Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc8d3b59-053a-4d21-b23f-f8a30c8de2c7.roa
File: cc8d3b59-053a-4d21-b23f-f8a30c8de2c7.roa (raw, json)
Hash identifier: aP854zQgTfTBaK/8v5d5ecjTI2Ss8DOJ3tHGI6YLqsg=
Subject key identifier: 8D:0C:71:A4:8F:7E:DE:57:48:4A:D9:54:08:A3:39:4F:00:F6:81:B3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 57797E02EEBA5335E22C5405D23EB52F3EC5A3F2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc8d3b59-053a-4d21-b23f-f8a30c8de2c7.roa
Signing time: Tue 21 Jan 2025 00:00:00 +0000
ROA not before: Tue 21 Jan 2025 00:00:00 +0000
ROA not after: Tue 25 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 204.126.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:79:7e:02:ee:ba:53:35:e2:2c:54:05:d2:3e:b5:2f:3e:c5:a3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 21 00:00:00 2025 GMT
Not After : Feb 25 23:59:59 2025 GMT
Subject: serialNumber=f235058f5b8230064933c07ff9c54c201e4c4f31c2a9ba34128044e09891e397, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:44:a8:05:dc:63:92:63:ef:f9:7b:99:07:
af:f0:4a:19:99:ec:9f:9c:2e:68:ef:a2:f0:d0:99:
49:1f:ce:2a:3d:83:f9:10:c9:5c:15:52:85:5a:c6:
74:0d:8d:2f:21:06:f0:7d:1b:f1:73:d1:04:21:07:
e3:77:9a:ee:0c:cf:42:ab:10:64:86:2c:07:10:56:
28:d3:93:83:d6:10:22:e6:a7:d4:09:8e:89:76:38:
c6:d3:0c:72:dc:de:3d:9b:e0:37:8c:70:39:70:be:
23:ea:74:e0:c2:6f:b5:05:37:63:fa:5b:15:3e:be:
6b:12:b9:9c:49:89:62:e2:44:78:a9:53:ea:e9:24:
9f:d8:39:3a:1a:95:c6:5b:b3:bd:bb:93:3a:2b:ee:
52:21:dc:b6:cd:1c:8e:4b:83:03:3b:9a:4a:57:53:
43:1d:4c:4d:12:97:89:d2:00:a0:f9:74:2e:36:66:
11:d4:64:68:cd:b1:28:de:6b:25:e0:85:b7:94:cf:
70:77:f0:fc:96:46:41:9e:f5:c1:b9:ec:2b:f8:22:
56:14:59:63:01:a8:98:da:7d:be:76:60:e7:2c:39:
0d:5a:d8:c9:5c:62:c3:da:d2:fc:67:b8:d9:d7:a6:
1b:ff:99:1d:30:6c:47:92:3e:48:16:cb:9c:1f:dd:
6c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0C:71:A4:8F:7E:DE:57:48:4A:D9:54:08:A3:39:4F:00:F6:81:B3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc8d3b59-053a-4d21-b23f-f8a30c8de2c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.126.24.0/24
Signature Algorithm: sha256WithRSAEncryption
22:80:88:0b:b1:a3:e1:2c:6c:80:e9:ea:e6:17:c7:9a:9b:b7:
c5:25:2e:2b:c2:3b:c9:02:c9:a8:df:f8:f0:b5:1a:6d:4c:d3:
84:c7:b3:7b:4e:25:58:b1:24:ef:01:fd:04:d9:73:c8:06:e4:
a8:63:f0:e1:65:30:5d:d3:da:27:0d:78:63:59:fc:64:b1:11:
1a:b4:98:38:55:6b:dc:55:8a:9c:24:1b:72:f7:00:9e:4b:bf:
6b:20:59:b7:8a:2f:7b:83:4e:83:b2:00:45:80:e3:5e:74:0b:
90:56:54:91:3e:02:d4:7b:7d:d9:f2:4a:1e:48:c7:51:a3:eb:
53:c2:8c:b8:75:0c:e0:3d:36:e1:09:de:d1:d3:cf:38:8b:41:
06:54:60:02:14:87:e0:5b:90:93:e9:61:cb:0e:52:79:3e:cb:
34:0e:aa:85:92:e8:42:cf:56:af:7b:56:f2:62:b2:12:24:bc:
fb:74:9d:6d:55:55:ff:dc:b8:de:19:4d:32:07:2f:80:c8:4b:
71:16:f0:7c:7f:ef:9f:d2:f3:ea:5f:7f:b3:54:50:42:b6:52:
b7:bb:37:e0:33:54:cf:5e:9b:89:64:f8:60:25:39:57:4b:5a:
8c:4e:02:d6:a7:5f:8d:8c:4f:59:0b:87:3d:f9:44:af:15:68:
74:d0:1f:22
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUV3l+Au66UzXiLFQF0j61Lz7Fo/IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTIxMDAwMDAwWhcNMjUwMjI1MjM1OTU5
WjB6MUkwRwYDVQQFE0BmMjM1MDU4ZjViODIzMDA2NDkzM2MwN2ZmOWM1NGMyMDFl
NGM0ZjMxYzJhOWJhMzQxMjgwNDRlMDk4OTFlMzk3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCkQESoBdxjkmPv+XuZB6/wShmZ7J+cLmjvovDQmUkfzio9
g/kQyVwVUoVaxnQNjS8hBvB9G/Fz0QQhB+N3mu4Mz0KrEGSGLAcQVijTk4PWECLm
p9QJjol2OMbTDHLc3j2b4DeMcDlwviPqdODCb7UFN2P6WxU+vmsSuZxJiWLiRHip
U+rpJJ/YOToalcZbs727kzor7lIh3LbNHI5LgwM7mkpXU0MdTE0Sl4nSAKD5dC42
ZhHUZGjNsSjeayXghbeUz3B38PyWRkGe9cG57Cv4IlYUWWMBqJjafb52YOcsOQ1a
2MlcYsPa0vxnuNnXphv/mR0wbEeSPkgWy5wf3WwxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUjQxxpI9+3ldIStlUCKM5TwD2gbMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NjOGQzYjU5LTA1M2EtNGQyMS1iMjNmLWY4YTMwYzhkZTJjNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADMfhgwDQYJKoZIhvcNAQELBQADggEBACKAiAuxo+EsbIDp6uYXx5qbt8Ul
LivCO8kCyajf+PC1Gm1M04THs3tOJVixJO8B/QTZc8gG5Khj8OFlMF3T2icNeGNZ
/GSxERq0mDhVa9xVipwkG3L3AJ5Lv2sgWbeKL3uDToOyAEWA4150C5BWVJE+AtR7
fdnySh5Ix1Gj61PCjLh1DOA9NuEJ3tHTzziLQQZUYAIUh+BbkJPpYcsOUnk+yzQO
qoWS6ELPVq97VvJishIkvPt0nW1VVf/cuN4ZTTIHL4DIS3EW8Hx/75/S8+pff7NU
UEK2Ure7N+AzVM9em4lk+GAlOVdLWoxOAtanX42MT1kLhz35RK8VaHTQHyI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:47 2025 by rpki-client