Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c79c9547-b29c-4f41-b7c0-0fad2abd4863.roa
File: c79c9547-b29c-4f41-b7c0-0fad2abd4863.roa (raw, json)
Hash identifier: G5rsUtKRjFZiN7wxZyzKcaTrDxnXqQsOX49SGBeHkHQ=
Subject key identifier: 12:96:83:59:98:70:B9:0D:CB:FC:0B:A7:FA:C9:2A:20:65:B4:F0:7B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1D0BC4B65AB7E01E25DF1CAAEF15D865E30C23EA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c79c9547-b29c-4f41-b7c0-0fad2abd4863.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 204.17.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:0b:c4:b6:5a:b7:e0:1e:25:df:1c:aa:ef:15:d8:65:e3:0c:23:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=cfdd8fedde9bd7315514766df85aa74c5c837187a13787d4eb7ce0cb6fd02b9e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:75:2e:d3:23:99:40:7e:34:dc:f7:a5:e7:a1:
78:7c:8d:0e:48:ba:fc:c0:b0:9f:71:63:ce:08:34:
30:9d:3c:c1:42:1e:17:39:d8:87:87:d4:24:a1:93:
df:b6:b3:e3:92:8d:cc:7e:09:2e:80:3e:be:bf:00:
d2:6d:fa:7f:55:81:98:0c:ec:9b:dd:5b:92:4e:f5:
dc:3f:27:ca:40:b3:8c:3a:7b:e3:1b:63:a7:b4:6e:
4b:ed:29:2d:51:f2:df:a9:36:b1:83:9c:23:70:84:
29:b9:2e:2b:07:44:f9:b6:25:83:ba:8c:b2:e8:c0:
61:bf:05:53:d6:54:72:83:69:8b:c5:83:9e:4e:44:
4a:7a:3b:81:5c:06:94:d6:6c:71:6d:a1:49:5d:47:
bc:9f:42:2f:41:d7:75:9e:c2:a5:15:cf:66:7d:d1:
70:9b:cf:23:32:cb:f2:4c:08:05:2b:97:0e:2c:48:
8d:9a:80:27:fa:10:63:99:ee:61:c1:b1:e3:02:df:
36:36:7b:7f:f5:c2:8f:7f:18:1d:9e:5c:09:38:31:
34:45:e2:4a:bf:fb:38:10:8f:9d:53:75:1a:90:2c:
cb:d1:69:37:47:9c:89:13:4a:10:25:ea:ba:3c:7d:
ae:52:9d:f5:13:1a:55:50:7a:ac:5d:c8:60:8c:ec:
3a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:96:83:59:98:70:B9:0D:CB:FC:0B:A7:FA:C9:2A:20:65:B4:F0:7B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c79c9547-b29c-4f41-b7c0-0fad2abd4863.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.17.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9e:cd:52:86:be:15:43:e1:aa:c3:7a:1d:e8:fd:36:46:f3:a2:
40:2f:a8:e6:22:fb:a4:7f:6e:f5:aa:00:cd:ca:d2:9f:4e:9d:
b5:2f:1b:7e:b9:e1:15:d2:22:ae:5b:8b:ae:d3:ce:66:b0:da:
b7:7e:bc:ab:e6:ff:f5:7d:5a:a6:76:10:34:c4:ea:aa:ac:d4:
91:d2:c8:98:32:ed:4c:72:ee:05:b1:0a:56:1c:77:7a:c0:a7:
69:6f:95:c6:17:b9:24:80:09:ae:35:67:93:32:2f:20:96:78:
c8:0a:3a:2e:b2:6b:95:c7:ea:28:0c:5e:f9:e2:c0:66:c2:bf:
e0:4a:3e:0a:39:81:8c:d4:b7:6d:d6:f4:7a:00:f7:35:b4:a5:
4a:bf:3d:2c:10:95:31:ac:70:4e:a7:ca:fb:cc:e1:c5:de:44:
f8:e3:95:b2:2d:47:f4:0d:ed:81:cb:00:d4:7a:be:e8:a2:c4:
7a:39:6f:02:95:fe:d3:a5:7e:b6:98:42:91:36:ba:f4:ce:d2:
6a:88:88:dd:ca:e1:b4:53:83:53:22:9b:72:ab:96:55:67:c6:
e4:e1:06:40:7d:6a:ed:89:3e:22:1b:88:e5:fd:9c:e8:a9:42:
3a:b2:10:ef:2c:f3:18:98:af:49:26:7c:6e:6d:95:44:c6:c8:
30:5e:02:96
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHQvEtlq34B4l3xyq7xXYZeMMI+owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI4MDAwMDAwWhcNMjUwMzA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BjZmRkOGZlZGRlOWJkNzMxNTUxNDc2NmRmODVhYTc0YzVj
ODM3MTg3YTEzNzg3ZDRlYjdjZTBjYjZmZDAyYjllMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDgdS7TI5lAfjTc96XnoXh8jQ5IuvzAsJ9xY84INDCdPMFC
Hhc52IeH1CShk9+2s+OSjcx+CS6APr6/ANJt+n9VgZgM7JvdW5JO9dw/J8pAs4w6
e+MbY6e0bkvtKS1R8t+pNrGDnCNwhCm5LisHRPm2JYO6jLLowGG/BVPWVHKDaYvF
g55OREp6O4FcBpTWbHFtoUldR7yfQi9B13WewqUVz2Z90XCbzyMyy/JMCAUrlw4s
SI2agCf6EGOZ7mHBseMC3zY2e3/1wo9/GB2eXAk4MTRF4kq/+zgQj51TdRqQLMvR
aTdHnIkTShAl6ro8fa5SnfUTGlVQeqxdyGCM7Dr9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUEpaDWZhwuQ3L/Aun+skqIGW08HswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M3OWM5NTQ3LWIyOWMtNGY0MS1iN2MwLTBmYWQyYWJkNDg2My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAbMEUAwDQYJKoZIhvcNAQELBQADggEBAJ7NUoa+FUPhqsN6Hej9NkbzokAv
qOYi+6R/bvWqAM3K0p9OnbUvG3654RXSIq5bi67Tzmaw2rd+vKvm//V9WqZ2EDTE
6qqs1JHSyJgy7Uxy7gWxClYcd3rAp2lvlcYXuSSACa41Z5MyLyCWeMgKOi6ya5XH
6igMXvniwGbCv+BKPgo5gYzUt23W9HoA9zW0pUq/PSwQlTGscE6nyvvM4cXeRPjj
lbItR/QN7YHLANR6vuiixHo5bwKV/tOlfraYQpE2uvTO0mqIiN3K4bRTg1Mim3Kr
llVnxuThBkB9au2JPiIbiOX9nOipQjqyEO8s8xiYr0kmfG5tlUTGyDBeApY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:53:11 2025 by rpki-client