vwDANBgkqhkiG9w0BAQsFAAOCAQEAC8H1ozuiOEXH12SSJ5WJD775
JCLHnqgFS9P43zL0vrJjfwmbo/1xZg2Q3IGz5cHFEaGOhvwlom2emS2+Wq8mCw07
RGk/MuzaYJ5sHFu0I/HkIWSiOYTjq63avNVACn9AnyXL7r258OB5IV9Cpu43V187
kgfDwvCLBveNQcJlFFajz3z41yiM+lBErNNmJpAkrE9jOqI790S5PUZcirl0+XXO
o1PSON1FUYdKi23+D4P+2G3bYVqXtk3lQbofgc19hd0tUkdfDoFSEPkV7gejVQ4g
Q1/Mh4Cv4JWnj3fTWd2OyQtRj0oaJxFGgJ40yMzsG+lnd7RwpPa56Y4So5/lcA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:26:35 2025 by rpki-client