Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97550499-0e7a-4867-b51a-91bf9f8b7a9a.roa
File: 97550499-0e7a-4867-b51a-91bf9f8b7a9a.roa (raw, json)
Hash identifier: BHRB1i2TY7qf04Ex7NXV19Myy5UMXCbJwZN8qhTbiPY=
Subject key identifier: 10:1D:DD:47:DA:15:13:45:1C:C9:57:FC:59:70:B6:E0:A0:1B:1D:94
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3866FE54FAA96B8246463DC55714B4E40BDC6333
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97550499-0e7a-4867-b51a-91bf9f8b7a9a.roa
Signing time: Fri 17 Jan 2025 00:00:00 +0000
ROA not before: Fri 17 Jan 2025 00:00:00 +0000
ROA not after: Fri 21 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:66:fe:54:fa:a9:6b:82:46:46:3d:c5:57:14:b4:e4:0b:dc:63:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 17 00:00:00 2025 GMT
Not After : Feb 21 23:59:59 2025 GMT
Subject: serialNumber=da65c985903612ffe950e31ec075d7f9bdb1f7ec3ec8e24db785a85137409cf9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ab:02:80:dc:6f:4b:75:e4:a4:7c:49:1f:97:
0a:32:99:31:80:bf:07:69:02:9b:2c:a7:80:f1:4d:
58:a4:bf:3e:cc:f2:44:ca:40:e4:dd:1e:f0:41:1e:
4c:94:a5:31:c6:31:fd:19:25:2e:79:84:85:0e:bc:
92:c3:f8:0d:a4:4c:92:22:37:b0:7c:c0:db:a5:cd:
ba:53:dc:b7:6b:2d:81:3b:04:b2:9f:73:69:c1:4a:
61:f5:c0:ce:7a:4c:ca:0a:b9:74:a1:1e:fd:64:20:
de:f7:45:40:70:64:27:63:54:46:b5:38:7b:bd:d9:
1a:b0:cf:f3:8a:88:69:8f:62:a2:22:98:45:89:63:
1f:52:08:9c:cb:46:2a:34:cc:c7:12:d6:aa:e3:05:
6d:14:17:e2:4c:12:6c:aa:26:63:ad:c0:02:3e:1b:
79:c9:36:09:63:57:a4:1d:2c:3b:4f:29:e3:55:be:
d9:dd:98:01:29:9b:3b:6f:5e:69:43:3c:b1:e2:19:
7f:1d:62:cd:9e:fe:e2:f6:9a:55:0f:a0:d9:11:82:
6e:48:b1:89:d5:9f:90:6d:7d:fa:95:3c:1b:d3:24:
0a:73:52:db:9c:f1:ab:d4:c8:ba:27:f8:fd:8d:32:
eb:54:03:57:15:4b:5c:1a:5f:b9:58:76:e9:80:21:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1D:DD:47:DA:15:13:45:1C:C9:57:FC:59:70:B6:E0:A0:1B:1D:94
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97550499-0e7a-4867-b51a-91bf9f8b7a9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.0.0/14
Signature Algorithm: sha256WithRSAEncryption
5a:37:05:c2:2b:77:34:9a:06:92:1c:db:04:7a:c9:6a:47:b9:
5f:bb:a1:de:ab:c2:9b:47:07:61:a5:6d:05:77:07:f1:a5:3b:
d7:f8:1f:d2:9d:55:a8:09:80:9e:b6:e9:5f:e5:37:c7:9b:5c:
ef:bc:8a:c9:47:0a:51:b6:dc:a9:64:d7:f3:6c:d9:81:c2:3a:
32:a3:8c:f3:8d:cf:a9:5b:4b:82:e8:02:36:08:b5:53:8b:94:
e0:82:96:d0:5c:17:1c:09:fc:1d:92:52:1b:89:d9:36:d0:c3:
01:a9:70:a3:72:32:0c:72:c3:49:07:ef:23:f8:43:7f:d9:e4:
d7:38:83:91:9b:cc:d5:51:b7:a1:db:1e:9b:f6:8a:09:65:31:
89:69:de:8d:f8:da:e9:21:11:78:19:ba:24:fd:57:2e:be:f3:
90:47:8b:a1:c8:ff:44:89:1f:23:e6:57:71:04:73:28:d3:56:
e5:af:ca:10:7d:f1:d2:d8:8f:1d:bc:7c:1b:ec:57:68:0f:b6:
be:d7:12:f3:86:cd:ae:aa:97:1e:79:4f:c8:60:9d:3d:8e:58:
bb:cb:28:9c:e7:8d:21:9c:f9:3a:1b:99:c1:35:48:87:e6:2f:
ad:17:35:05:4c:6a:fc:2a:2e:b8:6b:33:a0:57:a9:67:ae:e3:
b3:39:d4:71
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUOGb+VPqpa4JGRj3FVxS05AvcYzMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTE3MDAwMDAwWhcNMjUwMjIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BkYTY1Yzk4NTkwMzYxMmZmZTk1MGUzMWVjMDc1ZDdmOWJk
YjFmN2VjM2VjOGUyNGRiNzg1YTg1MTM3NDA5Y2Y5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDVqwKA3G9LdeSkfEkflwoymTGAvwdpApssp4DxTVikvz7M
8kTKQOTdHvBBHkyUpTHGMf0ZJS55hIUOvJLD+A2kTJIiN7B8wNulzbpT3LdrLYE7
BLKfc2nBSmH1wM56TMoKuXShHv1kIN73RUBwZCdjVEa1OHu92Rqwz/OKiGmPYqIi
mEWJYx9SCJzLRio0zMcS1qrjBW0UF+JMEmyqJmOtwAI+G3nJNgljV6QdLDtPKeNV
vtndmAEpmztvXmlDPLHiGX8dYs2e/uL2mlUPoNkRgm5IsYnVn5BtffqVPBvTJApz
Utuc8avUyLon+P2NMutUA1cVS1waX7lYdumAIXfbAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUEB3dR9oVE0UcyVf8WXC24KAbHZQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzk3NTUwNDk5LTBlN2EtNDg2Ny1iNTFhLTkxYmY5ZjhiN2E5YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwJsnDANBgkqhkiG9w0BAQsFAAOCAQEAWjcFwit3NJoGkhzbBHrJake5X7uh
3qvCm0cHYaVtBXcH8aU71/gf0p1VqAmAnrbpX+U3x5tc77yKyUcKUbbcqWTX82zZ
gcI6MqOM843PqVtLgugCNgi1U4uU4IKW0FwXHAn8HZJSG4nZNtDDAalwo3IyDHLD
SQfvI/hDf9nk1ziDkZvM1VG3odsem/aKCWUxiWnejfja6SEReBm6JP1XLr7zkEeL
ocj/RIkfI+ZXcQRzKNNW5a/KEH3x0tiPHbx8G+xXaA+2vtcS84bNrqqXHnlPyGCd
PY5Yu8sonOeNIZz5OhuZwTVIh+YvrRc1BUxq/CouuGszoFepZ67jsznUcQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:19 2025 by rpki-client