Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9809e303-ceeb-4605-a380-77419cc26af6.roa
File: 9809e303-ceeb-4605-a380-77419cc26af6.roa (raw, json)
Hash identifier: +DDb46JYjR9FlRjuJNZ4BtvvkG+oGTowgtQfj6QPrh0=
Subject key identifier: 7C:7B:6F:1F:74:C0:13:3C:23:26:1C:6E:2D:21:F6:4B:0E:9B:A9:C3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 40AD9D92FF3F515854E29B4FA9512337AE1B3CDF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9809e303-ceeb-4605-a380-77419cc26af6.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.18.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ad:9d:92:ff:3f:51:58:54:e2:9b:4f:a9:51:23:37:ae:1b:3c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: serialNumber=a655e9589d73bf38de0081402d6a8c11be56817459861ed8d778015746584f53, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:df:5d:d2:73:cf:36:ab:aa:d5:27:00:94:56:
24:53:e2:ce:55:df:6e:85:b4:40:67:e4:84:87:ac:
41:8e:95:47:57:85:8e:ec:64:13:4a:a7:d2:ae:bf:
7b:aa:77:59:a5:ba:ec:cf:be:fb:cb:26:13:e6:74:
55:88:cb:19:aa:ac:e0:d6:bd:84:01:06:f4:00:d2:
a6:d9:94:f1:96:d7:a8:8c:18:6f:73:9e:b0:74:60:
33:95:9d:7e:35:91:de:d9:3c:9a:2d:13:2a:3a:72:
dd:50:68:47:4a:b2:b4:da:b6:de:30:b6:f8:0e:70:
de:22:80:bb:79:17:e6:8f:7a:d3:b8:6a:c8:e6:66:
95:75:02:fd:98:03:2f:03:2b:b5:52:b9:cf:f7:4d:
ef:9c:54:d4:4a:c8:67:34:e2:0e:04:a1:43:45:5f:
69:27:00:41:e3:51:8f:52:6e:22:29:1a:9b:ba:88:
79:28:85:bb:03:91:14:20:33:9e:17:3c:7c:69:68:
5d:34:41:78:48:88:4b:0a:01:ee:c4:2e:05:28:9d:
f0:43:d6:37:fb:93:36:d7:c0:af:b2:96:f5:84:19:
f0:ca:ab:8f:60:2a:d6:4a:e6:21:bd:6e:06:9b:68:
e9:ad:e7:9b:89:23:6b:12:57:64:37:1c:46:d9:ab:
dd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7B:6F:1F:74:C0:13:3C:23:26:1C:6E:2D:21:F6:4B:0E:9B:A9:C3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9809e303-ceeb-4605-a380-77419cc26af6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.18.0.0/18
Signature Algorithm: sha256WithRSAEncryption
76:56:fa:42:83:f5:69:3d:e6:47:bc:04:54:dd:d4:86:84:a5:
ec:8d:26:4b:e7:ed:da:95:d0:25:9a:5b:ce:5f:c9:b9:aa:79:
8b:a8:2e:7e:81:65:0e:3d:8f:32:3a:eb:c2:c4:d7:74:6d:7b:
c5:dd:ab:72:97:63:6e:dd:49:60:bb:95:28:dc:07:c7:60:cf:
6d:83:73:45:9b:a1:79:82:be:40:e8:4c:98:fd:3b:1b:1c:9f:
26:5f:80:46:79:52:c9:30:b4:02:ad:e6:87:39:79:46:03:90:
c0:87:1f:65:3d:b2:fc:34:83:43:8b:03:a5:8e:c1:c7:2c:1a:
d5:fb:c2:f5:c8:55:e9:b8:c2:7a:74:f6:ce:e9:26:3f:78:68:
8b:37:7e:da:c4:1b:d4:3f:d0:0c:07:be:2f:96:b2:d9:2c:17:
48:de:1b:a7:c0:f3:50:c7:2a:29:05:1f:82:d3:42:5d:4e:1e:
51:d2:c6:57:c6:17:dd:d3:a3:82:ec:da:4b:35:e8:ee:77:5c:
1c:1c:e0:22:7b:63:d0:83:38:93:a8:34:da:86:08:11:00:05:
38:d2:91:7f:c1:4e:fa:8e:ed:6a:0f:a9:6c:09:03:1c:1c:54:
d8:79:34:eb:89:07:5f:65:04:79:05:fe:45:e2:8b:57:84:67:
68:89:ae:37
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQK2dkv8/UVhU4ptPqVEjN64bPN8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI3MDAwMDAwWhcNMjUwMzAzMjM1OTU5
WjB6MUkwRwYDVQQFE0BhNjU1ZTk1ODlkNzNiZjM4ZGUwMDgxNDAyZDZhOGMxMWJl
NTY4MTc0NTk4NjFlZDhkNzc4MDE1NzQ2NTg0ZjUzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDL313Sc882q6rVJwCUViRT4s5V326FtEBn5ISHrEGOlUdX
hY7sZBNKp9Kuv3uqd1mluuzPvvvLJhPmdFWIyxmqrODWvYQBBvQA0qbZlPGW16iM
GG9znrB0YDOVnX41kd7ZPJotEyo6ct1QaEdKsrTatt4wtvgOcN4igLt5F+aPetO4
asjmZpV1Av2YAy8DK7VSuc/3Te+cVNRKyGc04g4EoUNFX2knAEHjUY9SbiIpGpu6
iHkohbsDkRQgM54XPHxpaF00QXhIiEsKAe7ELgUonfBD1jf7kzbXwK+ylvWEGfDK
q49gKtZK5iG9bgabaOmt55uJI2sSV2Q3HEbZq90bAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUfHtvH3TAEzwjJhxuLSH2Sw6bqcMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzk4MDllMzAzLWNlZWItNDYwNS1hMzgwLTc3NDE5Y2MyNmFmNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAYyEgAwDQYJKoZIhvcNAQELBQADggEBAHZW+kKD9Wk95ke8BFTd1IaEpeyN
Jkvn7dqV0CWaW85fybmqeYuoLn6BZQ49jzI668LE13Rte8Xdq3KXY27dSWC7lSjc
B8dgz22Dc0WboXmCvkDoTJj9OxscnyZfgEZ5UskwtAKt5oc5eUYDkMCHH2U9svw0
g0OLA6WOwccsGtX7wvXIVem4wnp09s7pJj94aIs3ftrEG9Q/0AwHvi+WstksF0je
G6fA81DHKikFH4LTQl1OHlHSxlfGF93To4Ls2ks16O53XBwc4CJ7Y9CDOJOoNNqG
CBEABTjSkX/BTvqO7WoPqWwJAxwcVNh5NOuJB19lBHkF/kXii1eEZ2iJrjc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:29 2025 by rpki-client