Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ccf275ae-7935-4f0a-b4e1-9b0bd0532ac8.roa
File: ccf275ae-7935-4f0a-b4e1-9b0bd0532ac8.roa (raw, json)
Hash identifier: kymc8BmpuV4Cg7Jp6nGEQkZ6Sj/ziDWJldgXp2RHbWE=
Subject key identifier: CB:D0:D5:B9:C7:38:3F:E6:32:3C:15:48:F2:97:DB:ED:41:D1:1E:05
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 578A06380880533E9D5897496EFBD9509CFE1371
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ccf275ae-7935-4f0a-b4e1-9b0bd0532ac8.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 40.176.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:8a:06:38:08:80:53:3e:9d:58:97:49:6e:fb:d9:50:9c:fe:13:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=5cb2c7f79b27131f9d70ed6d9808f6620ba310fe53c807fd75e36575cc3cc12b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:58:ec:1f:b6:90:0e:50:bd:7b:e3:11:fb:
78:78:de:f1:ca:8d:b5:5d:b0:5b:7b:16:7e:80:95:
09:6c:99:16:9f:93:01:11:ca:81:ae:42:d7:54:c5:
12:5f:74:a7:ef:44:21:36:25:5f:90:29:8c:82:11:
b5:de:41:db:96:82:3e:16:17:37:10:72:7b:98:02:
dd:45:be:43:2f:50:1f:29:ec:6a:32:ab:37:68:22:
cf:56:d2:f4:e7:25:35:50:90:d1:36:72:43:d6:14:
5e:9f:7a:86:7d:a2:28:f6:74:21:38:0e:cf:51:8f:
cc:64:04:d4:50:73:c3:22:55:9c:26:29:54:89:d9:
ab:2d:74:7b:bb:67:5d:d4:70:e2:bb:30:1a:26:4e:
33:2c:9e:f0:91:b7:38:e9:3b:4a:75:1a:72:f9:d2:
f1:ce:97:38:67:f5:05:59:0f:3a:e2:dd:9e:7b:a1:
61:c3:b7:24:2a:40:b2:b1:60:24:46:83:61:3e:12:
6b:a1:05:a2:50:79:2b:eb:29:bf:25:bc:d4:16:b4:
a5:0c:20:5f:68:08:32:6b:dc:5e:48:c4:a6:3c:a5:
23:2f:cd:eb:5f:d9:4f:3b:23:19:96:b4:f5:ba:f1:
b1:a6:6f:48:b2:dd:93:0a:f9:db:c7:3a:0e:60:c0:
9f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D0:D5:B9:C7:38:3F:E6:32:3C:15:48:F2:97:DB:ED:41:D1:1E:05
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ccf275ae-7935-4f0a-b4e1-9b0bd0532ac8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.176.82.0/24
Signature Algorithm: sha256WithRSAEncryption
62:01:7c:29:8b:ae:fa:dc:75:04:ff:cc:fb:bd:bb:6c:3a:57:
2f:65:1a:44:b3:a0:c4:90:95:29:96:0c:f6:f5:df:3a:c0:6b:
6a:29:ed:04:d3:9c:f8:a1:d2:10:85:ab:66:bc:15:0c:c5:8d:
c5:32:96:c3:6c:0f:ac:26:87:d3:a3:d3:69:e0:9d:f1:b5:e7:
bf:ff:73:cb:6a:60:74:37:07:63:f2:db:5f:1a:c2:6f:ef:e8:
bd:da:cf:ea:15:45:73:c2:22:1f:8c:18:eb:2b:a5:c7:70:39:
6c:31:e2:07:1c:b0:ab:fe:b8:6b:3f:81:91:b7:1b:f6:26:0d:
5d:68:6a:cc:72:c7:d5:c8:07:8f:25:df:9c:da:0e:1f:4a:83:
61:c1:ff:83:15:98:45:e5:f4:6f:54:6a:5a:e5:03:6e:40:c5:
f3:42:e7:d8:82:8f:a1:c2:b4:2d:1d:df:d6:df:de:e3:1c:f2:
7b:59:fa:0b:89:54:4b:0a:05:0c:53:80:49:9f:15:62:12:a3:
c7:1e:c4:d9:26:19:27:df:87:fb:32:ac:43:aa:20:11:32:1f:
34:91:e5:aa:78:98:b9:87:4c:07:9c:cb:2f:2b:fa:1d:c6:e0:
cf:89:4f:19:cb:92:59:87:9c:10:3b:99:63:f7:d3:81:b4:20:
ad:a8:33:03
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUV4oGOAiAUz6dWJdJbvvZUJz+E3EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A1Y2IyYzdmNzliMjcxMzFmOWQ3MGVkNmQ5ODA4ZjY2MjBi
YTMxMGZlNTNjODA3ZmQ3NWUzNjU3NWNjM2NjMTJiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC14ljsH7aQDlC9e+MR+3h43vHKjbVdsFt7Fn6AlQlsmRaf
kwERyoGuQtdUxRJfdKfvRCE2JV+QKYyCEbXeQduWgj4WFzcQcnuYAt1FvkMvUB8p
7GoyqzdoIs9W0vTnJTVQkNE2ckPWFF6feoZ9oij2dCE4Ds9Rj8xkBNRQc8MiVZwm
KVSJ2astdHu7Z13UcOK7MBomTjMsnvCRtzjpO0p1GnL50vHOlzhn9QVZDzri3Z57
oWHDtyQqQLKxYCRGg2E+EmuhBaJQeSvrKb8lvNQWtKUMIF9oCDJr3F5IxKY8pSMv
zetf2U87IxmWtPW68bGmb0iy3ZMK+dvHOg5gwJ+pAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUy9DVucc4P+YyPBVI8pfb7UHRHgUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NjZjI3NWFlLTc5MzUtNGYwYS1iNGUxLTliMGJkMDUzMmFjOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAosFIwDQYJKoZIhvcNAQELBQADggEBAGIBfCmLrvrcdQT/zPu9u2w6Vy9l
GkSzoMSQlSmWDPb13zrAa2op7QTTnPih0hCFq2a8FQzFjcUylsNsD6wmh9Oj02ng
nfG157//c8tqYHQ3B2Py218awm/v6L3az+oVRXPCIh+MGOsrpcdwOWwx4gccsKv+
uGs/gZG3G/YmDV1oasxyx9XIB48l35zaDh9Kg2HB/4MVmEXl9G9UalrlA25AxfNC
59iCj6HCtC0d39bf3uMc8ntZ+guJVEsKBQxTgEmfFWISo8cexNkmGSffh/syrEOq
IBEyHzSR5ap4mLmHTAecyy8r+h3G4M+JTxnLklmHnBA7mWP304G0IK2oMwM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:23:48 2025 by rpki-client