Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d13bb70-aac8-4b1f-a3b4-b8020682a4d3.roa
File: 7d13bb70-aac8-4b1f-a3b4-b8020682a4d3.roa (raw, json)
Hash identifier: qU7H4k6OeSVkJcbeygM3ObNP6VJid9zZNy3LhNJHgWo=
Subject key identifier: 27:93:EF:23:23:45:8F:75:D3:27:CB:8C:C2:7D:2D:B2:8A:DE:09:2D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 41AB165FE36CFDD73CD506F74E37B93A5F442F27
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d13bb70-aac8-4b1f-a3b4-b8020682a4d3.roa
Signing time: Fri 17 Jan 2025 00:00:00 +0000
ROA not before: Fri 17 Jan 2025 00:00:00 +0000
ROA not after: Fri 21 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.129.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:ab:16:5f:e3:6c:fd:d7:3c:d5:06:f7:4e:37:b9:3a:5f:44:2f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 17 00:00:00 2025 GMT
Not After : Feb 21 23:59:59 2025 GMT
Subject: serialNumber=61b34787fea2c2464fb0a21139989874ed3e5b433df5edc8cfdcbfe20d33fb59, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:5e:9f:fd:f9:79:c3:ee:50:99:3d:d1:ea:
d6:61:18:ff:73:f7:20:ae:62:ae:a9:2b:0b:83:85:
b6:e7:ac:f9:57:40:18:01:31:4a:3a:ee:c5:1d:27:
95:fd:25:2a:c5:15:5f:22:7a:52:b4:1e:d8:a0:4a:
4d:dd:06:00:09:df:96:55:31:65:e2:67:72:86:10:
e6:43:e9:23:9c:0f:4d:5a:16:98:83:9c:ab:ba:b6:
11:85:bb:da:66:bd:ee:3b:8b:4c:53:1e:d1:67:65:
fa:e1:08:c7:2a:a3:2b:e0:d1:0c:79:14:9a:a5:51:
81:63:d6:31:a9:21:0d:82:8e:04:e2:e5:58:71:be:
01:95:de:1e:7a:81:35:f2:0b:7a:d2:e2:f8:08:5f:
85:64:bc:34:be:17:30:d8:60:a7:4c:3f:1b:3a:5b:
46:1b:4a:05:53:a7:6a:41:2d:cc:d1:9a:d3:7d:f5:
b5:c1:3c:e3:51:aa:05:fe:be:b1:15:c2:b0:c1:91:
f2:ad:00:cb:29:03:6d:99:a8:84:08:ae:31:5a:bb:
1a:c3:87:f3:4e:96:94:66:ec:86:f4:75:2f:ab:09:
4e:2b:3a:1a:08:e9:66:10:5b:b3:db:1e:48:b1:fa:
4e:7d:e0:28:54:cd:ff:e4:90:d5:c5:e0:01:da:28:
63:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:93:EF:23:23:45:8F:75:D3:27:CB:8C:C2:7D:2D:B2:8A:DE:09:2D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d13bb70-aac8-4b1f-a3b4-b8020682a4d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.129.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cb:38:00:ca:ee:69:bb:ec:08:73:61:95:b6:77:06:51:83:35:
3b:93:e4:23:d0:ee:51:ae:fd:ce:2b:b1:d6:63:e8:f6:43:84:
0c:8a:e5:88:90:08:e0:d2:b3:b0:9a:72:49:a1:ed:b4:b3:4f:
be:c6:8c:ed:68:4f:99:ea:f5:5b:bc:60:7f:39:01:7d:93:1e:
0c:32:9c:fe:26:ae:4d:be:7e:85:0d:02:e8:21:90:1a:a1:d1:
a5:fa:a1:ba:35:13:e4:95:47:c6:bf:ee:a8:bd:b6:0a:25:4f:
13:6b:55:0e:72:3c:2b:ba:e4:5e:76:39:62:c7:6a:cf:75:05:
5c:78:a4:2c:7c:b7:5e:2a:69:fb:b2:cd:f3:7e:af:94:e3:c1:
b3:5b:ad:85:f4:b6:8c:d0:ed:f5:d8:72:fe:a9:b6:d0:54:73:
a5:38:1d:d9:04:ba:56:7b:b7:d1:57:2c:8f:cb:91:b5:9c:ed:
73:cd:d0:6b:fe:2b:3a:98:fb:29:9e:0a:ba:e6:c8:6e:e9:bc:
33:f3:2c:f3:ba:1f:d5:bc:58:fe:df:f4:76:57:ff:85:d0:49:
c1:94:10:ba:72:ce:ee:c2:cf:62:9a:81:2d:30:de:92:c4:25:
4f:42:3f:dc:d2:a4:83:cc:42:a8:fb:57:41:63:ca:df:60:ab:
45:ab:75:4e
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUQasWX+Ns/dc81Qb3Tje5Ol9ELycwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTE3MDAwMDAwWhcNMjUwMjIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A2MWIzNDc4N2ZlYTJjMjQ2NGZiMGEyMTEzOTk4OTg3NGVk
M2U1YjQzM2RmNWVkYzhjZmRjYmZlMjBkMzNmYjU5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6ql6f/fl5w+5QmT3R6tZhGP9z9yCuYq6pKwuDhbbnrPlX
QBgBMUo67sUdJ5X9JSrFFV8ielK0HtigSk3dBgAJ35ZVMWXiZ3KGEOZD6SOcD01a
FpiDnKu6thGFu9pmve47i0xTHtFnZfrhCMcqoyvg0Qx5FJqlUYFj1jGpIQ2CjgTi
5VhxvgGV3h56gTXyC3rS4vgIX4VkvDS+FzDYYKdMPxs6W0YbSgVTp2pBLczRmtN9
9bXBPONRqgX+vrEVwrDBkfKtAMspA22ZqIQIrjFauxrDh/NOlpRm7Ib0dS+rCU4r
OhoI6WYQW7PbHkix+k594ChUzf/kkNXF4AHaKGPHAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUJ5PvIyNFj3XTJ8uMwn0tsoreCS0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdkMTNiYjcwLWFhYzgtNGIxZi1hM2I0LWI4MDIwNjgyYTRkMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQgTANBgkqhkiG9w0BAQsFAAOCAQEAyzgAyu5pu+wIc2GVtncGUYM1O5Pk
I9DuUa79ziux1mPo9kOEDIrliJAI4NKzsJpySaHttLNPvsaM7WhPmer1W7xgfzkB
fZMeDDKc/iauTb5+hQ0C6CGQGqHRpfqhujUT5JVHxr/uqL22CiVPE2tVDnI8K7rk
XnY5Ysdqz3UFXHikLHy3Xipp+7LN836vlOPBs1uthfS2jNDt9dhy/qm20FRzpTgd
2QS6Vnu30Vcsj8uRtZztc83Qa/4rOpj7KZ4KuubIbum8M/Ms87of1bxY/t/0dlf/
hdBJwZQQunLO7sLPYpqBLTDeksQlT0I/3NKkg8xCqPtXQWPK32CrRat1Tg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:34 2025 by rpki-client