Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af26cb48-f252-4748-8895-3681196bc385.roa
File: af26cb48-f252-4748-8895-3681196bc385.roa (raw, json)
Hash identifier: tfFq5MEG80KWRByPVuzF1qzIKq283p6SLsAMX5S6NaQ=
Subject key identifier: 1C:2E:1D:6B:84:4E:96:74:D4:FA:9D:5B:D2:46:33:FD:0C:DC:C1:C4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1FA5229DC42CB7AF841DCAE2669AC706636DA34A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af26cb48-f252-4748-8895-3681196bc385.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.217.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a5:22:9d:c4:2c:b7:af:84:1d:ca:e2:66:9a:c7:06:63:6d:a3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=519ccdd55220f83c0c0a067ac7a97202f743701e5ea7224261d27edc7c3beb2f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f2:cf:8f:cc:c9:64:95:cd:08:77:c1:4b:b5:
9c:0b:42:9d:69:f8:77:58:e8:2b:e8:98:a2:80:39:
ba:97:5c:c2:ee:e2:3a:aa:53:3d:59:e7:d2:26:98:
1c:53:88:c1:bb:b8:96:dd:d6:9e:7c:3f:80:f1:61:
e3:49:28:24:3e:8f:17:02:d7:30:8d:1a:64:d4:7f:
95:70:62:d5:80:0b:29:82:21:99:99:f6:d1:f0:da:
d1:a4:9c:bb:9f:dc:69:e9:66:7e:32:ec:b7:56:22:
9b:e1:92:43:71:52:64:4e:d1:18:3f:81:68:51:81:
68:d7:68:6d:30:57:be:74:8a:aa:e8:a5:09:4f:a9:
b2:a3:92:da:bb:35:f0:e7:c6:c1:1f:8a:dc:10:cb:
dd:71:ae:43:9f:8b:4c:ad:a6:1a:7c:04:08:3c:33:
f3:2b:13:8d:63:cf:f0:6a:2e:82:30:4f:17:9f:9f:
02:f6:70:d1:b5:20:cd:fb:8a:74:65:9e:8c:80:2f:
ed:1d:b9:09:12:be:75:84:47:f0:28:f9:34:f7:08:
0a:b7:60:c2:12:a7:bd:4f:c8:f5:e7:00:1e:35:96:
e1:0d:6d:47:7f:41:82:71:d9:15:80:67:32:5f:ee:
2d:85:01:0f:5f:a3:94:dd:3b:5f:30:ec:65:a4:7f:
69:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2E:1D:6B:84:4E:96:74:D4:FA:9D:5B:D2:46:33:FD:0C:DC:C1:C4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af26cb48-f252-4748-8895-3681196bc385.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.217.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:fa:c2:76:77:c5:c8:78:97:0a:a1:4f:f1:d4:9e:87:9a:b2:
a7:e7:f8:4b:da:d7:94:06:75:e9:e5:30:9f:e4:97:d2:5e:49:
ab:f4:d1:76:fc:de:f2:f6:f8:28:a0:fa:a9:aa:0d:00:f0:42:
65:3a:f9:26:c2:d1:c3:60:e4:c0:64:c0:8f:c9:a5:d4:f4:84:
da:ee:7d:35:bb:27:5d:7e:b6:a2:60:29:8e:27:6a:d9:85:78:
7f:2b:d6:be:3b:0d:56:0d:94:74:03:6d:86:e9:d7:99:56:be:
03:30:94:0b:d0:32:60:96:7c:d9:c7:66:6a:24:42:c6:f6:b4:
52:90:64:3c:0a:0d:b7:05:ca:60:14:9d:46:d8:ec:de:4f:1d:
87:75:3b:86:3d:aa:75:7e:f3:a8:1f:86:ff:39:59:00:74:4e:
ba:c0:16:a2:61:d1:01:71:bd:53:08:7a:cf:c9:c7:30:35:4b:
54:69:7c:ce:ba:47:24:7e:81:92:98:99:9f:84:fb:54:1e:3b:
51:1e:45:f4:4f:07:7e:d3:6f:26:12:7c:ce:6b:df:a7:fd:c3:
34:19:78:0f:3b:78:f3:64:06:a1:c1:7b:c0:c1:6a:52:8c:1e:
4e:9b:19:96:39:ae:4e:33:9d:93:10:00:e4:a9:66:eb:03:15:
96:85:7b:43
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUH6UincQst6+EHcriZprHBmNto0owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MTljY2RkNTUyMjBmODNjMGMwYTA2N2FjN2E5NzIwMmY3
NDM3MDFlNWVhNzIyNDI2MWQyN2VkYzdjM2JlYjJmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDM8s+PzMlklc0Id8FLtZwLQp1p+HdY6CvomKKAObqXXMLu
4jqqUz1Z59ImmBxTiMG7uJbd1p58P4DxYeNJKCQ+jxcC1zCNGmTUf5VwYtWACymC
IZmZ9tHw2tGknLuf3GnpZn4y7LdWIpvhkkNxUmRO0Rg/gWhRgWjXaG0wV750iqro
pQlPqbKjktq7NfDnxsEfitwQy91xrkOfi0ytphp8BAg8M/MrE41jz/BqLoIwTxef
nwL2cNG1IM37inRlnoyAL+0duQkSvnWER/Ao+TT3CAq3YMISp71PyPXnAB41luEN
bUd/QYJx2RWAZzJf7i2FAQ9fo5TdO18w7GWkf2kzAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUHC4da4ROlnTU+p1b0kYz/QzcwcQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FmMjZjYjQ4LWYyNTItNDc0OC04ODk1LTM2ODExOTZiYzM4NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA42TANBgkqhkiG9w0BAQsFAAOCAQEAe/rCdnfFyHiXCqFP8dSeh5qyp+f4
S9rXlAZ16eUwn+SX0l5Jq/TRdvze8vb4KKD6qaoNAPBCZTr5JsLRw2DkwGTAj8ml
1PSE2u59NbsnXX62omApjidq2YV4fyvWvjsNVg2UdANthunXmVa+AzCUC9AyYJZ8
2cdmaiRCxva0UpBkPAoNtwXKYBSdRtjs3k8dh3U7hj2qdX7zqB+G/zlZAHROusAW
omHRAXG9Uwh6z8nHMDVLVGl8zrpHJH6BkpiZn4T7VB47UR5F9E8HftNvJhJ8zmvf
p/3DNBl4Dzt482QGocF7wMFqUoweTpsZljmuTjOdkxAA5Klm6wMVloV7Qw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:46:01 2025 by rpki-client