Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d7f4f19-33f2-41a5-9746-8cdc05da981c.roa
File: 8d7f4f19-33f2-41a5-9746-8cdc05da981c.roa (raw, json)
Hash identifier: L7ZL+F7siy9OwUW6TvwcWvvjjYmHAjm6wqaYcrMWkCQ=
Subject key identifier: 92:33:5A:0D:16:51:47:D8:12:94:42:4A:B6:AF:72:3B:11:D5:35:7F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0DB79AAD48C9DE87B9831A8BB0388806F4BC7795
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d7f4f19-33f2-41a5-9746-8cdc05da981c.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.150.112.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:b7:9a:ad:48:c9:de:87:b9:83:1a:8b:b0:38:88:06:f4:bc:77:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=74d3cc44b90f32eea5646c51ec01605ad4bc32d4702603739392f45d994fa3d7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:55:a8:3f:92:f0:77:21:69:e5:cf:d7:d8:59:
c9:68:c9:9e:55:1c:73:c2:8a:15:d2:4c:45:a1:7e:
fb:4a:d3:30:09:76:3f:4b:cd:76:1a:e4:ab:93:d6:
ee:b4:11:9a:8a:70:90:14:88:eb:3f:ad:99:05:63:
36:01:74:94:1c:8c:89:0b:dd:35:ce:84:9b:c8:20:
13:33:39:f3:c0:c5:ba:e4:fb:d0:93:1c:e7:56:7d:
5f:b7:5e:7e:0c:0b:6e:ba:68:99:f8:fb:8f:b4:f4:
4e:6f:d4:d3:11:63:3f:a2:12:17:05:a6:bf:1a:0e:
2a:fa:3b:8e:4b:b6:ac:ce:1d:14:6a:c7:14:64:63:
7d:2b:cb:c8:da:4c:89:5c:f8:61:90:27:73:b9:6f:
05:9f:cb:33:32:26:37:43:0c:4d:ba:63:aa:8c:c4:
7a:ed:5d:0d:83:b8:e5:77:3b:61:e1:55:6b:e2:46:
d2:74:46:9a:8c:fd:71:05:c2:36:b7:5f:27:b3:35:
ae:26:c4:21:ce:e7:c1:b1:a4:6e:88:0f:1e:e4:9f:
1a:b4:bb:09:82:c4:f0:eb:1b:b0:63:4f:80:d3:4c:
c6:f9:9f:e5:52:4b:ef:09:31:48:c4:15:38:ef:d3:
f3:2a:a0:1e:7e:1c:d4:94:80:2e:bf:fc:cd:05:81:
f7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:33:5A:0D:16:51:47:D8:12:94:42:4A:B6:AF:72:3B:11:D5:35:7F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d7f4f19-33f2-41a5-9746-8cdc05da981c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.150.112.0/23
Signature Algorithm: sha256WithRSAEncryption
50:67:73:a9:d8:d5:20:34:a2:dd:f5:88:8a:96:69:d7:bf:70:
eb:d1:e5:6a:15:9e:86:d7:18:8d:b7:92:fe:2f:06:e3:92:af:
f4:eb:f3:54:b5:90:5d:47:2e:29:e5:f4:c8:99:77:d0:c3:7e:
79:76:7f:6a:ca:3e:f0:5b:64:af:e4:9a:85:f3:13:44:bf:d2:
d4:68:59:eb:53:f9:3c:df:9f:99:6d:f4:0e:a7:76:d0:c8:a3:
d5:e6:52:a1:91:0d:d3:20:b9:62:34:de:3c:0e:f0:4b:59:5d:
f6:0c:62:13:6d:23:04:98:70:54:73:3a:91:53:79:d0:85:1e:
5d:ce:48:ca:e3:05:15:fc:f2:55:19:54:35:10:9f:e6:89:89:
91:db:b3:87:cf:70:d2:d5:2d:1b:12:6c:e3:a3:ba:f2:70:e2:
ca:78:63:92:17:70:da:4a:28:3e:54:d6:dd:da:06:bd:0b:19:
f6:00:b0:c6:ab:37:30:ef:e3:13:98:3b:2c:1e:59:74:ff:2c:
09:9e:64:3b:94:7a:b1:3a:03:66:04:e7:df:9e:3c:78:a3:f5:
91:80:a3:48:c3:fd:21:09:8a:2d:c5:bc:22:52:a9:f3:08:6d:
48:96:f7:cb:d7:02:9e:bf:02:be:e2:53:3a:d9:f7:60:73:a8:
bd:6c:a6:25
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDbearUjJ3oe5gxqLsDiIBvS8d5UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI4MDAwMDAwWhcNMjUwMzA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A3NGQzY2M0NGI5MGYzMmVlYTU2NDZjNTFlYzAxNjA1YWQ0
YmMzMmQ0NzAyNjAzNzM5MzkyZjQ1ZDk5NGZhM2Q3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNVag/kvB3IWnlz9fYWcloyZ5VHHPCihXSTEWhfvtK0zAJ
dj9LzXYa5KuT1u60EZqKcJAUiOs/rZkFYzYBdJQcjIkL3TXOhJvIIBMzOfPAxbrk
+9CTHOdWfV+3Xn4MC266aJn4+4+09E5v1NMRYz+iEhcFpr8aDir6O45LtqzOHRRq
xxRkY30ry8jaTIlc+GGQJ3O5bwWfyzMyJjdDDE26Y6qMxHrtXQ2DuOV3O2HhVWvi
RtJ0RpqM/XEFwja3XyezNa4mxCHO58GxpG6IDx7knxq0uwmCxPDrG7BjT4DTTMb5
n+VSS+8JMUjEFTjv0/MqoB5+HNSUgC6//M0FgffVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUkjNaDRZRR9gSlEJKtq9yOxHVNX8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhkN2Y0ZjE5LTMzZjItNDFhNS05NzQ2LThjZGMwNWRhOTgxYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFjlnAwDQYJKoZIhvcNAQELBQADggEBAFBnc6nY1SA0ot31iIqWade/cOvR
5WoVnobXGI23kv4vBuOSr/Tr81S1kF1HLinl9MiZd9DDfnl2f2rKPvBbZK/kmoXz
E0S/0tRoWetT+Tzfn5lt9A6ndtDIo9XmUqGRDdMguWI03jwO8EtZXfYMYhNtIwSY
cFRzOpFTedCFHl3OSMrjBRX88lUZVDUQn+aJiZHbs4fPcNLVLRsSbOOjuvJw4sp4
Y5IXcNpKKD5U1t3aBr0LGfYAsMarNzDv4xOYOyweWXT/LAmeZDuUerE6A2YE59+e
PHij9ZGAo0jD/SEJii3FvCJSqfMIbUiW98vXAp6/Ar7iUzrZ92BzqL1spiU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:42 2025 by rpki-client