Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73019006-0a45-471b-adfa-dddeadaf0d28.roa
File: 73019006-0a45-471b-adfa-dddeadaf0d28.roa (raw, json)
Hash identifier: VdlCSmKwKQ884aZ5h0Rbl/cckLA508/tnHrXrwAcVjg=
Subject key identifier: BA:E2:4F:CE:C5:87:96:13:3D:7F:1A:A0:7B:7A:22:C1:D1:77:2F:F3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6E41555B5C067DF7E8DC88D010E3D3B0BCF76E83
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73019006-0a45-471b-adfa-dddeadaf0d28.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff4:3480::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:41:55:5b:5c:06:7d:f7:e8:dc:88:d0:10:e3:d3:b0:bc:f7:6e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=b7fd181112a99744a058ba89e6e1bac9a32c37934272649fd0a362b7b344d518, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:5b:12:c5:89:37:0f:84:48:31:d7:9d:69:ec:
de:e0:ed:0d:d5:e5:14:5b:dc:6a:7d:e4:80:20:40:
ae:e8:aa:5d:62:bf:8c:71:b4:68:e0:a7:67:b1:43:
ee:0b:76:0b:a5:06:25:2a:ba:2f:16:41:84:30:2d:
0b:f6:c9:44:e0:c1:65:d5:a6:fc:eb:10:49:44:46:
14:f4:47:53:7c:a1:db:00:5e:04:ae:9f:bf:1e:ca:
91:de:db:0a:c1:e3:64:ce:b5:d3:e4:c4:84:c2:0b:
d6:d4:8d:ee:46:a9:16:73:32:0c:33:3e:b2:0b:a8:
83:7a:e4:f3:63:a8:2b:ea:86:7a:36:43:c8:e3:1d:
38:d4:90:1a:94:b4:9b:1f:b6:2e:dc:7b:47:d9:aa:
48:e1:e8:fe:a4:c3:78:b8:97:d3:ed:71:02:29:a0:
b5:be:02:23:09:20:d8:9e:ee:d2:09:53:90:f3:89:
3a:c7:81:77:93:f2:e8:79:e7:71:96:f2:aa:c7:aa:
7e:c7:79:be:31:d1:cd:db:e9:1b:ef:7d:6d:3b:04:
38:f6:68:ee:ab:3e:31:2d:a8:8f:2c:68:a2:73:f6:
e1:92:a0:10:af:bb:fe:85:64:49:e6:2f:ce:a5:a7:
7a:91:9a:07:df:0a:5a:9d:d6:87:ff:ee:9a:11:12:
6c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E2:4F:CE:C5:87:96:13:3D:7F:1A:A0:7B:7A:22:C1:D1:77:2F:F3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73019006-0a45-471b-adfa-dddeadaf0d28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff4:3480::/48
Signature Algorithm: sha256WithRSAEncryption
d4:a5:4b:c4:84:86:36:9b:a7:8d:55:a4:a8:08:bd:99:cd:51:
53:d0:3c:8b:6c:29:b6:13:f8:70:d3:ad:0b:38:fc:bf:3f:7c:
a3:55:66:17:96:d4:67:59:a5:7e:d7:c5:54:37:56:7b:39:ff:
2f:bd:fa:50:30:fb:f4:ae:3d:fa:fe:16:09:0f:a7:c9:59:06:
28:25:9c:a0:99:41:25:40:45:d1:aa:66:5f:49:7a:a9:d8:6b:
b1:af:13:85:a1:d1:08:29:0f:77:aa:82:ec:a6:2f:b8:81:1f:
24:85:80:bb:a4:0f:a3:59:0f:04:d1:84:dd:06:b5:98:14:82:
53:ca:b0:0a:da:f8:6a:e4:b6:63:47:c8:6b:5f:aa:02:ab:66:
22:2f:45:51:db:73:80:bc:42:99:e1:ea:8d:f9:14:06:78:b3:
88:4f:96:a6:ca:c5:21:71:d3:a3:f0:d6:5f:6d:b4:27:90:c4:
ef:ae:18:74:9c:1b:66:0f:2f:54:7b:0f:52:fd:19:59:7d:1f:
df:31:2e:fd:a6:99:0a:b5:ca:d5:aa:b3:12:eb:59:29:32:20:
44:91:f8:12:eb:32:a2:95:38:6c:a9:e7:22:93:b6:14:96:3b:
41:fb:2e:e7:1e:65:da:31:06:ca:b5:ec:c4:a1:c7:8d:43:41:
92:6a:95:7e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUbkFVW1wGfffo3IjQEOPTsLz3boMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA3MDAwMDAwWhcNMjUwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0BiN2ZkMTgxMTEyYTk5NzQ0YTA1OGJhODllNmUxYmFjOWEz
MmMzNzkzNDI3MjY0OWZkMGEzNjJiN2IzNDRkNTE4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD6WxLFiTcPhEgx151p7N7g7Q3V5RRb3Gp95IAgQK7oql1i
v4xxtGjgp2exQ+4LdgulBiUqui8WQYQwLQv2yUTgwWXVpvzrEElERhT0R1N8odsA
XgSun78eypHe2wrB42TOtdPkxITCC9bUje5GqRZzMgwzPrILqIN65PNjqCvqhno2
Q8jjHTjUkBqUtJsfti7ce0fZqkjh6P6kw3i4l9PtcQIpoLW+AiMJINie7tIJU5Dz
iTrHgXeT8uh553GW8qrHqn7Heb4x0c3b6RvvfW07BDj2aO6rPjEtqI8saKJz9uGS
oBCvu/6FZEnmL86lp3qRmgffClqd1of/7poREmzdAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUuuJPzsWHlhM9fxqge3oiwdF3L/MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzczMDE5MDA2LTBhNDUtNDcxYi1hZGZhLWRkZGVhZGFmMGQyOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/0NIAwDQYJKoZIhvcNAQELBQADggEBANSlS8SEhjabp41VpKgIvZnN
UVPQPItsKbYT+HDTrQs4/L8/fKNVZheW1GdZpX7XxVQ3Vns5/y+9+lAw+/SuPfr+
FgkPp8lZBiglnKCZQSVARdGqZl9JeqnYa7GvE4Wh0QgpD3eqguymL7iBHySFgLuk
D6NZDwTRhN0GtZgUglPKsAra+GrktmNHyGtfqgKrZiIvRVHbc4C8Qpnh6o35FAZ4
s4hPlqbKxSFx06Pw1l9ttCeQxO+uGHScG2YPL1R7D1L9GVl9H98xLv2mmQq1ytWq
sxLrWSkyIESR+BLrMqKVOGyp5yKTthSWO0H7LuceZdoxBsq17MShx41DQZJqlX4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:46 2025 by rpki-client