Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b01f5a39-26bb-4920-a2d3-e44bbf13abab.roa
File: b01f5a39-26bb-4920-a2d3-e44bbf13abab.roa (raw, json)
Hash identifier: KhiHIaeZP6NCXN910v+0McyPR9JyZVz58o8sVJWHjKA=
Subject key identifier: 0D:E0:E9:10:86:BE:61:8B:64:36:B4:7A:DD:28:7C:4A:6C:19:8C:6E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 270CF3F3CB2ADD4EBEC5A965048BF9FA6342FBF1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b01f5a39-26bb-4920-a2d3-e44bbf13abab.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 209.248.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:0c:f3:f3:cb:2a:dd:4e:be:c5:a9:65:04:8b:f9:fa:63:42:fb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=2f8c0158f558a3b46eb2dab5e5f63329eff9992b58594893e07cf35fe1c0c5c0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:84:cc:00:9d:d1:5a:e6:d0:c2:50:26:c0:
51:fe:88:b5:6f:20:79:a6:f6:c0:44:3d:e6:f1:68:
65:db:b5:54:e7:e1:04:8c:9e:2e:d2:e0:94:2b:99:
d7:6f:1e:1d:51:6a:fc:4b:31:93:40:f6:cb:8a:f3:
1d:a3:ea:af:a5:51:26:9e:71:f4:bd:b6:76:79:ee:
71:bd:03:5d:01:d2:b7:8c:bd:5f:a4:e0:8c:eb:89:
98:87:64:c2:06:87:4d:8f:99:70:f1:62:7d:af:92:
2f:58:c1:28:6f:4e:38:8a:e1:e4:e2:c3:4a:04:fc:
f9:2b:61:40:29:0b:9d:bf:8f:75:28:27:3d:22:cf:
55:9a:27:f7:14:9c:42:9c:73:2d:91:8b:f3:f1:48:
e0:ad:04:b3:64:0d:34:40:ce:89:49:c7:1d:04:05:
ac:bd:0c:08:0c:19:62:c4:11:3f:62:1d:3f:12:32:
26:ab:6e:f8:9f:9a:3b:e8:9f:a5:cc:27:23:f5:43:
fe:f1:1f:ee:cb:c0:df:64:7d:dc:1b:22:d4:e6:17:
ca:47:98:81:d6:b2:79:09:b9:8a:1e:ce:43:b8:4d:
63:2f:49:34:4d:4e:8b:0c:ea:d5:70:30:c2:b8:55:
79:fa:ea:8a:8b:64:21:0b:53:03:0b:2e:4c:08:a0:
ab:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E0:E9:10:86:BE:61:8B:64:36:B4:7A:DD:28:7C:4A:6C:19:8C:6E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b01f5a39-26bb-4920-a2d3-e44bbf13abab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.248.128.0/17
Signature Algorithm: sha256WithRSAEncryption
61:a4:36:a0:4f:28:25:a1:69:31:a3:ca:f3:64:e6:41:04:22:
36:fa:9e:bc:d8:9d:d8:f1:14:15:5a:a9:85:1c:63:c0:2c:44:
97:4d:57:d1:8c:29:8b:d7:95:a3:13:02:61:f9:52:d1:89:e6:
29:40:9e:82:4d:9e:cf:21:90:a8:dd:5e:ef:aa:e1:ea:84:83:
af:91:cf:ce:77:35:cb:6f:31:1f:52:6b:57:cb:fb:f5:0f:ab:
74:e6:70:4a:a5:81:a4:aa:66:86:2b:f2:1f:cc:4a:50:be:42:
27:4f:85:bb:73:35:07:b4:d0:d8:c1:51:8c:7b:20:61:37:52:
42:79:18:37:05:dd:ec:ad:53:c4:03:fb:91:12:c6:03:9d:9a:
6d:6b:fc:04:bf:c4:8d:fd:6b:d7:45:fc:73:07:83:22:93:ae:
ed:74:f4:fb:98:bd:4b:fc:a8:6b:86:b2:e0:d5:d9:11:9e:33:
73:fb:f8:33:a7:a4:31:78:73:40:c9:80:57:c9:80:e2:6e:31:
d9:72:bb:b6:1e:a0:53:07:be:83:32:77:13:74:d7:c4:a9:e3:
c1:56:35:0e:4d:ac:c7:96:29:09:15:c6:25:21:fb:99:82:aa:
01:b0:72:e9:c8:c9:38:30:41:30:9c:3c:97:82:31:0b:be:62:
a3:56:b6:d4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJwzz88sq3U6+xallBIv5+mNC+/EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI4MDAwMDAwWhcNMjUwMzA0MjM1OTU5
WjB6MUkwRwYDVQQFE0AyZjhjMDE1OGY1NThhM2I0NmViMmRhYjVlNWY2MzMyOWVm
Zjk5OTJiNTg1OTQ4OTNlMDdjZjM1ZmUxYzBjNWMwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxoYTMAJ3RWubQwlAmwFH+iLVvIHmm9sBEPebxaGXbtVTn
4QSMni7S4JQrmddvHh1RavxLMZNA9suK8x2j6q+lUSaecfS9tnZ57nG9A10B0reM
vV+k4IzriZiHZMIGh02PmXDxYn2vki9YwShvTjiK4eTiw0oE/PkrYUApC52/j3Uo
Jz0iz1WaJ/cUnEKccy2Ri/PxSOCtBLNkDTRAzolJxx0EBay9DAgMGWLEET9iHT8S
Miarbvifmjvon6XMJyP1Q/7xH+7LwN9kfdwbItTmF8pHmIHWsnkJuYoezkO4TWMv
STRNTosM6tVwMMK4VXn66oqLZCELUwMLLkwIoKuxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUDeDpEIa+YYtkNrR63Sh8SmwZjG4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2IwMWY1YTM5LTI2YmItNDkyMC1hMmQzLWU0NGJiZjEzYWJhYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAfR+IAwDQYJKoZIhvcNAQELBQADggEBAGGkNqBPKCWhaTGjyvNk5kEEIjb6
nrzYndjxFBVaqYUcY8AsRJdNV9GMKYvXlaMTAmH5UtGJ5ilAnoJNns8hkKjdXu+q
4eqEg6+Rz853NctvMR9Sa1fL+/UPq3TmcEqlgaSqZoYr8h/MSlC+QidPhbtzNQe0
0NjBUYx7IGE3UkJ5GDcF3eytU8QD+5ESxgOdmm1r/AS/xI39a9dF/HMHgyKTru10
9PuYvUv8qGuGsuDV2RGeM3P7+DOnpDF4c0DJgFfJgOJuMdlyu7YeoFMHvoMydxN0
18Sp48FWNQ5NrMeWKQkVxiUh+5mCqgGwcunIyTgwQTCcPJeCMQu+YqNWttQ=
-----END CERTIFICATE-----
Generated at Fri May 9 02:47:51 2025 by rpki-client