Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab46f61c-c8b0-4cea-811a-40e5b23b04dd.roa
File: ab46f61c-c8b0-4cea-811a-40e5b23b04dd.roa (raw, json)
Hash identifier: hO3tIdj8SQe42oIh4+Q+F+u81E+VZOM9FJZ9HNWqn9o=
Subject key identifier: 31:66:10:BD:51:A6:9A:23:0D:AF:2E:EF:38:B6:FF:BB:7A:99:7E:F4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 71D72B0D692E60D1FB4A2A088F841808DCDA748C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab46f61c-c8b0-4cea-811a-40e5b23b04dd.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f18::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:d7:2b:0d:69:2e:60:d1:fb:4a:2a:08:8f:84:18:08:dc:da:74:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=192934ca4d2d52134f4642a45f9bef942e56084b217dde7e59fb41a960bc85e3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:11:25:52:38:fc:8b:13:ba:e5:29:33:aa:
55:f3:c8:0c:d4:6c:d1:dc:aa:e0:b6:7f:75:89:8d:
20:8c:07:4a:9f:a3:50:8a:70:10:30:74:1b:b8:83:
7a:c5:ef:11:3b:7b:3f:5f:25:a2:b9:2f:2f:ff:11:
3c:dd:40:f3:c9:8c:ca:74:c4:73:2d:09:85:27:79:
f4:20:78:c1:6b:8d:8b:fc:b9:3b:9a:c8:fb:6c:b7:
d1:cd:5c:62:cc:c4:31:cc:b5:4a:04:2c:3a:29:5c:
59:35:bb:9d:db:c5:32:11:56:dd:b6:f6:49:31:4f:
f5:ec:d2:ff:6a:ac:a7:22:37:72:00:a3:b4:d7:c1:
e2:7d:1e:ac:94:25:3c:fa:26:eb:a1:4f:de:e4:2d:
c7:fe:dd:79:21:c7:82:59:5d:b2:d8:24:9b:f3:ec:
7c:04:92:4d:b3:86:9f:c9:7a:fa:f5:dd:ca:31:61:
09:10:f2:f1:18:c2:75:f3:4a:89:3c:cf:b3:0d:cc:
4c:a6:98:a0:f9:ec:f2:74:a6:3e:dd:fd:17:08:f5:
4d:29:25:58:b5:23:33:cf:00:cc:15:a7:33:d2:b5:
27:5b:6b:f1:c8:eb:72:bf:38:e8:14:c2:01:b8:7c:
31:68:b8:06:87:bc:b5:b2:93:89:3d:a6:eb:35:8b:
07:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:66:10:BD:51:A6:9A:23:0D:AF:2E:EF:38:B6:FF:BB:7A:99:7E:F4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab46f61c-c8b0-4cea-811a-40e5b23b04dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f18::/35
Signature Algorithm: sha256WithRSAEncryption
25:c7:1a:13:82:75:4a:bf:05:2e:eb:6a:20:1c:a6:92:d0:74:
f6:fd:df:c2:17:68:df:3a:50:ae:67:46:be:b0:07:49:03:e3:
cc:7e:53:0e:a1:43:e4:61:c2:d9:2c:65:bd:ed:70:9f:0a:49:
3f:e7:20:bb:31:38:b0:67:b7:cf:3a:2d:e6:5e:5c:f5:ef:cf:
15:10:6e:87:74:18:76:bb:30:6c:ed:23:79:9d:63:5e:d6:12:
a3:29:c5:36:b5:72:76:4f:3a:43:5a:fe:e2:36:48:ff:e6:e9:
54:e1:3a:28:3c:a6:22:14:58:03:e0:de:54:0e:4b:df:ef:be:
d4:d7:ed:14:5a:5a:6f:d9:7d:2e:e7:14:fc:2e:47:f9:11:6a:
e0:5c:ec:4e:94:9c:f6:58:69:6d:87:c6:ec:57:94:a0:74:79:
e3:b8:2d:f1:9b:b9:a6:c4:56:09:19:67:63:84:6a:70:ac:5e:
c5:19:54:56:99:c1:bd:bc:64:b1:41:06:af:d5:65:33:d8:57:
ed:a3:67:85:b8:ff:2f:41:8f:7a:6a:b6:68:bd:6e:45:4d:f8:
04:4d:6a:e8:36:1d:8d:81:ec:7a:33:3b:aa:dd:ca:42:87:5b:
c8:5c:1c:41:6c:a2:58:09:a6:b7:a6:1e:08:ff:f1:85:f5:04:
ac:4d:21:38
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUcdcrDWkuYNH7SioIj4QYCNzadIwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA4MDAwMDAwWhcNMjUwMjEyMjM1OTU5
WjB6MUkwRwYDVQQFE0AxOTI5MzRjYTRkMmQ1MjEzNGY0NjQyYTQ1ZjliZWY5NDJl
NTYwODRiMjE3ZGRlN2U1OWZiNDFhOTYwYmM4NWUzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxKBElUjj8ixO65SkzqlXzyAzUbNHcquC2f3WJjSCMB0qf
o1CKcBAwdBu4g3rF7xE7ez9fJaK5Ly//ETzdQPPJjMp0xHMtCYUnefQgeMFrjYv8
uTuayPtst9HNXGLMxDHMtUoELDopXFk1u53bxTIRVt229kkxT/Xs0v9qrKciN3IA
o7TXweJ9HqyUJTz6JuuhT97kLcf+3Xkhx4JZXbLYJJvz7HwEkk2zhp/Jevr13cox
YQkQ8vEYwnXzSok8z7MNzEymmKD57PJ0pj7d/RcI9U0pJVi1IzPPAMwVpzPStSdb
a/HI63K/OOgUwgG4fDFouAaHvLWyk4k9pus1iwcDAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUMWYQvVGmmiMNry7vOLb/u3qZfvQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FiNDZmNjFjLWM4YjAtNGNlYS04MTFhLTQwZTViMjNiMDRkZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgUmAB8YADANBgkqhkiG9w0BAQsFAAOCAQEAJccaE4J1Sr8FLutqIBymktB0
9v3fwhdo3zpQrmdGvrAHSQPjzH5TDqFD5GHC2Sxlve1wnwpJP+cguzE4sGe3zzot
5l5c9e/PFRBuh3QYdrswbO0jeZ1jXtYSoynFNrVydk86Q1r+4jZI/+bpVOE6KDym
IhRYA+DeVA5L3+++1NftFFpab9l9LucU/C5H+RFq4FzsTpSc9lhpbYfG7FeUoHR5
47gt8Zu5psRWCRlnY4RqcKxexRlUVpnBvbxksUEGr9VlM9hX7aNnhbj/L0GPemq2
aL1uRU34BE1q6DYdjYHsejM7qt3KQodbyFwcQWyiWAmmt6YeCP/xhfUErE0hOA==
-----END CERTIFICATE-----
Generated at Mon May 5 21:19:10 2025 by rpki-client