Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c843971-be20-4ee3-a893-7ff916e12f2f.roa
File: 9c843971-be20-4ee3-a893-7ff916e12f2f.roa (raw, json)
Hash identifier: pFGrDIEhdRCh3F1QaakngUguBPgMhDZrW48ycdhre4g=
Subject key identifier: 59:F8:3A:A1:8B:B8:8E:20:90:51:61:A3:87:AE:A4:73:C4:EA:C6:BA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 600072E1AF219677975358DD871BED09F3B61DC0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c843971-be20-4ee3-a893-7ff916e12f2f.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f69:7480::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:00:72:e1:af:21:96:77:97:53:58:dd:87:1b:ed:09:f3:b6:1d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=e14a2d7657912b08c0234b97f6239b2095fa7b2e7982581fedf9475f45dca3a7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:9f:ab:da:51:c6:bc:a6:45:9f:46:ed:a1:
8b:75:9e:06:c3:d2:61:e1:41:70:a4:e9:e1:d6:09:
78:cd:be:58:a8:52:9c:7e:7f:69:05:d7:a3:2d:d7:
2f:12:e6:82:ed:1e:ae:9d:88:44:6d:3d:81:7f:3b:
74:1e:93:23:71:db:59:8e:c3:6d:43:5e:26:03:d6:
6b:5e:9d:f6:c1:b8:22:b7:e1:f4:6b:d5:13:7e:f9:
bd:5f:cf:91:96:e2:97:2a:da:56:5c:4e:f0:6d:95:
de:14:77:ad:85:6e:3a:9c:fe:8b:dc:92:4b:0a:45:
8c:07:35:4c:bf:6d:71:74:2e:06:50:fd:ec:5e:91:
4d:73:ff:46:59:75:2a:67:4e:03:a3:08:06:ca:52:
99:72:10:de:a1:7c:8e:00:d1:f7:77:ad:fb:c2:cf:
46:06:7a:f1:b9:e2:ed:27:ff:b5:53:da:c2:fc:6f:
ce:1b:17:19:f4:15:96:ee:08:14:bd:b8:c6:02:3f:
7e:10:e4:0b:8c:bb:99:a0:aa:34:fb:a2:8c:3a:33:
6d:5e:1c:ee:a4:35:8c:88:ba:25:b0:bc:46:38:39:
65:73:e8:ef:91:c6:90:60:01:9d:90:b0:f5:f4:7e:
e6:ae:31:4f:7a:db:b0:8c:63:07:9a:5e:be:29:8a:
76:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F8:3A:A1:8B:B8:8E:20:90:51:61:A3:87:AE:A4:73:C4:EA:C6:BA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c843971-be20-4ee3-a893-7ff916e12f2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f69:7480::/46
Signature Algorithm: sha256WithRSAEncryption
c7:3a:32:aa:e8:0e:ce:ff:54:5b:05:cb:92:60:09:e7:7c:60:
a4:11:1c:68:7d:de:da:98:22:a9:bf:20:1b:ac:f4:2b:39:10:
d1:48:72:60:bd:48:c7:7e:cd:9f:7c:b0:05:49:4b:34:f7:fe:
58:96:65:f0:16:76:95:6f:b0:21:9f:d9:f5:7c:50:d6:ca:b9:
c4:b9:ed:b0:52:f5:a8:6a:37:e4:b4:06:a4:23:08:69:2f:54:
6a:aa:a1:6f:76:f3:73:71:31:d7:c2:9c:d1:fb:1b:67:4b:1d:
b7:4a:24:37:8b:1b:fa:2a:c5:f8:1b:ad:81:6f:82:b3:d2:1e:
34:d6:1a:66:29:fd:df:35:df:d9:61:ec:aa:91:52:11:1e:df:
1e:a1:6e:a5:c8:50:fd:5d:a8:00:b1:78:f4:78:53:97:f4:5d:
11:1f:eb:12:f7:3d:43:7b:a8:b5:89:73:40:ec:4b:fb:5f:23:
c6:89:5c:83:87:5b:b6:91:78:11:50:ad:53:ad:ba:94:91:b6:
bf:c4:5a:e0:1f:65:d1:c5:1b:64:16:68:07:45:78:2f:fa:70:
6c:d6:dd:e4:06:b4:15:5e:a8:1a:05:5b:1b:26:2f:96:67:36:
1f:90:68:2c:76:aa:ff:4c:57:7f:0a:1a:ce:18:b9:65:d3:b9:
2d:80:8e:3a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUYABy4a8hlneXU1jdhxvtCfO2HcAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA3MDAwMDAwWhcNMjUwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0BlMTRhMmQ3NjU3OTEyYjA4YzAyMzRiOTdmNjIzOWIyMDk1
ZmE3YjJlNzk4MjU4MWZlZGY5NDc1ZjQ1ZGNhM2E3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrrp+r2lHGvKZFn0btoYt1ngbD0mHhQXCk6eHWCXjNvlio
Upx+f2kF16Mt1y8S5oLtHq6diERtPYF/O3QekyNx21mOw21DXiYD1mtenfbBuCK3
4fRr1RN++b1fz5GW4pcq2lZcTvBtld4Ud62Fbjqc/ovckksKRYwHNUy/bXF0LgZQ
/exekU1z/0ZZdSpnTgOjCAbKUplyEN6hfI4A0fd3rfvCz0YGevG54u0n/7VT2sL8
b84bFxn0FZbuCBS9uMYCP34Q5AuMu5mgqjT7oow6M21eHO6kNYyIuiWwvEY4OWVz
6O+RxpBgAZ2QsPX0fuauMU9627CMYweaXr4pinahAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUWfg6oYu4jiCQUWGjh66kc8TqxrowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzljODQzOTcxLWJlMjAtNGVlMy1hODkzLTdmZjkxNmUxMmYyZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAB9pdIAwDQYJKoZIhvcNAQELBQADggEBAMc6MqroDs7/VFsFy5JgCed8
YKQRHGh93tqYIqm/IBus9Cs5ENFIcmC9SMd+zZ98sAVJSzT3/liWZfAWdpVvsCGf
2fV8UNbKucS57bBS9ahqN+S0BqQjCGkvVGqqoW9283NxMdfCnNH7G2dLHbdKJDeL
G/oqxfgbrYFvgrPSHjTWGmYp/d8139lh7KqRUhEe3x6hbqXIUP1dqACxePR4U5f0
XREf6xL3PUN7qLWJc0DsS/tfI8aJXIOHW7aReBFQrVOtupSRtr/EWuAfZdHFG2QW
aAdFeC/6cGzW3eQGtBVeqBoFWxsmL5ZnNh+QaCx2qv9MV38KGs4YuWXTuS2Ajjo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:18 2025 by rpki-client