Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d39e187c-88a8-41ad-918d-6d6c9508c20e.roa
File: d39e187c-88a8-41ad-918d-6d6c9508c20e.roa (raw, json)
Hash identifier: FofowVOc/fjELNADz0ElFOWG+Qg10KENvVIYNHqZ+o4=
Subject key identifier: 53:61:F0:18:1F:9F:E8:DD:1F:20:37:A6:86:C4:80:16:93:E7:04:1C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 63AD8577754B3CF4A1D869182EE6607120160E57
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d39e187c-88a8-41ad-918d-6d6c9508c20e.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 76.223.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:ad:85:77:75:4b:3c:f4:a1:d8:69:18:2e:e6:60:71:20:16:0e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=e33d2a1b881406b1f59ecf697799b0d9cf930b1f1cffd5bbbe7998dad091fa0f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:3f:33:ad:13:7d:41:5c:25:fb:af:01:71:
0c:3a:72:4e:0f:cd:b9:c7:ac:0c:65:8e:b6:a1:4c:
75:9e:de:21:1a:aa:c6:3d:ae:94:eb:58:e6:e8:2b:
9a:dd:bf:07:08:29:3f:31:6f:bc:30:57:c7:97:35:
f5:28:3a:30:59:b3:9c:13:e5:e4:cc:02:fb:37:9c:
62:76:46:98:2e:9a:9f:67:a9:a9:da:57:52:c5:da:
c2:3f:7e:ed:ed:55:b8:96:1e:aa:ab:cd:04:6f:d5:
e9:9e:85:0f:7d:da:3d:3a:5e:b3:a9:25:d5:36:1e:
c9:38:14:ac:c5:63:3d:4a:f1:7e:64:28:87:0f:6d:
1e:80:6e:ff:48:67:9d:8e:7e:29:c9:a2:bd:05:56:
d3:d3:7a:40:2e:7c:c2:96:c8:4c:9a:31:dc:41:16:
2c:37:36:b1:47:e9:8e:0e:24:cb:c9:e0:c3:3c:41:
53:e2:39:cf:a3:a4:bb:21:f3:72:af:96:10:85:ed:
42:0b:23:4a:91:e6:bd:39:cd:06:d6:a9:4a:3e:c5:
f7:ab:5a:62:2b:ff:4d:0e:5c:3b:19:23:77:1b:38:
9b:d0:17:82:ed:b7:30:58:94:2f:bd:f9:e7:13:90:
c9:8c:2c:b9:06:70:44:99:ff:9c:9a:8c:9e:fe:81:
47:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:61:F0:18:1F:9F:E8:DD:1F:20:37:A6:86:C4:80:16:93:E7:04:1C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d39e187c-88a8-41ad-918d-6d6c9508c20e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.136.0/21
Signature Algorithm: sha256WithRSAEncryption
85:9a:a5:c8:42:8c:d0:17:bb:4e:b1:d4:8d:8e:70:25:b7:f0:
85:cc:fa:db:e2:20:10:7e:59:2f:f0:f3:78:43:70:5e:44:64:
f2:d8:5a:fb:8d:08:85:36:09:fc:88:5c:82:31:7d:4e:0d:ae:
9f:15:8d:b8:a2:45:71:cc:bb:59:22:ff:f2:08:94:bd:3b:e3:
ba:58:72:8c:49:4a:d5:61:f3:95:48:1c:10:cc:c2:21:f4:ba:
32:9e:46:ea:91:76:bc:3b:e2:02:7a:97:a8:f9:a9:5d:a1:ff:
3b:9f:7e:1c:c5:4d:e4:66:9d:0e:88:7d:8e:93:84:49:a0:45:
04:6f:9a:aa:a4:21:74:b1:32:59:3d:af:f3:d9:a4:c8:f6:07:
56:73:33:85:10:c4:22:9a:20:cc:49:38:1d:21:7c:71:d1:79:
95:29:00:02:1b:e3:d4:52:0c:70:d9:44:25:dc:1e:a8:3f:08:
4a:a4:93:7f:f5:89:cd:cd:98:99:bd:d0:c5:73:dd:3a:1a:7d:
60:de:91:30:9f:b4:e9:4d:2f:9a:77:72:02:f6:5e:65:47:b3:
a5:91:ca:eb:a0:13:02:ff:bd:cf:50:76:2d:6e:48:53:79:bd:
15:bf:ef:e0:9f:97:f7:fa:23:96:be:8a:7c:24:fb:f6:53:f9:
64:3b:d6:45
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUY62Fd3VLPPSh2GkYLuZgcSAWDlcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI0MDAwMDAwWhcNMjUwMjI4MjM1OTU5
WjB6MUkwRwYDVQQFE0BlMzNkMmExYjg4MTQwNmIxZjU5ZWNmNjk3Nzk5YjBkOWNm
OTMwYjFmMWNmZmQ1YmJiZTc5OThkYWQwOTFmYTBmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCk/T8zrRN9QVwl+68BcQw6ck4PzbnHrAxljrahTHWe3iEa
qsY9rpTrWOboK5rdvwcIKT8xb7wwV8eXNfUoOjBZs5wT5eTMAvs3nGJ2Rpgump9n
qanaV1LF2sI/fu3tVbiWHqqrzQRv1emehQ992j06XrOpJdU2Hsk4FKzFYz1K8X5k
KIcPbR6Abv9IZ52OfinJor0FVtPTekAufMKWyEyaMdxBFiw3NrFH6Y4OJMvJ4MM8
QVPiOc+jpLsh83KvlhCF7UILI0qR5r05zQbWqUo+xferWmIr/00OXDsZI3cbOJvQ
F4LttzBYlC+9+ecTkMmMLLkGcESZ/5yajJ7+gUe7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUU2HwGB+f6N0fIDemhsSAFpPnBBwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2QzOWUxODdjLTg4YTgtNDFhZC05MThkLTZkNmM5NTA4YzIwZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANM34gwDQYJKoZIhvcNAQELBQADggEBAIWapchCjNAXu06x1I2OcCW38IXM
+tviIBB+WS/w83hDcF5EZPLYWvuNCIU2CfyIXIIxfU4Nrp8VjbiiRXHMu1ki//II
lL0747pYcoxJStVh85VIHBDMwiH0ujKeRuqRdrw74gJ6l6j5qV2h/zuffhzFTeRm
nQ6IfY6ThEmgRQRvmqqkIXSxMlk9r/PZpMj2B1ZzM4UQxCKaIMxJOB0hfHHReZUp
AAIb49RSDHDZRCXcHqg/CEqkk3/1ic3NmJm90MVz3ToafWDekTCftOlNL5p3cgL2
XmVHs6WRyuugEwL/vc9Qdi1uSFN5vRW/7+Cfl/f6I5a+inwk+/ZT+WQ71kU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:14 2025 by rpki-client