Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a8a26b0-9d95-43e0-86c3-97f47e8b6e2d.roa
File: 7a8a26b0-9d95-43e0-86c3-97f47e8b6e2d.roa (raw, json)
Hash identifier: ZS1RL6c3i4Z7XEIZvZrcHiCu10kmnP0F7MejJZcFVxY=
Subject key identifier: B4:E4:41:BE:71:D5:0A:FD:5B:32:86:5D:A9:23:49:4C:43:A9:8C:C7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7E7D7011CEDA0CA2CB1CB67B4108BEABC055CDB7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a8a26b0-9d95-43e0-86c3-97f47e8b6e2d.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 107.22.156.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:7d:70:11:ce:da:0c:a2:cb:1c:b6:7b:41:08:be:ab:c0:55:cd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=a546c84fa475ec9433f4dde9f28bb532ebb03ae2d1291c9410b8eed50d7fb0b6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:14:5a:73:6a:d1:82:41:3c:2e:81:c8:e8:54:
f5:aa:2c:d6:01:9d:99:6f:ad:69:a9:ae:27:de:02:
d1:4c:c1:10:5a:31:1e:90:8f:52:12:1a:0f:67:47:
7f:97:55:01:2e:5e:26:b8:42:d3:be:be:9d:8b:2a:
44:3c:c8:94:94:cd:7c:9c:dd:e6:f2:64:f2:dc:dc:
de:92:92:84:97:6d:4b:8e:eb:b5:38:d6:79:10:92:
1f:7b:37:f0:a5:8b:ac:72:5d:ef:6b:19:f6:09:48:
a5:2b:27:e3:d2:52:fe:17:8c:8d:83:5f:4d:a3:29:
07:7b:f7:aa:e3:64:cb:9f:a6:02:25:f9:9e:07:c9:
ed:99:8a:c1:ea:23:f1:98:25:d2:ac:30:37:d9:23:
f0:01:8a:72:97:80:db:51:96:c4:01:37:78:6a:2d:
66:56:bc:5e:36:8f:31:81:f5:28:94:be:a1:92:85:
2e:ef:6a:09:ea:31:8d:7d:2b:62:1a:2f:b1:5f:ff:
8f:38:3b:0c:eb:3f:86:52:c3:a2:31:b2:f1:e5:8e:
89:23:fa:ab:61:2d:be:e6:df:eb:a4:dd:0e:54:6d:
cc:58:de:56:4e:ce:a1:76:57:c6:d9:81:50:31:74:
27:d3:4a:8e:fb:ce:9a:89:f8:b8:78:d3:dc:18:b2:
04:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E4:41:BE:71:D5:0A:FD:5B:32:86:5D:A9:23:49:4C:43:A9:8C:C7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a8a26b0-9d95-43e0-86c3-97f47e8b6e2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.22.156.0/23
Signature Algorithm: sha256WithRSAEncryption
cc:96:a5:a0:3b:35:d1:a7:d9:4e:64:0b:c7:8a:06:e6:5e:17:
cc:0a:17:30:79:c1:33:26:1c:4c:f4:41:8c:6c:f5:4a:ea:6f:
98:45:0f:52:8a:d0:ff:86:5b:2d:78:ad:20:8b:28:75:75:6c:
57:7e:64:b5:b9:3d:f0:11:3c:4c:59:22:2d:20:a9:2d:f3:03:
fe:04:fa:54:a4:ef:4d:e6:50:eb:02:6b:84:75:70:83:3e:fe:
4e:8f:31:5b:87:2a:4d:28:e1:9c:2f:ee:be:28:23:43:e4:9d:
62:01:08:77:c9:03:be:6a:bf:ca:e4:0f:71:98:1f:1a:6d:55:
a5:5f:d1:4c:a1:b2:58:4e:22:c4:f6:71:35:a5:fc:42:b2:cc:
57:02:97:88:7a:aa:8e:52:ab:7a:11:a1:18:5c:83:43:31:43:
67:c2:3e:1b:97:60:00:5a:7d:3f:a5:d9:8d:53:8b:87:52:3d:
49:1b:a8:52:24:b8:79:dc:ec:1b:ba:5e:82:30:b4:2c:66:db:
ae:5d:d6:f4:ec:06:c3:17:38:19:24:bd:80:f6:72:59:4f:e1:
3d:4a:ef:00:aa:24:f7:59:ed:7f:43:9f:c7:4c:ab:60:07:c6:
6e:49:d6:3f:d3:77:77:2a:2c:a6:0c:3d:1c:a5:84:12:e6:c2:
31:5c:48:82
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfn1wEc7aDKLLHLZ7QQi+q8BVzbcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BhNTQ2Yzg0ZmE0NzVlYzk0MzNmNGRkZTlmMjhiYjUzMmVi
YjAzYWUyZDEyOTFjOTQxMGI4ZWVkNTBkN2ZiMGI2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCMFFpzatGCQTwugcjoVPWqLNYBnZlvrWmprifeAtFMwRBa
MR6Qj1ISGg9nR3+XVQEuXia4QtO+vp2LKkQ8yJSUzXyc3ebyZPLc3N6SkoSXbUuO
67U41nkQkh97N/Cli6xyXe9rGfYJSKUrJ+PSUv4XjI2DX02jKQd796rjZMufpgIl
+Z4Hye2ZisHqI/GYJdKsMDfZI/ABinKXgNtRlsQBN3hqLWZWvF42jzGB9SiUvqGS
hS7vagnqMY19K2IaL7Ff/484OwzrP4ZSw6IxsvHljokj+qthLb7m3+uk3Q5UbcxY
3lZOzqF2V8bZgVAxdCfTSo77zpqJ+Lh409wYsgSRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUtORBvnHVCv1bMoZdqSNJTEOpjMcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdhOGEyNmIwLTlkOTUtNDNlMC04NmMzLTk3ZjQ3ZThiNmUyZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFrFpwwDQYJKoZIhvcNAQELBQADggEBAMyWpaA7NdGn2U5kC8eKBuZeF8wK
FzB5wTMmHEz0QYxs9Urqb5hFD1KK0P+GWy14rSCLKHV1bFd+ZLW5PfARPExZIi0g
qS3zA/4E+lSk703mUOsCa4R1cIM+/k6PMVuHKk0o4Zwv7r4oI0PknWIBCHfJA75q
v8rkD3GYHxptVaVf0UyhslhOIsT2cTWl/EKyzFcCl4h6qo5Sq3oRoRhcg0MxQ2fC
PhuXYABafT+l2Y1Ti4dSPUkbqFIkuHnc7Bu6XoIwtCxm265d1vTsBsMXOBkkvYD2
cllP4T1K7wCqJPdZ7X9Dn8dMq2AHxm5J1j/Td3cqLKYMPRylhBLmwjFcSII=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:39 2025 by rpki-client